Privacy Policy

1. Introduction

Tech Art Ltd. ("TimeMetrics.io", "we", "us", or "our") operates the TimeMetrics.io website and related software services (collectively, the "Services").

Tech Art Ltd. is a company registered in the Republic of Bulgaria and operates in accordance with:

• Regulation (EU) 2016/679 (General Data Protection Regulation – "GDPR")
• The Bulgarian Personal Data Protection Act
• Applicable European Union legislation

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you:

• Visit www.timemetrics.io
• Use our web application
• Create an account
• Interact with our support team
• Communicate with us

We may update this Privacy Policy periodically. If material changes are made, we will notify you via the website or by email where appropriate.

2. Definitions

Customer — An individual or legal entity that registers an account to use the Services.

End User — An individual authorized by a Customer to use the Services (for example: employees, contractors, consultants).

Website Visitor — Any individual who visits our website without creating an account.

When TimeMetrics.io provides Services to a Customer, the Customer acts as the Data Controller of End User data, and TimeMetrics.io acts as a Data Processor under Article 28 GDPR.

3. Data Controller Information

Tech Art Ltd.
Republic of Bulgaria
Email: [email protected]
Website: www.timemetrics.io

For any data protection questions, you may contact us at the above email address.

4. Personal Data We Collect

The categories of data collected depend on how you interact with the Services.

4.1 Data You Provide Directly

If you are a Customer or Website Visitor, we may collect:

• Full name
• Business email address
• Company name
• Job title
• Telephone number
• Billing details
• Account credentials (encrypted)
• Communication content

4.2 Data Collected Automatically

When you use our website or Services, we may collect:

• IP address
• Device type and browser
• Operating system
• Usage logs
• Date and time of access
• Pages visited
• Referring URL

We use cookies and similar technologies for functionality, analytics, and security. You may manage cookie preferences via your browser settings or our Cookie Settings panel.

4.3 Transaction Data

If you subscribe to a paid plan, we collect:

• Subscription plan details
• Payment amount
• Billing date
• Invoice details

Payments are processed by certified third-party payment providers. We do not store full credit card data.

4.4 End User Data

When a Customer deploys TimeMetrics.io within their organization, we may process End User data such as:

• User account identifiers
• Activity timestamps
• Application usage data
• Productivity metrics
• Device-related technical data

This data is processed strictly under the instructions of the Customer.

If you are an End User, please contact your employer or the Customer organization for information about your data rights.

5. Legal Basis for Processing (GDPR Article 6)

We process personal data under the following lawful bases:

• Contractual necessity – to provide Services to Customers
• Legitimate interests – to improve security, functionality, and performance
• Legal obligations – accounting, tax compliance
• Consent – for marketing communications (where applicable)

You may withdraw consent at any time.

6. How We Use Personal Data

We use personal data to:

• Provide and maintain the Services
• Process subscriptions and invoices
• Provide customer support
• Improve system performance and security
• Detect fraud and unauthorized access
• Comply with legal obligations
• Communicate product updates
• Send marketing communications (only where permitted)

We may use anonymized or aggregated data for analytics and service improvement. Such data does not identify individuals.

7. Data Sharing

We may share personal data with:

• Hosting providers
• Cloud infrastructure providers
• Payment processors
• IT service providers
• Legal or regulatory authorities (where legally required)

All service providers process data under GDPR-compliant agreements.

We do not sell personal data.

8. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards such as:

• EU Standard Contractual Clauses
• Adequacy decisions by the European Commission

9. Data Retention

We retain personal data only for as long as necessary for:

• Providing Services
• Fulfilling contractual obligations
• Legal compliance (e.g., accounting laws in Bulgaria)

Inactive accounts may be deleted after a defined retention period unless legal obligations require longer storage.

10. Your Rights Under GDPR

If you are located in the EU, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion ("right to be forgotten")
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent
• Lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP)

Website: https://www.cpdp.bg

To exercise your rights, contact: [email protected]

If you are an End User, please submit your request to your employer (the Customer).

11. Security Measures

We implement appropriate technical and organizational measures including:

• Encrypted connections (HTTPS/TLS)
• Access control mechanisms
• Secure server environments
• Data minimization practices
• Logging and monitoring

12. Children's Data

Our Services are intended for business use and are not directed to individuals under 18 years of age.

13. Cookies

TimeMetrics.io uses cookies for:

• Authentication
• Security
• Analytics
• Performance optimization

Detailed information is available in our separate Cookie Policy.

14. Changes to This Policy

We may update this Privacy Policy periodically. The latest version will always be published on our website.

15. Contact Us

Tech Art Ltd.
Republic of Bulgaria
Email: [email protected]
Website: www.timemetrics.io