Privacy Policy

This policy applies to the TimeWarp website, desktop application, support, accounts, and related services. TimeWarp is responsible for personal data it controls. For privacy questions or requests, contact support@timewarpdev.com.

• Account and contact data: name, email address, profile information, organisation, and authentication details.
• Workspace and content data: prompts, messages, files, workflows, memory, business context, and outputs you choose to provide.
• Connected-service data: authorisation tokens, account identifiers, and the data needed to perform an action you request through an integration.
• Usage and device data: feature interactions, diagnostics, IP address, device and browser information, timestamps, crash reports, and security logs.
• Support and commercial data: messages to us, feedback, plan information, billing status, and transaction references. Payment-card details may be handled directly by a payment provider rather than TimeWarp.

We receive data from you, your organisation, the devices you use, services you connect, and vendors that help us operate the Services. When an organisation provides your account, that organisation may control parts of the workspace and related data.

• Provide, personalise, maintain, and support the Services and complete actions you request.
• Authenticate users, protect accounts, prevent abuse, debug failures, and keep the Services reliable.
• Communicate about the Services, support requests, security, billing, and material policy changes.
• Understand product performance and improve features using appropriately limited data.
• Meet legal obligations, establish or defend legal claims, and enforce our agreements.

Where the GDPR or similar law applies, we rely on performance of a contract to provide requested services; legitimate interests such as security, support, and responsible product improvement; consent where the law requires it; and legal obligations. You may withdraw consent at any time without affecting earlier lawful processing.

Some TimeWarp features may run locally on your device and others may use cloud infrastructure or AI providers, depending on the feature and settings you select. When you connect an external service or ask TimeWarp to perform an action, the necessary instructions and data are shared with that provider. The provider’s own terms and privacy policy also apply.

We do not sell personal data. We may share it with:

• Infrastructure, authentication, analytics, support, payment, AI, and integration providers acting under appropriate contractual restrictions.
• Services you deliberately connect or recipients you direct us to contact.
• Professional advisers, authorities, or other parties when reasonably necessary to comply with law, protect rights and safety, or complete a corporate transaction.
• Your organisation’s authorised workspace owners or administrators where you use an organisation-managed account.

Providers may process data outside your country. Where required, we use recognised safeguards for international transfers, such as adequacy decisions or approved contractual clauses, together with appropriate technical and organisational measures.

We keep personal data only as long as needed for the purposes described here. The period depends on the account or workspace lifecycle, the type and sensitivity of the data, security needs, legal requirements, and whether it is stored in active systems or rolling backups. When data is no longer needed, we delete or anonymise it unless law requires longer retention.

We use technical and organisational safeguards designed for the nature of the data and risks involved. No service can guarantee absolute security, so you should also protect your credentials, devices, workspace permissions, and connected accounts.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal data, and to withdraw consent. You may also complain to your local data-protection authority.

Email support@timewarpdev.com to make a request. We may need to verify your identity. Where GDPR applies, we generally respond within one month, subject to lawful extensions for complex requests.

The Services are not directed to children under 13, or a higher minimum age where local law requires it. We may update this policy as the Services and legal requirements change. We will update the date above and provide additional notice for material changes where required.