Privacy Policy

Information we collect

When you create or use a Timelys account, we may collect information such as:

• name;
• email address;
• account credentials;
• preferred language;
• business information;
• account and subscription information.

Passwords are not stored in plain text.

Business information

When setting up or managing a business through Timelys, we may process information including:

• business name;
• business description;
• contact information;
• business locations;
• services and prices;
• staff or team members;
• working hours;
• booking availability;
• business preferences and settings.

Some of this information may be displayed publicly on the business's booking page.

Appointments and customer information

When an appointment is created through Timelys, we may process information such as:

• customer name;
• customer contact information;
• selected service;
• selected staff member;
• appointment date and time;
• appointment status;
• booking history;
• information provided in connection with the appointment.

When you book an appointment with a business using Timelys, the business receiving the booking may have access to the information you provide.

Technical information

When you use our Services, we may automatically receive limited technical information, such as:

• device type;
• operating system;
• application version;
• browser information;
• IP address;
• language and locale;
• diagnostic and error information;
• security and authentication information.

We may use this information to operate, secure, troubleshoot, and improve the Services.

Push notifications

If you enable notifications in the Timelys mobile application, we may process a device or push notification token so that notifications can be delivered to your device.

You can disable notifications at any time through your device settings.

How we use information

We may use personal information to:

• create and maintain Timelys accounts;
• authenticate users and protect accounts;
• provide appointment booking functionality;
• manage businesses, services, staff, locations, and schedules;
• process and display appointments;
• provide CRM functionality where available;
• synchronize information across Timelys services;
• send service-related communications and notifications;
• provide customer support;
• maintain the security and reliability of the Services;
• detect and prevent abuse, fraud, or unauthorized access;
• diagnose technical problems;
• improve Timelys;
• comply with applicable legal obligations.

We do not use personal information for purposes that are incompatible with the reason it was collected unless permitted or required by law.

Businesses and customer data

Timelys provides technology that allows businesses to manage their customers and appointments.

When a customer provides personal information to make an appointment with a business using Timelys, that information is made available to the relevant business.

Depending on the circumstances and applicable law, the business may act as the controller or responsible party for customer information, while Timelys may process that information on behalf of the business as a service provider or processor.

Businesses using Timelys are responsible for ensuring that they have an appropriate legal basis for collecting and using their customers' personal information and for complying with applicable privacy laws.

If your request concerns information held by a particular business through Timelys, you may need to contact that business directly.

Legal bases

Where laws such as the European Union General Data Protection Regulation (“GDPR”) or similar legislation apply, we process personal information based on one or more appropriate legal bases, which may include:

• performance of a contract;
• legitimate interests;
• compliance with legal obligations;
• consent, where required.

The applicable legal basis depends on the type of information and the context in which it is processed.

How we share information

We do not sell personal information.

We may share information where reasonably necessary to operate Timelys, including with:

Businesses using Timelys. Customer booking information may be provided to the business with which the customer has scheduled an appointment.

Service providers. We may use third-party infrastructure, hosting, database, email, notification, analytics, security, payment, and other technology providers to operate Timelys.

These providers may process information only as necessary to provide their services to us and subject to applicable contractual and legal requirements.

Legal and safety requirements. We may disclose information if reasonably necessary to comply with applicable law, legal proceedings, enforceable government requests, protect our rights, prevent fraud or abuse, or protect users and others.

Business transactions. If Timelys is involved in a merger, acquisition, restructuring, financing, or sale of all or part of its business, information may be transferred as part of that transaction subject to applicable law.

Third-party services

Timelys relies on third-party technology and infrastructure providers to operate the Services.

These providers may process limited information necessary to provide hosting, infrastructure, authentication, notifications, application distribution, payments, communications, or other functionality.

Third-party services have their own privacy practices, and their processing may also be governed by their respective privacy policies.

Payments and subscriptions

If paid subscriptions or other purchases are offered through Timelys, payments may be processed by third-party payment providers or application marketplaces, such as Apple's App Store.

Timelys may receive information about the status of a purchase or subscription, such as the purchased plan, transaction identifier, subscription status, renewal status, or expiration date.

Payment card information may be processed directly by the applicable payment provider rather than by Timelys.

Data retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain accounts and business records, comply with legal obligations, resolve disputes, enforce agreements, and protect the security of Timelys.

Retention periods may vary depending on the type of information, why it was collected, and applicable legal requirements.

When information is no longer required, we may delete or anonymize it in accordance with applicable law and our operational requirements.

Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include authentication controls, encrypted network communications, access restrictions, and secure infrastructure.

However, no internet-based service or method of electronic storage can guarantee absolute security.

Users are responsible for keeping their account credentials confidential and should notify us if they believe their account has been compromised.

International transfers

Timelys and the service providers we use may process information in countries other than the country where you live.

Where required by applicable law, we take appropriate measures designed to protect personal information transferred internationally.

Your privacy rights

Depending on where you live, you may have rights regarding your personal information, including the right to:

• request access to your personal information;
• request correction of inaccurate information;
• request deletion of personal information;
• request restriction of certain processing;
• object to certain processing;
• request portability of certain information;
• withdraw consent where processing is based on consent;
• lodge a complaint with an appropriate data protection authority.

These rights may be subject to exceptions and limitations under applicable law.

For information controlled by a business using Timelys, you may need to submit your request directly to that business.

Account deletion

Timelys users may request deletion of their account and associated personal information.

Certain information may need to be retained where required by law, for legitimate security or fraud-prevention purposes, to resolve disputes, or where another lawful basis for retention applies.

Deleting a Timelys business account may also affect information associated with that business, including appointments and customer records.

For App Store and Google Play distribution, Timelys may provide additional account-deletion functionality or instructions through the application or website.

Cookies and local storage

Our websites may use cookies, local storage, and similar technologies where necessary to:

• maintain user sessions;
• remember preferences;
• provide security functionality;
• operate essential website features;
• understand and improve the performance of the Services.

Where required by applicable law, consent will be requested before using non-essential cookies or similar technologies.

Children's privacy

Timelys is intended primarily for businesses and professionals and is not designed as a service directed to children.

We do not knowingly collect personal information directly from children in violation of applicable law.

Businesses using Timelys are responsible for ensuring that appointments involving minors are handled in accordance with applicable legal requirements.

Communications

We may send transactional or service-related communications necessary to operate your account, such as security messages, booking-related information, account notifications, or important changes to the Services.

Where we send optional marketing communications, you may unsubscribe from them using the method provided in the communication or by contacting us.