Privacy

This is a plain-language draft of how Time To Connect handles data. It has not been reviewed by a lawyer and describes what the software is built to do, not a legal promise. Do not rely on it until it has been reviewed and the placeholders below are filled in.

Who is who

The business that signs up (you) decides which customers to add and who to email. Time To Connect stores that data and sends the emails for you. Your customers are the people on your list.

What is stored

• Your account: your email address and a password (stored by the sign-in service as a hash, never as plain text).
• Your business: name, reply-to email, mailing address, time zone, optional booking link, and the time you confirmed you may email your customers.
• Your customers: name, email, a short label for the service, last service date and how often they come back. There is no field for free-form notes about customers.
• Emails sent for you and what happened to them: sent, delivered, bounced, marked as spam, clicked, or unsubscribed.
• What customers send back through the request page: the days they picked and an optional note of up to 1,000 characters.
• Your do-not-email list.

Who else handles it

The service depends on these providers, which process data on its behalf. This list must be kept in step with the product:

• Supabase: sign-in and the database.
• Resend: sending email and reporting delivery, bounces and spam complaints.
• Inngest: running the scheduled jobs that decide who is due and send the emails.
• The hosting provider: [to be filled in when the host is chosen].

There is no advertising and no analytics tracking in the product at this time.

Your customers' choices

Every email has an unsubscribe link and a one-click unsubscribe. When someone unsubscribes, bounces or reports spam, their address goes on your do-not-email list and is never emailed again. Customers do not need an account.

Your choices

• Download your customers as a CSV from the Customers page.
• Delete your account from Settings. This deletes your business, customers, email history, requests and do-not-email list.
• Delete a single customer at any time. Their address stays on your do-not-email list if they had unsubscribed.

How long data is kept

[Retention periods to be decided and filled in. Until then data is kept until you delete it or your account.]

Contact

[Contact email and business address to be added.]