Privacy Policy
Last updated: 2 July 2026
This privacy policy describes how Timvat processes personal data when you use our service, in accordance with the GDPR. Timvat is the data controller for your account data.
What data we process
- Account data: email address and password (encrypted).
- Company and billing details you provide.
- Content you create in the Service (text, images, settings).
- Usage data: e.g. logins and basic statistics.
Why and on what legal basis
- To deliver the Service and your agreement with us (performance of a contract).
- For invoicing and accounting (legal obligation).
- To improve and secure the Service (legitimate interest).
- For email marketing — only with your consent, which you can withdraw anytime.
Processors
We use providers that process data on our behalf, including for hosting, database, payment and email (e.g. Vercel, Supabase, Stripe and Resend). They are bound by data processing agreements.
Retention
We keep your data for as long as you have an account. After the account ends, data is deleted within a reasonable time, except what we must keep by law.
Your rights
- Right to access, rectification and erasure.
- Right to restrict or object to processing.
- Right to data portability.
- Right to withdraw marketing consent.
- Right to complain to your data protection authority.
Cookies
We use necessary cookies for login and operation. Sites you publish can have their own cookie settings that you control in the builder.
Contact
For questions about personal data, contact us at timur@timvat.se.