Privacy Policy
TimeMagic is committed to protecting your data. This policy explains what we collect, why we process it, how long we keep it, and the choices available to you.
Table of contents
1. Scope and controller
This Privacy Policy applies to the TimeMagic marketing site, web application, and related support channels. TimeMagic (Pavel Kalashnikov) is the data controller for personal data processed through these properties.
2. Information we collect
We collect only what we need to run and improve TimeMagic:
- Account and identity data: name, email address, password or authentication tokens, workspace name, and role.
- Usage and device data: app interactions, time entries, device and browser information, IP address, and diagnostic logs to maintain reliability and security.
- Payment data: billing contact details and transaction identifiers processed via our payment provider; we do not store full payment card numbers.
- Support content: messages, attachments, and feedback you share with us.
- Cookies and similar technologies: described in our Cookie Policy.
3. How and why we use data
We process personal data for the following purposes and legal bases:
- Provide the service (contract): create and manage workspaces, authenticate users, deliver time tracking features, and provide customer support.
- Billing (contract/legal obligation): process payments, issue invoices, and manage subscriptions and taxes.
- Improve and secure TimeMagic (legitimate interest/consent where required): monitor performance, detect fraud or abuse, debug issues, and enhance user experience.
- Communications (legitimate interest/consent where required): send product updates, security notices, and respond to your requests. Marketing emails are sent only when permitted, and you may opt out at any time.
4. Sharing with third parties
We do not sell personal data. We share it only with:
- Service providers: cloud hosting, payment processing, email delivery, analytics (only when you have consented), and customer support tools bound by confidentiality and data protection terms.
- Workspace administrators: if you join a workspace, its admins may access your time entries and account details necessary for collaboration.
- Legal and safety: when required to comply with law, enforce our agreements, or protect the rights and safety of TimeMagic, our users, or others.
5. Cookies and tracking
We use cookies to keep you signed in, protect your account, remember preferences, and—only with your consent—measure product usage. Non-essential cookies (analytics or marketing) are not set until you opt in. You can review categories in the Cookie Policy and adjust preferences through your browser settings or the in-app consent controls when available.
6. Retention
- Account and workspace data: retained while your subscription or free workspace remains active.
- Backups and logs: typically retained for up to 90 days for security and disaster recovery.
- Billing records: retained for the period required by tax and accounting laws (usually 7 years).
- If you delete your account or request erasure, we remove or anonymize data unless we must keep it to meet legal obligations or resolve disputes.
7. Your rights and choices
Depending on your location (including the EU/EEA), you may have the right to:
- Access and obtain a copy of your personal data.
- Correct inaccurate or incomplete data.
- Delete your data or restrict its processing in certain circumstances.
- Object to processing based on legitimate interests or to direct marketing.
- Withdraw consent where processing is based on consent.
- Receive your data in a portable format.
- Lodge a complaint with your local data protection authority.
You can update profile details in your account or contact us to exercise these rights.
8. Security
We use administrative, technical, and physical safeguards—including encryption in transit, access controls, least-privilege practices, and ongoing monitoring—to protect personal data. No online service is 100% secure, so please keep your credentials safe and notify us of any suspected misuse.
9. International data transfers
TimeMagic may process data in countries other than where you reside. When data is transferred internationally, we apply appropriate safeguards such as standard contractual clauses or equivalent measures required by applicable law.
10. Children
TimeMagic is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us so we can delete it.
11. Changes and versioning
We will update this Privacy Policy when our practices change or to reflect legal requirements. We will post the new date above and, when appropriate, notify you in-app or via Telegram.
12. Contact
If you have questions or would like to exercise a privacy right, contact us at timelog@purple-magic.com.