Effective July 16, 2026
Account holders: your email address and, if you set one, a password hash. We never store the password itself, and accounts created with Google sign-in have none. Poll participants: the name you enter when responding and, if you ask for your edit link by email, that address. The polls themselves: titles, dates, availability answers. And if you join the Teams waitlist, the email you leave there, kept until Teams launches or you ask us to remove it.
Running the service: signing you in, showing who is available when, sending the emails a poll produces (links you request, invitations, reply notifications and deadline reminders on premium polls), and reaching you about your account. We don't sell your data or hand it to advertisers. Ads and analytics have their own sections below.
If you choose Continue with Google, Google sends us your verified email address plus your name and avatar. We keep only the email and use it to create or find your account. Signing in does not let us read your calendar or contacts, and Google's own privacy policy governs what Google records about the sign-in.
Connecting a calendar (Google, Outlook, or Apple) stores an access credential, encrypted at rest, used only to read busy/free blocks when you press the fill-from-calendar button on a poll. We receive the time intervals marked busy. Event titles, attendees, and locations never reach us. Disconnecting a calendar in settings deletes the stored credential immediately.
Purchases go through Polar, our merchant of record. Polar processes your payment details. Card numbers never touch our servers. We keep your subscription status and a ledger of your credits.
Ours: a session cookie that keeps you signed in, a language cookie if you switch languages, and a small cookie remembering whether you last signed in with Google or a password (so the login page can point you the right way). Your theme choice stays in your browser's local storage. Analytics and advertising cookies are third-party and covered in their own sections below. We don't fingerprint browsers.
We measure how Timeheat is used (pages viewed, signups, polls created, purchases) with Google Analytics, loaded through Google Tag Manager. The numbers are aggregate. We don't build profiles of individual users.
Free basic polls and the dashboard of free accounts may show ads served by Google AdSense. Google and its partners may use cookies to measure and personalize those ads. Where the law requires it (the EEA and UK, for example) you will be asked for consent first, and you can decline. How Google uses data on partner sites is described here. Premium polls and paying accounts don't show ads.
Timeheat runs on rented servers, and the emails you request are delivered by Resend on our behalf. Polar handles payments, and Google provides sign-in, calendar free/busy, analytics, and advertising as described above. These providers process your data only to provide their service.
Your data stays as long as your account or poll exists. Deleting a poll deletes its responses. Deleting your account deletes your polls, their responses, and your account data, permanently and immediately.
You can access everything we hold about you from your account, and delete it yourself at any time. For anything else (export, correction, questions) email support@timeheat.app and we'll sort it out.
If this policy changes materially, we'll announce it on this site.
