Privacy Policy

1. Information We Collect

We collect information you provide directly (name, email address, password), information generated through use of the Service (timelines, events, usage data), and technical information (IP address, browser type, device identifiers) to operate and improve the Service.

2. How We Use Your Information

We use the information we collect to: (a) provide, operate, and improve the Service; (b) process payments and manage subscriptions; (c) send transactional emails (account confirmation, invitations, billing); (d) detect and prevent fraud and abuse; (e) comply with legal obligations.

We do not sell your personal information to third parties.

3. Cookies and Analytics

We use cookies and similar technologies to maintain your session and remember preferences. We use analytics services (Google Analytics, Mixpanel, Vercel Analytics) to understand how users interact with the Service. These services may set their own cookies. You can opt out by disabling cookies in your browser.

4. Sharing of Information

We may share your information with: (a) service providers who assist in operating the Service (Supabase for database hosting, Stripe for payment processing, Resend for email delivery, Vercel for hosting); (b) law enforcement when required by law; (c) a successor entity in the event of a merger or acquisition.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

6. Security

We implement industry-standard security measures including encryption in transit (TLS), row-level security in our database, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to: access, correct, or delete your personal data; object to or restrict processing; and data portability. To exercise these rights, contact us at privacy@timelinex.app. EU/EEA residents may also lodge a complaint with their local data protection authority.

8. Children's Privacy

The Service is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13.

9. International Transfers

Your information may be transferred to and processed in countries other than your own. We take appropriate safeguards to ensure your data is protected in accordance with this policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service. Your continued use after changes constitutes acceptance.

11. Contact

Questions about this Privacy Policy? Contact us at privacy@timelinex.app.