Welcome to TimTech (the "site" or the "Platform"). This policy explains how we protect privacy so you can use the site and its services with a clear picture of what we do. It also covers data we receive through Google APIs when a site owner connects a Google account in the admin. Please read it.
1. What this policy covers
- How this site handles personal data that can identify you, collected while you use the service.
- It does not cover sites we link to, and it does not cover people who are not engaged by us or taking part in running this site.
- If you connect Google Calendar or Google Search Console as a site owner, section 7 describes that data.
2. How we collect, process, and use personal data
- When you visit or join an activity, we ask for the personal data that activity actually needs, and we process and use it only for that purpose.
- Data that can identify you, records of purchases and transactions, and other personal data you later agree to provide, are used inside this site for the purpose they were collected, to deliver the service or perform a contract, or as required by law or by a competent authority. Otherwise we do not give data that can identify you to a third party, in Taiwan or abroad, and we do not use it for a different purpose.
3. How the data is protected
- The servers sit behind firewalls, antivirus, and the other security measures we need. Personal data is handled under strict controls. Only authorized people can access it. People who process it are under a confidentiality agreement, and a breach of that duty can have legal consequences.
- If we must ask a related party to perform a service, we require them to keep the data confidential and we check that they actually do.
4. Links to other sites
Pages here link to other websites, and you can follow those links. Those sites are not covered by this policy. Read their privacy policy.
5. Sharing personal data with others
We do not provide, exchange, rent, or sell your personal data to any person, group, private business, or government body, except where the law or a contract requires it.
Those exceptions include, without limitation:
- You have agreed.
- The law expressly requires it.
- It is necessary for national security or the public interest.
- It is necessary to prevent danger to your life, body, freedom, or property.
- Your use of this site breaks the terms of service, or may harm this site or anyone else, and disclosing your data is necessary to identify you, contact you, or take legal action.
- It is to your benefit.
- When we engage a vendor to help collect, process, or use your personal data, we supervise that vendor.
6. Cookies
To run the service, this site places and reads cookies on your computer. If you do not want that, set your browser's privacy level to high, or otherwise refuse cookies. Some features may then not work.
How to turn cookies off
Browsers let you change cookie settings. Look for Options or Settings in the browser menu. The links below are a starting point.
- Cookie settings in Chrome
- Cookie settings in Firefox
- Cookie settings in Internet Explorer
- Cookie settings in Safari
7. Google account data (OAuth)
TimTech is a multi-tenant website and booking platform. We access the Google user data below only after a site owner explicitly connects it in the admin for that site. We do not access Gmail, Google Drive, Google Photos, or contacts.
What Google user data we access
- Google Calendar (scope:
https://www.googleapis.com/auth/calendar): the calendar list, busy times (FreeBusy), creating, updating, and deleting events and Google Meet links for bookings, and the email addresses of invitees. Used only to schedule bookings for that site. - Google Search Console (scope:
https://www.googleapis.com/auth/webmasters.readonly): the property list and search performance (clicks, impressions, queries, pages). Used only to show search performance in the admin and for SEO monitoring. - We use Calendar data only to sync bookings to the merchant’s chosen calendar, and Search Console data only to display search performance in the merchant admin. We do not sell this data or use it for advertising.
Retention and deletion
- OAuth tokens are stored with that site's connection. When the site owner disconnects in the admin, the token is deleted or disabled, and we stop reading and writing Google data.
- Google Calendar: events are written on the site owner's own Google Calendar. This platform keeps only the event ID, so a reschedule or cancellation can stay in sync. Cancelling a booking attempts to delete the matching event. After a disconnect, events already on Google Calendar are the site owner's to handle.
- Search Console: we store only the property the site owner selected. Performance figures are mostly queried live, and are not used to train AI models.
- If the site or the account is deleted through this platform's process, that site's Google connection is removed with it.
- OAuth tokens are stored per site and deleted when the merchant disconnects. Calendar events live on the merchant’s Google Calendar; we store event IDs only to update or delete synced bookings.
AI and Limited Use
AI features on this platform (site copy, the admin assistant, the support knowledge base, and similar tools) use the OpenAI API and operate on the site owner's website content. They do not send raw, aggregated, or derived Google Calendar or Search Console data to any third-party AI or ML service for training or improving a model. We do not access Google Photos.
TimTech does not transfer Google Calendar or Search Console user data (raw, aggregated, or derived) to third-party AI/ML services for model training or improvement. AI features operate on merchant website content and do not receive Workspace API data.
The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
8. Changes to this policy
We may revise this policy when we need to. The revised terms will be posted on the site.