This Privacy Policy describes how Timelines Global LLC ("Timelines Global", "we", "us", or "our") collects, uses, discloses, and protects your personal information when you use our website at timelines.global and our platform (collectively, the "Services").
Timelines Global LLC is incorporated in the State of Delaware, United States.
Contact email: contact@timelines.global
By using our Services, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree, please do not use our Services.
1. Information We Collect
1.1 Information You Provide
| Category | Data Collected | Purpose |
|---|---|---|
| Account Registration | Name, email, password, company name, country | Create and manage your account |
| Demo Booking | Name, email, company, phone number | Schedule and conduct product demonstrations |
| Platform Usage | Messages sent/received, contact lists, workflow configurations | Provide platform functionality |
| Payment | Billing address (payment card data processed by third-party providers) | Process subscription payments |
| Support | Support requests, chat transcripts | Provide technical assistance |
1.2 Information Collected Automatically
When you use our Services, we automatically collect:
- Device information: Browser type, operating system, device identifiers
- Usage data: Pages visited, features used, time spent, click patterns
- Log data: IP address, access times, referring URLs
- Cookies and tracking technologies: See Section 8 below
1.3 Information from Third Parties
We may receive information about you from third-party services you connect to the platform, as well as from analytics providers. Data we receive from Facebook, Instagram and WhatsApp is described in Section 13.
2. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve our Services
- Process transactions and send related notifications
- Respond to your support requests and inquiries
- Send promotional communications (with your consent; you may opt out at any time)
- Monitor and analyze usage trends to improve user experience
- Detect, prevent, and address fraud, abuse, and security issues
- Comply with legal obligations and enforce our Terms
3. How We Share Your Information
We do not sell your personal information. We may share information with:
- Service providers: Cloud hosting, payment processing, analytics, email delivery, and customer support tools, all operating under our instructions and contractual obligations
- Connected services: When you connect a third-party service, data is shared with that service according to your settings
- Legal requirements: When required by law, subpoena, court order, or to protect our rights, property, or safety
- Business transfers: In connection with a merger, acquisition, bankruptcy, or sale of all or a portion of our assets
Third-Party Service Providers
We use the following categories of service providers:
- Analytics: Google Analytics (anonymized data for usage analysis)
- Payment processing: Stripe (we do not receive or store your payment card details)
- Cloud hosting: Amazon Web Services (AWS)
- Customer support: handled in-house via the Timelines web-chat widget (no third-party support sub-processor)
- Email communications: Third-party email service providers
4. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our Services. Specific retention periods:
- Account data: Retained while your account is active. Deleted within 90 days of account termination.
- Messaging history: Retention varies by plan (1 to 6 months). See our Terms and Conditions for details.
- Support data: Retained for up to 24 months after resolution.
- Analytics data: Aggregated and anonymized data may be retained indefinitely.
We may retain certain information longer if required by law or for legitimate business purposes such as resolving disputes or enforcing our agreements.
5. Your Privacy Rights
5.1 Rights for All Users
Regardless of your location, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your personal information (subject to legal exceptions)
- Opt out of promotional communications at any time
- Export your data in a portable format
To exercise any of these rights, contact us at contact@timelines.global. We will respond within 30 days.
5.2 California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the categories of third parties with whom we share it.
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
- Right to Correct: You may request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information as defined by the CCPA/CPRA.
- Right to Limit Use of Sensitive Personal Information: We only use sensitive personal information for purposes permitted under the CPRA.
- Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
To make a verifiable consumer request, email contact@timelines.global with the subject line "CCPA Request". We will verify your identity before processing your request and respond within 45 days.
5.3 Other U.S. State Privacy Rights
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with comprehensive privacy laws have similar rights to access, correct, delete, and opt out of certain data processing. Contact us at the email above to exercise your rights.
5.4 European Economic Area (GDPR)
If you are located in the EEA, UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including:
- Right of access, rectification, and erasure
- Right to restrict processing
- Right to data portability
- Right to object to processing based on legitimate interests
- Right to lodge a complaint with a supervisory authority
Our legal bases for processing include: performance of a contract, legitimate interests, consent, and compliance with legal obligations.
