Privacy Policy

1. Controller and contact

TimeList is the controller of personal data processed on this platform.

To exercise your rights or ask privacy questions: privacy@timelist.com

2. Data we collect

• Registration: name, email, country, organization name, and password (when applicable).
• Profile: avatar, language preferences, and account settings.
• Product usage: projects, tasks, comments, time logs, permissions, and invites.
• Files and audio: attachments and recordings you upload to tasks and comments.
• Billing: payment data processed by Stripe (we do not store full card numbers).
• Technical: logs, cookies, IP address, and device identifiers for security and operations.

3. Google sign-in

If you choose to sign in with Google, we receive information such as your name, email, and profile photo as authorized by you on Google's consent screen.

We use this data for authentication, account creation, and basic profile personalization.

4. Purposes of processing

• Provide, maintain, and improve TimeList.
• Authenticate users and protect accounts.
• Process subscriptions and support requests.
• Send transactional communications (invites, notifications, operational emails).
• Comply with legal obligations and prevent fraud.

5. Third-party sharing

We use service providers to operate the platform, including:

• Supabase — database, authentication, and storage.
• Stripe — payment processing.
• Resend — transactional email delivery.
• Google — OAuth authentication when you choose that method.

6. Cookies

We use cookies and similar technologies to maintain your session, remember preferences (such as language), and ensure security. You can manage cookies in your browser, but some features may not work correctly if disabled.

7. Retention

We retain data while your account is active or as needed to comply with legal obligations, resolve disputes, and enforce our agreements.

8. Your rights

• Access and confirm whether we process your data.
• Correct incomplete or outdated data.
• Request deletion or restriction of processing where applicable.
• Request portability where applicable.
• Withdraw consent and obtain information about sharing.

9. Security

We implement technical and organizational measures to protect your data, including access controls, encryption in transit, and permission policies in the product.

10. Changes

We may update this Policy periodically. We will post the revised version on this page with the updated date.