Effective Date: May 20th 2025

Welcome to timebox. Your privacy matters to us, and we’re committed to protecting your personal data while delivering a smooth, visual productivity experience.

1. Who We Are

timebox is a next-generation task management platform combining 3D visual thinking with real productivity tools. We operate in the EU and follow the General Data Protection Regulation (GDPR).

2. What We Collect

When you use timebox, we collect the following:

• Basic account info: Name, email address, password
• Optional business info: Company name, country, VAT number (if applicable)
• Authentication data: Login via Google, LinkedIn, or Apple (we never store third-party passwords)
• Payment details: Managed securely via Stripe
• Usage data: Analytics such as feature use, error logs, device type (anonymized where possible)
• Task data: Anything you voluntarily enter (tasks, comments, files)

3. How We Use Your Data

We use your data to:

• Operate and improve timebox
• Provide support and security
• Process payments
• Send essential account-related communications
• Fulfill legal obligations

We do not use your data to train AI models or sell it to third parties.

4. Who Has Access to Your Data

We only share data with trusted third parties needed to deliver the service:

• Stripe (payments)
• Google Analytics (usage metrics)
• Google / Apple / LinkedIn (if you use those to sign in)
• Hosting providers within the EU

5. Data Storage & Retention

• All data is stored securely on EU-based servers.
• Task/account data is kept until you delete your account.
• Server logs are retained for 90 days for security and debugging.
• Backups are retained for up to 90 days.

6. Your Rights

Under GDPR, you have the right to:

• Access the data we hold about you
• Request deletion of your account and associated data
• Correct inaccurate information
• Object to or restrict processing
• File a complaint with your local Data Protection Authority

We currently support account deletion and are working on self-service data export.

7. Children’s Privacy

timebox is not intended for children under 16. We do not knowingly collect data from minors.

8. AI and Your Data

We are exploring AI-powered features for productivity. These tools run on your data only for your use – we do not use your data to train AI models or build shared datasets.