Privacy Policy

Effective date: 11/11/2026

1. About this policy

TimeSuite Software Corporation ("TimeSuite", "we") provides the TimeSuite web application and the TimeSuite Mobile app (the "Service") as a commercial service, intended for use as is. This page explains our policies on the collection, use and disclosure of personal information when you use the Service. Companies ("Customers") give accounts to their employees and contractors ("Users") and control the business records in their account.

If you choose to use our Service, you agree to the collection and use of information in relation to this policy. We will not use or share your information with anyone except as described in this policy. The terms used in this policy have the same meanings as in our Terms and Conditions, unless defined here.

2. Information we collect and how we use it

We use the information below to provide, improve, secure and support the Service, and retain it as described in section 6.

Account information: your name, work email and other details entered by you or your administrator.
Business records: timecards, jobs, tasks, work orders, forms, documents and email logs you create.
Background and foreground location (mobile app): used to determine whether you have entered or left a job or project geofence, and to prompt you to clock in or out of that job or project.
Motion activity (mobile app): used to preserve your battery. When you are stationary, the app does not monitor your location; when you are moving, it obtains your location periodically. Movement data is used to tell whether you are walking or driving and is stored with the GPS location data. No health data is collected or retained.
Connected email and calendar data: only if you connect an account (sections 4 and 5).
Log data: if the app hits an error, we collect data through third-party products, such as your device's IP address, device name, operating system version, the app's configuration, the time and date of use, and other statistics.

Third-party services. The app uses third-party services that may collect information used to identify you, including Google Play Services.

Cookies. Cookies are small files commonly used as anonymous unique identifiers, sent to your browser by websites you visit and stored on your device. The Service does not use cookies explicitly, but third-party code and libraries it uses may use them to collect information and improve their services. You can accept or refuse these cookies and know when one is being sent to your device. If you refuse them, some parts of the Service may not work.

3. Sharing and service providers

We share personal information only:

with other Users in your company, according to the permissions your administrator sets;
with third-party companies and individuals we employ to facilitate the Service, provide it on our behalf, perform Service-related services, or help us analyze how the Service is used. These include hosting providers, Nylas (email and calendar connections) and Sentry (mobile error reports). They have access to personal information only to perform these tasks and are obligated not to disclose or use it for any other purpose;
when required by law, or as part of a merger or acquisition.

4. Connected email and calendar

Connecting your email account is optional. You sign in with your provider, such as Google or Microsoft, through our integration provider Nylas. TimeSuite never sees your password. Once you connect, TimeSuite:

sends the emails you send from TimeSuite from your own address;
reads replies to those emails and saves them to the related record's email log, which colleagues who can open that record can see;
shows logged emails and their attachments when you open them;
if calendar sync is on, syncs all events on your primary calendar, including events marked private, with your TimeSuite schedule in both directions. Only each event's title and time are synced, and synced events are visible to colleagues who can see the schedule.

TimeSuite does not read your other emails or calendars and never changes or deletes anything in your mailbox. You can disconnect at any time from the email window, or revoke access at myaccount.google.com/permissions. Access ends immediately.

5. Google user data

When you connect a Google account, TimeSuite requests:

Gmail send: to send emails from your address.
Gmail read-only: to read replies to emails TimeSuite sent and to show logged emails.
Calendar events and calendar read-only: to sync your primary calendar with your TimeSuite schedule.
Basic profile: to confirm the account matches the email address you are connecting.

TimeSuite's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only for the features above. We share it only with Nylas and with your company's Users as part of those features. We never sell it or use it for advertising, and we do not use it to train generalized AI or machine learning models. No one at TimeSuite reads it unless you consent, it is needed for security, or the law requires it.

6. Retention and deletion

Account data and records are kept while your company's account is active and deleted within six months after it ends, or earlier on request. Disconnecting ends our access to your Google account immediately. Email logs and imported calendar tasks are company records and are deleted with them. To request deletion, contact us (section 11).

7. Security

We value your trust in providing us your personal information and use commercially acceptable means to protect it, including encryption in transit and access controls. Access tokens for connected email accounts are held by Nylas, not by TimeSuite. No method of transmission over the internet or of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

8. Links to Other Sites

This Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

9. Children's Privacy

These Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do necessary actions.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page and updating the effective date at the top. These changes are effective immediately after they are posted on this page.

11. Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us.

TimeSuite Software Corporation, 1745 Shea Center Drive Suite 400, Highlands Ranch CO 80129, eric@timesuite.com, 888-212-7990.