Zeiterfassungsbuchhaltungsdurchführung

Privacy

Privacy, in brief

This notice covers the public preview website and email enquiries. Registration is by waitlist for now.

We will never sell your data.This includes your personal information, time entries, invoices and client details. Service providers may still process data to operate Zebu, as described below; that is not a sale of your data.

Who to contact

Write to hello@zebu.work with privacy questions or requests. The controller is Alan Woo, Leuschnerdamm 13, 10999 Berlin, Germany (see the Impressum).

Visiting this website

Hosting/CDN services receive your IP address, requested page, time and browser information to deliver and secure the site. The intended legal basis is legitimate interests (Article 6(1)(f) GDPR). The site is hosted by statichost.eu in the EU; its configuration, log retention, processing locations and any safeguards for transfers outside the EEA still need confirmation.

The downloads page also requests release information from app-downloads.zebu.work; the Firefox extension checks the same host for updates.

Page statistics and browser preferences

The site uses GoatCounter to understand visits, including pages, referrers, browser/device information and approximate location. Its privacy policy says it does not store raw IP addresses or use tracking cookies. Analytics settings, retention and legal basis are pending review.

Your chosen theme (zebu-theme) stays in local storage until cleared. The animation flag (zebu-typed) lasts for the tab session. The site does not set advertising cookies. Demos use fictional data and run locally.

If you email us or use the contact form

Contact-form messages (name, email, message) go to our own application server and are forwarded to us by email through our email provider, Brevo; the server does not store them. We use your address and message to respond, based on a pre-contractual request or legitimate interests (Article 6(1)(b) or (f) GDPR). Messages are kept as needed for the enquiry and legal obligations. The email provider and retention details still need confirmation.

Your rights

Where applicable, you can request access, correction, deletion, restriction or portability, object to legitimate-interest processing, and withdraw consent where used. Contact us above, or complain to a data protection authority.

Accounts and connected services

App and workspace-data privacy terms must be finalized before public registration opens; this website notice does not replace them. Login, download and external-service links connect to those services. Your chosen AI provider’s terms also apply when you use it.

Using the browser extension

The extension talks to one server: your own Zebu workspace, at a name.zebu.work address or your own install. It contacts nothing else. No analytics, no tracking, no third parties.

Your browser stores the workspace name, its sign-in token, your saved starting points, the project last used on each site, and your settings. It also keeps the name and email your workspace returns, so you can see which account is connected.

It sends your workspace the time entries you create or edit: project, task, date, duration and a note. The note can include the page’s title, its address and any text you had selected. Page details are read only when you act. It never watches your browsing or keeps a list of the pages you visit.

The “Track time” button appears on GitHub, GitLab, Jira, Linear, Asana, Trello, Bitbucket, ClickUp and Basecamp. Other sites need your permission first. Idle detection is off unless you turn it on, and reports only how long the machine was idle, never what you were doing.

All its code ships inside the package. Disconnecting clears the token; uninstalling removes everything it stored.

Draft reviewed 16 September 2026.