Privacy Policy

This Privacy Policy applies to the website cleartimeline.com and all its subdomains (the "Sites"), together with the ClearTimeline application and services (the "Services"), owned and operated by Prime Techix trading as ClearTimeline ("ClearTimeline", "we", "us", or "our"). This Privacy Policy describes how we collect, use, share, and secure the personal information you provide to us. It also describes your choices regarding use, access, correction, and deletion of your personal information.

1. Definitions

Personal Information refers to any information about you which can be used to identify you. This includes information about you as a person (such as name, address, and date of birth), your devices, payment details, and even information about how you use a website or online service.

The Marketing Site refers to all public-facing informational pages on our website. This includes content such as the homepage, about us, contact information, product descriptions, and support resources. Essentially, it's any part of the site accessed from the main cleartimeline.com domain that provides information about our products and services but does not require user login.

The Web Application consists of all functional pages that are part of the ClearTimeline service delivery. This includes, but is not limited to, project dashboards, proof entries, scope tracking, approval requests, client progress portals, and any user account settings. These pages provide the interactive components of ClearTimeline where users can document their freelance work.

2. What Data We Collect

We collect both information you knowingly and actively provide us when using or participating in any of our services and promotions, and any information automatically sent by your devices in the course of accessing our products and services.

We only collect and use your personal information when we have a legitimate reason for doing so. In such instances, we only collect personal information that is reasonably necessary to provide our services to you.

We do not sell your personal information or any data you enter into our Services in any way.

Information That You Provide to Us About Yourself

When you sign up for the Services, we may request information such as:

• Contact Information: Name and email address.
• Unique Identifiers: Username and password.
• Project Information: Project details, proof entries, scope changes, deliverables, and approval requests that you create.
• Client Information: Email addresses and responses from clients you share timelines or approval requests with.

Information Collected Automatically

When you visit our website, our servers automatically log standard data provided by your web browser. This may include:

• Your device's Internet Protocol (IP) address.
• Your browser type and version.
• The pages you visit.
• The time and date of your visit.
• The time spent on each page.
• Other details about your visit.

Please be aware that while this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individual persons.

Information Collected After Opt-In Permission

Upon your consent, we use cookies and similar technologies to collect information about your activities on our website, as well as information about your device and log information.

Essential Cookies: Required for authentication, security, and core Service functionality.

Analytics Cookies: Used to understand how you use the Service and improve user experience.

Third-Party Cookies: Our service providers may set cookies for authentication and performance.

You can control the use of cookies at the individual browser level. If you choose to disable cookies, it may limit your use of certain features or functions on our website or Service.

3. Legal Basis for Processing (GDPR)

For users in the United Kingdom and European Economic Area, we process your personal data under the following lawful bases as required by UK GDPR and EU GDPR:

• Contract: Processing necessary to provide the Service to you, including account management, project timelines, and feature delivery.
• Legitimate Interest: Processing necessary to improve the Service, ensure security, prevent fraud, and analyze usage patterns. We balance our legitimate interests against your rights and freedoms.
• Legal Obligation: Processing necessary to comply with tax, accounting, and legal requirements under UK and EU law.
• Consent: For marketing communications, we rely on your explicit consent. You can withdraw consent at any time.

4. Third-party Service Providers

We share certain information with third-party service providers who assist us in operating our Service. This information is limited to the following:

Required for the Marketing Site and Web Application

The following services are required for the operation of ClearTimeline:

Vercel: We use Vercel to host our website, static assets, and server-side code.

Supabase: We use Supabase to store user information, authenticate users, and host our database.

For Users with Paid Subscriptions

The following services are used when you make a purchase:

Stripe: We use Stripe to handle payments and subscriptions. Stripe may collect and process payment information in accordance with their Privacy Policy.

Resend: We use Resend to send transactional emails such as approval requests and account notifications.

Optional Services

The following services are optional and are strictly opt-in:

Analytics: We may use analytics tools to collect visitor statistics. (Opt-in through cookie notice.)

5. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Service
• Improve, personalize, and expand our Service
• Understand and analyze how you use our Service
• Develop new products, services, features, and functionality
• Communicate with you about updates, security alerts, and support
• Send you marketing communications (with your consent)
• Detect, prevent, and address technical issues and fraud

We may collect, hold, use, and disclose information for these purposes, and personal information will not be further processed in a manner that is incompatible with providing you with our Service's core features.

6. Security

The security of your personal information is important to us. We implement adequate measures to protect the personal information submitted to us, both during transmission and once it is received. This includes:

• All data encrypted in transit using SSL/TLS
• All data encrypted at rest using industry-standard encryption
• Row Level Security (RLS) ensuring users can only access their own data
• Passwords hashed using industry-standard algorithms

We restrict access to personal information to our employees, contractors, and agents who need to know that information in order to operate, develop, or improve our Service. These individuals are bound by confidentiality obligations.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

7. Your Rights Under UK GDPR and EU GDPR

For users in the United Kingdom and European Economic Area, you have certain rights regarding your personal information under UK GDPR and EU GDPR:

• Right to Access: Request details of the personal information we hold about you.
• Right to Rectification: Correct any personal information that is inaccurate, out of date, incomplete, or misleading.
• Right to Erasure: Request the deletion of your personal information when it is no longer necessary.
• Right to Restriction: Request that we stop processing your personal information under certain circumstances.
• Right to Data Portability: Request to receive or transfer your personal information to another party.
• Right to Object: Object to processing of your personal information.
• Right to Withdraw Consent: Withdraw your consent where you have previously given consent.
• Right to Lodge a Complaint: Submit a complaint to the UK Information Commissioner's Office (ICO) or your local supervisory authority.

To exercise any of these rights, please contact us at info@cleartimeline.com. Requests will be addressed within 30 days in accordance with GDPR requirements.

8. Data Retention

We may retain your information for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes, and enforce our agreements.

If you delete your data or account, the data will be flagged for removal and will be deleted from our active systems within 90 days. Data may remain in encrypted backups for a limited period before permanent deletion. If you wish for your personal data to be completely removed from all systems, please send us an explicit request via email to info@cleartimeline.com.

9. Policy Regarding Minors

Our Service is intended for professional use by adults. We do not aim any of our products or services at minors, and we do not knowingly collect personal information from individuals under the age of 16. If we become aware that we have collected personal data from a minor without appropriate consent, we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. When we transfer personal data outside the UK or EEA, we ensure that appropriate safeguards are in place to protect your personal information.

Where personal data is transferred outside the UK or EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and appropriate safeguards under UK GDPR and EU GDPR. Our service providers (Supabase, Vercel, Stripe) comply with GDPR requirements and provide adequate data protection through Data Processing Agreements (DPAs).

11. Limits of Our Policy

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites and cannot accept responsibility or liability for their respective privacy practices.

12. Changes to This Policy

At our discretion, we may change our Privacy Policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this Privacy Policy, we will post the changes here at the same link by which you are accessing this Privacy Policy.

If the changes are significant, or if required by applicable law, we will contact you (based on your selected preferences for communications from us) and all our registered users with the new details and links to the updated or changed policy.

If required by law, we will get your permission or give you the opportunity to opt in to or opt out of, as applicable, any new uses of your personal information.

13. Governing Law

This Privacy Policy and any disputes arising from it shall be governed by and construed in accordance with the laws of England and Wales, including UK GDPR requirements.

14. Contact

If you have questions or concerns about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Email: info@cleartimeline.com

Data Controller:
Prime Techix trading as ClearTimeline acts as the Data Controller for personal information collected under this Privacy Policy.
Operating remotely (no physical office location)

Note: We do not have a formal Data Protection Officer as we are a small business. For all privacy-related inquiries, including GDPR requests, contact us at the email above and we will respond within the required timeframes (30 days for GDPR requests, 48 hours for general inquiries).