Scope of application of this Privacy Policy

This Privacy Policy applies to Time8's online tools and platform, including Time8's associated mobile and desktop applications (collectively, the "Services"), Time8.com and other Time8 websites (collectively, the "Sites"), and other interactions (e.g., customer service inquiries, user conferences, etc.) you may have with Time8. If you do not agree to this Privacy Policy, do not access or use the Services, Sites, or any other aspect of Time8's business. For the avoidance of doubt, this is the only privacy policy that applies to Time8.

Information We Collect and Receive

Time8 will collect and receive information in the course of providing the Services and operating the Sites, and through other interactions with Time8. Such information will include Customer Data and other information and data ("Other Information") in various ways:

• Customer Data. Customers or individuals to whom Customer has granted access to the Workspace (“Authorized Users”) routinely submit Customer Data to Time8 when using the Services.
• Other Information. Time8 also collects, generates and/or receives the following categories of Other Information:
  
  • Workspace and Account Information: To create or update a Workspace account, you or our Client (e.g., your employer) provide Time8 with an email address, phone number, password, domain, and/or other account setup details (more details on creating a Workspace can be found here). Additionally, Clients who purchase a paid version of the Services provide Time8 (or its payment processors) with billing information, such as credit card information, banking information, and/or billing address.
  • Usage Information:
    
    • Services Metadata. When an Authorized User interacts with the Services, metadata is generated that provides additional context about how the Authorized User uses the Services. For example, Time8 records the Workspaces, channels, people, features, content, and links you view or interact with, the types of files you share, and what Third-Party Services (if any) you use.
    • Log Data. Like most websites and technology services provided over the Internet, our servers automatically collect information when you access our Sites or Services and store it in log files. This data may include your Internet Protocol (IP) address, the address of the web page you visited before using the Site or Services, your browser type and settings, the date and time you use the Services, information about your browser configuration and plug-ins, and your language preferences.
    • Device Information. Time8 collects information about devices that access the Services, including device type, operating system used, device settings, application identifiers, unique device identifiers, and crash data. Whether we collect some or all of this Other Information often depends on the type of device you use and its settings.
    • Location Information. We receive information from you, our Clients, and other third parties that helps us approximate your location. For example, we may use the work address provided by your employer (which is our Client) or the IP address obtained from your browser or device to determine your approximate location for location assistance or security purposes.
  • Cookie Information: Time8 uses various cookies and similar technologies on our Sites and Services to help us collect Other Information. For more information about how we use these technologies, and your opt-out and other choices, please visit our Cookie Policy.

Generally, no one is obligated by law or contract to provide any Customer Data or Other Information. However, some Information is collected automatically, and if certain Information, such as Workspace configuration details, is not provided, we may not be able to provide the Services.

How we process your information and our legal bases

Time8 will use Customer Data in accordance with Customer's instructions, including for the provision of the Services, in accordance with any applicable Customer Agreement terms, Customer's use of the Services' functionality, and as required by applicable law. Time8 is a processor of Customer Data, and Customer is a controller. For example, Customer may use the Services to grant and revoke access to a Workspace, assign roles and configure settings, access, modify, export, share, and delete Customer Data, and otherwise apply its policies to the Services.

Time8 uses Other Information to operate our Services, Sites, and business. More specifically, Time8 uses Other Information for the following purposes:

Compliance with a legal obligation: Time8 processes Other Information when we are required to comply with a legal obligation, including, for example, accessing, preserving, or disclosing certain information if there is a valid legal request from a regulator, law enforcement agency, or other authority. For example, a search warrant or production order from a law enforcement agency to provide information in connection with an investigation, such as your profile picture or IP address.

• We use Workspace and account information, usage information, cookie information, information from Third Party Services, contact information, data from third parties, audio and video metadata, and additional information provided to Time8i to comply with a legal obligation.

Legitimate interests: We rely on our legitimate interests or the legitimate interests of a third party where these are not overridden by your interests or fundamental rights and freedoms (“legitimate interests”).

• We use Workspace and account information, usage information, cookie information, information from Third Party Services, contact information, data from third parties, audio and video metadata, and additional information provided to Time8 for the following legitimate purposes:
  
  • To provide, update, maintain, and protect our Services, Sites, and business. This includes using Other Information to support the provision of the Services under the Customer Agreement, prevent or address service errors, security or technical issues, analyze and monitor usage, trends, and other activities, or as requested by an Authorized User.
  • To develop and deliver search, learning, and productivity tools and additional features. Time8 strives to make the Services as useful as possible for individual Workspaces and Authorized Users.
• We use Workspace and account information for the following legitimate purposes:
  
  • To communicate with you by responding to your requests, comments, and questions. If you contact us, we may use your Other Information to respond.
  • To send you service emails and other communications. For example, we may: send you service emails, technical and other administrative emails, news, and other types of communications; or contact you to inform you about changes to our Services, our Service offerings, and important Service-related notices, such as security and fraud notifications. These communications are considered part of the Services and you cannot opt ​​out of them.
• We use Workspace, account and usage information for the following legitimate purposes:
  
  • For billing, account management, and other administrative purposes. Time8 may need to contact you for billing, account management, and similar purposes, and we use your account information to administer accounts and track billing and payments.

