1. Who We Are
This policy explains how Issoudun Pte. Ltd. ("we", "us" or "our"), a company incorporated in Singapore, handles personal data when you use timezone.io: the website, team boards and the API (the "Service"). We are the data controller for this personal data under the EU and UK General Data Protection Regulation (GDPR), Singapore's Personal Data Protection Act (PDPA) and similar laws.
- Address: 68 Circular Road, #02-01, Singapore 049422
- Data protection contact: [email protected]
2. Information We Collect
- Account data: your name, email address and password, your account settings, and the API keys you create.
- Team boards: the name of a team you create, and the details you, or the owner of a board, enter for you on that board: your name, time zone, city, country and photo, and your working hours and work days. If you add your email address to your own entry, we use it only to send you your personal link to that entry. Until working hours are added, the board assumes 09:00–17:00 on your country's usual work week.
- Billing data: if you start a checkout or subscribe to a paid plan: your billing name and address, tax ID, the plan and your payment history. Our payment processor handles your card details; we don't receive or store them.
- Messages: what you send us when you email us.
- Technical data: when you use the Service, we and our service providers process technical data such as your IP address, browser and device details, the pages you request and your approximate location, derived from your IP address.
You do not have to give us personal data, but we need your name, email address and a password to create an account, and a name and time zone to add you to a team board.
3. How We Use Your Information
| Purpose | Legal basis |
|---|---|
| Providing your account, team boards and the API, and emailing you about your account or board entry | Contract |
| Showing your entry on a team board you join | Consent (you can remove your entry at any time) |
| Delivering the website, including showing times in your time zone | Legitimate interest |
| Keeping the Service secure and preventing abuse, including screening sign-ups | Legitimate interest |
| Running and improving the Service, such as keeping track of new sign-ups and how the website is used | Legitimate interest |
| Replying to your messages | Legitimate interest |
| Billing and payments, and keeping the records tax and accounting laws require | Contract; legal obligation |
| Complying with the law | Legal obligation |
4. Cookies
We use cookies and similar browser storage only where the website needs them: to keep you signed in, to protect the website and its forms against abuse, and to remember settings you choose. We do not use them for advertising or tracking.
5. Data Sharing
We share personal data only:
- With service providers that help us run the Service, such as for hosting, content delivery, email, payments, error monitoring, analytics, sign-up screening and internal notifications. Our subprocessor list names our main providers.
- On team boards. A public board can be seen by anyone with its link: its members' names, cities, countries, photos, local times, working hours and whether they are working right now, and search engines may index a board they find. An unlisted board can be seen by anyone with its private link, the people on it and its owner; a private board by the people on it and its owner. Anyone with a board's invite link can add themselves to it. When you view a board, your browser loads any member photo added as a link from the website that hosts it, which can see your IP address.
- When the law requires it, or when it is necessary to protect the rights, property or safety of our users, the public or us.
6. International Transfers
We are a Singapore company, and we and our service providers may process your personal data in other countries, including the United States. Where the law requires it, we protect these transfers with an adequacy decision or with appropriate safeguards, such as the Standard Contractual Clauses. You can ask us for a copy of these safeguards at [email protected].
7. Data Retention
We keep personal data only as long as we need it for the purposes in this policy: your account data until you delete your account, a board entry until it is removed or its team is deleted, and billing records for as long as tax and accounting laws require. We delete other data, such as technical logs and messages, once we no longer need it for those purposes. We keep data longer only where the law requires it.
8. Your Rights
Depending on where you live, including under the GDPR and the PDPA, you have the right to:
- Access your data
- Correct inaccuracies
- Delete your data
- Restrict processing
- Data portability
- Withdraw your consent where we rely on it, at any time, without affecting the processing that took place before
Right to object: where we rely on legitimate interest, you have the right to object at any time, on grounds relating to your particular situation, to our processing of your personal data.
To exercise these rights, email [email protected]. You also have the right to complain to a data protection authority, such as the one where you live or work.
9. Changes to This Policy
We may update this policy. We publish changes on this page and update the date at the top.