Privacy Policy

Who we are

• TimenBill is operated by Time N Bill Pty Ltd (ACN 692 701 661, ABN 91 692 701 661) in Australia.
• For website visitors and account administration, TimenBill is the data controller.
• If you use TimenBill on behalf of an organization, that organization controls Customer Content and is the controller for that data.
• TimenBill acts as a processor or service provider for Customer Content under our DPA.

Personal information we collect

• Account and profile details such as name, email address, phone number, and role.
• Organization details including business name, billing contact details, and tax settings such as ABN.
• Workspace content you create or upload, including time entries, projects, tasks, invoices, expenses, receipts, documents, notes, and client contacts.
• Communications with us such as support tickets, onboarding questionnaires, and feedback.
• Billing and payment data such as plan selections, invoice history, and Stripe account identifiers or payment status.
• Technical and usage data such as IP address, device and browser details, logs, diagnostic events, and feature usage metrics.
• Marketing and sales data such as demo requests, surveys, and website form submissions.
• Advertising and attribution data for free plan workspaces, such as ad impressions or clicks.
• Integration data when you connect services like email or calendar, including metadata and content you authorize us to access.
• Public payment data when someone pays a TimenBill invoice, such as payer name, email, payment amount, and invoice reference.

We do not intentionally collect sensitive data unless you choose to submit it in Customer Content.

How we collect information

• Directly from you when you register, use the Service, or contact support.
• Automatically from your device or browser when you use the Service.
• From administrators in your organization who provision accounts and manage access.
• From third-party services you connect, consistent with your integration settings.
• From payment processors to confirm transactions and payment status.

How we use personal information

• Provide, operate, and maintain the TimenBill Service.
• Authenticate users, manage accounts, and administer permissions.
• Process billing, payments, and account provisioning.
• Deliver product features, integrations, and support services.
• Send service communications, security notices, and administrative updates.
• Monitor performance, improve features, and protect against fraud and abuse.
• Deliver and measure ad-supported experiences for free plan workspaces.
• Comply with legal obligations and enforce our terms.
• Detect, investigate, and prevent security incidents and misuse.

We do not sell personal information.

Legal bases (EEA, UK, and Switzerland)

• Performance of a contract to provide the Service.
• Legitimate interests in operating, securing, and improving the Service.
• Your consent where required, including for marketing, analytics, and advertising cookies.
• Compliance with legal obligations.

When we disclose personal information

• Service providers that host, store, support, or help secure the Service.
• Payment processors such as Stripe to facilitate payment services and payouts.
• Identity and collaboration providers such as Microsoft or Google when you use sign-in or integrations.
• Advertising partners to deliver and measure ads for free plan workspaces.
• Professional advisors, auditors, insurers, or regulators where required by law.
• Other parties in connection with a corporate transaction such as a merger or asset sale.
• Workspace administrators within your organization as part of account management.
• Other parties at your direction or with your consent.

We require service providers to protect personal information and only use it to provide services to us. Advertising partners are restricted to delivering ads within the Service and may not use data for their own purposes outside the Service.

We do not sell personal information. We may share limited identifiers with ad partners to deliver and measure ads in free plan workspaces, which is not a sale under applicable law.

International data transfers

We may store or process personal information in Australia and other locations where we or our service providers operate. Where required, we use appropriate safeguards for international transfers, such as contractual protections and security measures, and we take reasonable steps to ensure overseas recipients handle information in a manner consistent with this policy and applicable privacy laws.

Retention and deletion

• We retain personal information for as long as needed to provide the Service and meet legal requirements.
• When information is no longer required, we take reasonable steps to de-identify or delete it.
• Paid subscriptions that revert to the free plan receive a 30-day grace period and limited download-only window before deleting files above the free storage allowance.
• We may retain logs, billing records, and security data as required by law or to resolve disputes.
• Retention periods may be extended to establish, exercise, or defend legal claims.

Security

• We use administrative, technical, and physical safeguards designed to protect personal information.
• Access controls and encryption in transit are applied where appropriate.
• No method of transmission or storage is completely secure; you are responsible for account security.

Your rights and choices

• Access or correct personal information we hold about you.
• Request deletion of your account or content, subject to legal requirements.
• Export or retrieve your data where available in the product.
• Withdraw consent for integrations by disconnecting them in the product.
• Opt out of marketing communications at any time.

We may need to verify your identity before responding to certain requests.

Regional notices

We aim to comply with applicable privacy laws worldwide, including frameworks such as GDPR/UK GDPR, CCPA/CPRA, PIPEDA, LGPD, PDPA, and the NZ Privacy Act, where they apply to TimenBill services.

• Australia: We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
• EEA, UK, and Switzerland: You have rights to access, correct, delete, restrict, port, and object to processing.
• United States (state privacy laws): You may have rights to know, access, delete, and correct personal information and to opt out of certain processing.
• Canada: You may have rights to access and correct your personal information and to withdraw consent.
• Brazil (LGPD): You may have rights to confirmation, access, correction, anonymization, portability, deletion, and information about sharing.
• New Zealand: You may request access to or correction of your personal information under the Privacy Act 2020.
• Singapore: You may request access or correction and withdraw consent under the PDPA, subject to legal exceptions.

Automated decision-making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

Advertising and cookies

• We use essential cookies and local storage to keep you signed in and remember preferences.
• Free plan workspaces may use advertising cookies or similar identifiers to deliver and measure ads.
• See our Cookie Notice for details and choices where required by law.
• We honor Do Not Track or Global Privacy Control signals where required by law.
• You can manage analytics and advertising cookies in the preference center.

Children's privacy

TimenBill is not directed to children and we do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us so we can delete it.

Third-party links and services

The Service may include links to third-party sites or integrations. Their privacy practices are governed by their own policies, and we are not responsible for third-party services.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy here and update the effective date above.

Contact and complaints