Privacy Policy

Information You Provide Directly

We collect information that you voluntarily provide when using our Service:

• Account Information: Name, email address, password, profile picture
• Business Information: Business name, address, phone number, business type, operating hours
• Payment Information: Billing address, payment method details (processed securely through Stripe)
• Customer Data: Information about your clients that you enter into the system (names, contact details, booking history)
• Service Information: Services you offer, pricing, duration, descriptions
• Communications: Messages you send through our platform, support requests, feedback

Information Collected Automatically

When you access or use the Service, we automatically collect certain information:

• Device Information: Device type, operating system, browser type and version, unique device identifiers
• Log Data: IP address, access times, pages viewed, referring URL, actions taken within the Service
• Location Data: General geographic location based on IP address
• Usage Data: Feature usage patterns, session duration, clicks, and navigation paths

Information from Third-Party Services

When you connect third-party services to your timepeep account, we may receive information from those services:

• Google: Calendar events, email address, profile information (when using Google Sign-In or Google Calendar integration)
• Microsoft: Calendar events, email address, profile information (when using Outlook Calendar integration)
• Zoom: Meeting details, user profile information (when using Zoom integration)

We use the information we collect for the following purposes:

Service Delivery

• Providing, maintaining, and improving the Service
• Processing bookings, appointments, and payments
• Sending booking confirmations, reminders, and notifications
• Synchronizing calendar events with connected third-party calendars
• Generating video meeting links for virtual appointments

Communication

• Responding to your inquiries and support requests
• Sending service-related announcements and updates
• Sending marketing communications (with your consent, where required)
• Notifying you of changes to our policies or Service

Improvement and Analytics

• Analyzing usage patterns to improve the Service
• Personalizing your experience based on preferences
• Developing new features and functionality
• Conducting research and analysis

Security and Compliance

• Detecting and preventing fraud, abuse, and security incidents
• Enforcing our Terms of Service and other policies
• Complying with legal obligations and responding to lawful requests
• Protecting the rights and safety of our users and third parties

timepeep integrates with various third-party services to provide enhanced functionality. This section describes what data we access from each integration and how we use it.

We do not sell your personal information to third parties. We may share your information in the following circumstances:

With Your Consent

We share information when you explicitly authorize us to do so, such as when you connect third-party services or share your booking page publicly.

Service Providers

We work with trusted third-party service providers who assist us in operating the Service:

• Cloud Hosting: Infrastructure and data storage
• Payment Processing: Stripe for secure payment handling
• Email Services: Transactional email delivery
• Analytics: Usage analysis and performance monitoring

These providers are contractually obligated to protect your information and may only use it to provide services to us.

Business Transfers

If we are involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

Legal Requirements

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the safety of our users or the public

Aggregated or De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for analytics, research, or other purposes.

We implement comprehensive security measures to protect your information:

Technical Safeguards

• Encryption: All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption
• Secure Infrastructure: Our servers are hosted in secure, SOC 2 compliant data centers
• Access Controls: Strict authentication and authorization mechanisms
• Token Security: OAuth tokens from third-party services are encrypted and stored securely
• Regular Updates: Systems are regularly patched and updated

Organizational Measures

• Employee training on data protection and security practices
• Limited access to personal data on a need-to-know basis
• Regular security audits and vulnerability assessments
• Incident response procedures for potential security breaches

Your Security Responsibilities

• Use a strong, unique password for your account
• Enable two-factor authentication when available
• Keep your login credentials confidential
• Notify us immediately of any unauthorized access

Important: While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to improve our security measures.

We retain your information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.

Retention Periods

• Account Information: Retained while your account is active and for 30 days after deletion request
• Booking History: Retained for 7 years for business record-keeping purposes
• Payment Records: Retained as required by tax and financial regulations (typically 7 years)
• Usage Logs: Retained for 90 days for security and troubleshooting purposes
• OAuth Tokens: Retained while the integration is active; deleted upon disconnection

Account Deletion

You can request deletion of your account at any time through your account settings or by contacting us. Upon deletion:

• Your personal information will be deleted or anonymized within 30 days
• Backup copies may be retained for an additional 30 days
• Some information may be retained as required by law or for legitimate business purposes
• Third-party integrations will be disconnected, but you should also revoke access from those services directly

You have various rights regarding your personal information. These rights may vary depending on your location.

Access and Portability

You can access your personal information through your account settings. You can also request a copy of your data in a portable format by contacting us.

Correction

You can update or correct your account information at any time through your account settings. If you need assistance, please contact us.

Deletion

You can request deletion of your account and personal data. Note that some information may be retained as described in the Data Retention section.

Marketing Communications

You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or updating your communication preferences in your account settings. Note that you will still receive transactional emails related to your account and bookings.

Third-Party Integrations

You can disconnect third-party services (Google, Microsoft, Zoom) at any time from your timepeep account settings. We recommend also revoking access from the third-party service's settings.

Exercising Your Rights

To exercise any of these rights, please contact us at hello@timepeep.com. We will respond to your request within 30 days. We may need to verify your identity before processing certain requests.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know

You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it.

Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions permitted by law.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights.

Do Not Sell My Personal Information

We do not sell your personal information as defined under the CCPA. We do not exchange your personal information for monetary consideration.

To exercise your CCPA rights, please contact us at hello@timepeep.com or use the contact information at the end of this policy.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: Processing necessary to provide the Service you requested
• Legitimate Interests: Processing for our legitimate business purposes, such as fraud prevention and service improvement
• Consent: Processing based on your explicit consent (e.g., marketing communications)
• Legal Obligation: Processing required to comply with applicable laws

Your GDPR Rights

• Access: Request access to your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request restriction of processing
• Portability: Request transfer of your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time for consent-based processing

International Data Transfers

Your data may be transferred to and processed in Ghana and other countries outside the EEA. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data when it is transferred internationally.

Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have violated your privacy rights.

We use cookies and similar tracking technologies to enhance your experience and analyze usage.

Types of Cookies We Use

• Essential Cookies: Required for the Service to function properly (authentication, security)
• Functionality Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how visitors use the Service

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• View what cookies are stored and delete them individually
• Block third-party cookies
• Block all cookies from specific sites
• Delete all cookies when you close the browser

Note that disabling cookies may affect the functionality of the Service.

Do Not Track

Some browsers have a "Do Not Track" feature. We currently do not respond to Do Not Track signals, but we respect your privacy choices through the other controls described in this policy.

Our Service is not intended for children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children under these ages.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at hello@timepeep.com. We will take steps to delete such information from our records.

If we discover that we have collected personal information from a child under the applicable age without parental consent, we will delete that information as quickly as possible.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.

When we make changes:

• We will update the "Last Updated" date at the top of this page
• For material changes, we will notify you via email and/or a prominent notice on our Service
• We will give you the opportunity to review the changes before they take effect

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We aim to respond to all privacy-related inquiries within 30 days. For urgent matters, please include "URGENT" in your email subject line.