Data handling
How we handle your data.
To find where your time is going, we have to look at real data from your business. Here is exactly how we treat it. For general website privacy, see our privacy policy.
Last updated: September 2, 2026
The short version: we only look at what the work requires, we never sell it or use it for another client, and the findings and systems we build are yours.
What we look at
During an audit we review the operational data you choose to share: email and ticket exports, calendar and time logs, tool reports, transcripts. You decide what to send. During the audit we read your data. We do not change anything inside your systems.
We take only what the work needs
The narrowest set of data that lets us do a good job, for the time we need it. If a summary works instead of raw records, we prefer the summary.
The tools we use
We use business-tier AI services configured so your data is not used to train public models. A person, not a model, is responsible for every conclusion we hand you.
These are the providers that may handle your data, and what each one does:
- Anthropic — the AI service behind our analysis, on commercial terms that keep your data out of model training
- Cloudflare — hosts this website and stores what you send us through our forms
- Resend — delivers the notification email when you submit a form
- Google — the mailbox that receives your enquiry and our day-to-day business email
If we add a provider that handles client data, we update this list.
What we never do
- Never sell your data or share it for advertising
- Never use one client's data to benefit another
- Never share it outside the people delivering your engagement, unless the law requires it
- Never keep access to your systems after an engagement ends
Confidentiality
Every engagement runs under a written agreement with confidentiality. Want a separate NDA in place first? Just ask, and we will sign one before you send anything.
Keeping and deleting it
We keep engagement data while we work together and for 12 months afterward. You can ask us to return or delete it at any point, except where the law requires us to keep something.
You own your data and your results
Your data stays yours. The findings, the plan, and the systems we build are yours to keep, even if you decide not to move forward after an audit.
Regulated data
Our standard process is built for data that is not subject to special regulation such as HIPAA. If your data carries specific requirements, tell us before you share anything.
Questions about any of this? Email hello@hourmakers.com and a person will answer.