6. Data Security
We implement appropriate administrative, technical, and physical safeguards to protect your information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Access controls limiting data access to authorized personnel only
- Regular security assessments and vulnerability testing
- Employee confidentiality agreements and training
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
7. International Data Transfers
Your information may be transferred to and processed in the United States or other countries where our service providers operate. When we transfer data internationally, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission where required.
8. Cookies and Tracking Technologies
Types of Cookies We Use
- Essential cookies: Necessary for the platform to function. Cannot be disabled.
- Performance cookies: Help us measure and improve site performance (e.g., Google Analytics).
- Functionality cookies: Remember your preferences and settings.
Managing Cookies
Most browsers allow you to control cookies through browser settings. You can delete existing cookies and configure your browser to refuse new cookies. Note that disabling cookies may affect platform functionality.
For more information about cookies, visit aboutcookies.org.
Do Not Track
Some browsers offer a "Do Not Track" (DNT) setting. We currently do not respond to DNT signals, as there is no industry-standard interpretation of DNT for web services.
9. Children's Privacy
Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly. If you believe we have inadvertently collected information from a child, please contact us immediately.
10. Third-Party Links
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party site you visit.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, sending you an email notification. The "Last revised" date at the top indicates when the policy was last updated.
Your continued use of our Services after changes become effective constitutes acceptance of the updated Privacy Policy.
12. Data Processing Agreement (DPA)
Timelines Global LLC provides a standard Data Processing Agreement in compliance with Article 28 of the GDPR and applicable U.S. data protection laws. This DPA applies automatically to all customers who use our services.
13. Data from Meta Platforms
Businesses can connect their Facebook Pages, Instagram professional accounts and WhatsApp Business Platform numbers to Timelines. This section explains what data we receive from Meta Platforms, Inc. ("Meta") through those connections and how we handle it. It applies together with the rest of this Privacy Policy.
13.1 What We Receive
- The business's accounts: the ids and names of the connected Facebook Page, Instagram professional account and WhatsApp Business account and phone number, and the access tokens Meta issues so Timelines can send and receive messages for them.
- The people who message the business: the id Meta assigns to each person (the Page-scoped id on Messenger, the Instagram-scoped id on Instagram, and the WhatsApp id or business-scoped user id on WhatsApp), and their name and profile picture.
- Messages: the content of messages sent and received in those conversations, including attachments such as images, audio, video and documents.
- Message statuses: whether a message was sent, delivered, read or failed.
13.2 Why We Use It
We use this data only to show the business's conversations in Timelines and to let the business read and answer them. We do not use it for anything else.
13.3 Storage
This data is stored encrypted on Amazon Web Services in the United States.
13.4 No Selling, No Advertising
- We do not sell data we receive from Meta.
- We do not use it for advertising, ad targeting or building advertising profiles.
- We do not share it with anyone except the service providers we need to run Timelines, such as our cloud hosting provider, who act only on our instructions.
13.5 Retention
We keep this data while the business keeps the channel connected and keeps its Timelines workspace. When the business disconnects a channel, we stop receiving data from it and stop using its access token; the conversations already received stay in the business's workspace. When the workspace is closed, all of this data is deleted, including the access tokens, messages, attachments and customer profiles.
13.6 How to Delete It
- Disconnect the channel in Timelines (the Channels page of your workspace). We stop receiving data from it right away.
- Remove the Timelines app in your Facebook settings (Settings & privacy, Settings, Apps and websites or Business integrations). Meta then revokes our access.
- Ask us to delete it through our data deletion page or by email to contact@timelines.global. We complete deletion requests within 30 days.
- Close your Timelines workspace. All of the data above is deleted with it.
Full instructions are on our data deletion page for Facebook, Instagram and WhatsApp.
14. Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a complaint, contact us at:
Timelines Global LLC
Email: contact@timelines.global
Website: timelines.global
For CCPA/CPRA requests, email with the subject line "CCPA Request".
For GDPR requests, email with the subject line "GDPR Request".