How we share and disclose information

This section describes how Time8 may share and disclose Information, as described in the "Information We Collect and Receive" section above. Customers determine their own policies and practices regarding the sharing and disclosure of Information to third parties. Time8 does not control how Customers or any third parties choose to share or disclose Information.

• Customer Instructions. Time8 may share and disclose Information in accordance with Customer instructions and with appropriate consent, including any applicable terms of the Customer Agreement and Customer's use of the Services, and in compliance with applicable law and legal process. Some disclosures at Customer's request may be subject to additional fees. To enable Time8i to comply with our Customers' instructions,
• Customer Access. Owners, administrators, Authorized Users, and other Customer representatives and personnel may have access to, modify, or restrict access to Information. This may include, for example, your employer's use of features of the Services to access or modify your profile details or to export Workspace activity logs.
• Law enforcement and regulatory authorities. If we receive a request for information, we may disclose Other Information if we reasonably believe that disclosure is in accordance with or required by applicable law, regulation, or legal process.
• To enforce our legal rights, prevent fraud, and for security purposes. To protect and defend the rights, property, or safety of Time8, its users, or third parties, including enforcing its agreements or policies, or in connection with investigating and preventing illegal activity, fraud, or security issues, including to prevent death or imminent threat to life.
• With Consent. Time8 may share Information with third parties when we have your consent or as otherwise permitted in this Privacy Policy.

Data storage

Time8 will retain Customer Data in accordance with Customer's instructions (including for the performance of any applicable Customer Agreement terms and through Customer's use of the Services' functionality) and as required by applicable law. Customer may adjust its retention settings and, depending on its Service plan, apply these customized settings at the Workspace, channel, or other level. Deleting Customer Data and other uses of the Services by Customer may result in the deletion and/or anonymization of certain related Other Information.

Time8 may retain Other Information about you for as long as necessary for the purposes described in this Privacy Policy (such as providing the Services, including any optional features you use, and providing customer support). This may include retaining your Other Information after you deactivate your account for as long as necessary for Time8 to pursue its legitimate business interests, conduct audits, comply with (and demonstrate compliance with) legal obligations, resolve disputes, and enforce our agreements.

Security

Time8 takes data security very seriously. Time8 makes every effort to protect the information you provide from loss, misuse, and unauthorized access or disclosure. These steps take into account the sensitivity of the information we collect, process, and store, as well as the current state of technology.

Changes to this Privacy Policy

Time8 may change this Privacy Policy from time to time. Laws, regulations, and industry standards evolve, making these changes necessary, or we may make changes to our services or operations. We will post changes on this page and encourage you to review our Privacy Policy to stay informed. If we make changes that materially impact your privacy rights, Time8 will provide additional notice, for example, by email or through the Services. If you do not agree to the changes to this Privacy Policy, you should deactivate your account on the Services.

Data Protection Officer

To contact our Data Protection Officer, please email yoda@time8.io

Identification of the Controller and the Data Processor

The Customer is the administrator of the Customer Data. Time8 is the service that processes the Customer Data and the administrator of Other Information.

The Time8 application is owned by BB8 spółka z o.o., ul. Twarda 18, 00-105 Warsaw.

Your rights

Individuals in the European Economic Area, the United Kingdom, Brazil, and elsewhere in the world have certain statutory rights in relation to their personal data. Subject to any exemptions provided by law, you may have the right to request access to, update, delete, or rectify your personal data. You can do this using the settings and tools available in your account on the Services. If you are unable to use the settings and tools, please contact the Customer who controls your workspace for additional access and assistance.

To the extent that Time8's processing of your Personal Data is subject to the General Data Protection Regulation (GDPR) or other applicable law requiring a legal basis for processing Personal Data, Time8 primarily relies on its legitimate interests, as described above, to process your Personal Data. Where we rely on legitimate interests to process your Personal Data, you may object to this processing by contacting us as described in the "Contacting Time8" section below. Time8 may also process Other Information, which constitutes your Personal Data, for direct marketing purposes, and you have the right to object to Time8's use of your Personal Data for this purpose at any time.

Data Protection Authority

Subject to applicable law, you also have the right to (i) restrict Time8's use of Other Information that constitutes your Personal Data and (ii) lodge a complaint with your local data protection authority. However, if you believe we have not been able to assist you with your complaint or concern and you are located in the European Economic Area or the United Kingdom, you have the right to lodge a complaint with the relevant supervisory authority.

Contact Time8

If you have any questions about this Privacy Policy or Time8's practices, or if you wish to exercise any of your statutory rights, please contact Time8. Time8 will respond within a reasonable time. You can contact us at hello@time8.io or at our mailing address below:

BB8 sp. z o.o. Twarda 18, 00105 Warsaw, Poland, with the note Time.