Privacy Policy

1. Introduction and Data Controller

Welcome to TimeTab.cc ("we," "our," or "us"). We are committed to protecting your personal data and maintaining absolute transparency regarding how we handle information. This Privacy Policy governs the processing of personal data collected through our website (timetab.cc) and related calendar applications. For users residing in the European Economic Area (EEA), this document outlines our compliance with the General Data Protection Regulation (GDPR). For users globally, it serves to meet international data protection best practices, including Canada's PIPEDA framework.

2. Infrastructure, Data Hosting, and Global Transfers

Your privacy and the security of your data are critical to us. We operate under the following rigorous architectural principles:

• Canadian VPS Hosting: All data, customer records, configurations, and application databases are securely hosted on a leased Virtual Private Server (VPS) physically located within data centers in Canada. Canada is recognized by the European Commission as providing an adequate level of data protection under the GDPR.
• Data Encryption: To guarantee confidentiality and system integrity, all personal data is strictly encrypted both in transit and at rest. We utilize cryptographic protocols (SSL/TLS) for data movement between your browser and our Canadian VPS infrastructure to prevent unauthorized interception.

3. Categories of Data We Collect

We restrict data collection to the absolute technical minimum required to deliver our CRM and scheduling services. This includes:

• Account Information: Your email address, encrypted authentication details, and system preferences provided voluntarily during account creation.
• Operational Data: Scheduling parameters, appointment histories, student name notations, cross-timezone configurations, and invoicing structures required to run your tutoring calendar.
• Technical Telemetry: IP addresses, browser types, device profiles, and operating system metrics processed temporarily for security event monitoring and optimal frontend layout rendering.

4. Legal Basis for Processing (GDPR Article 6)

We process your personal information under the following legal frameworks:

• Performance of a Contract: The processing of account and operational data is strictly necessary to fulfill our service delivery obligations to you under our Terms of Service.
• Legitimate Interests: Processing telemetry for system security, fraud detection, stability tuning, and operational logging.
• Consent: For marketing analytics, tracking cookies, and advertising performance metrics.

5. Third-Party Integrations and Analytics (Meta Pixel Clause)

To optimize our customer acquisition and measure commercial ad campaigns, our landing page integrates the Meta Pixel operated by Meta Platforms Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).

The Meta Pixel establishes a direct pipeline to Meta servers when you interact with our public landing page. It tracks user actions such as visits, button clicks, and registration completions. This data allows Meta to optimize advertisement delivery and attribute conversions accurately. Meta acts as a joint controller for this behavioral telemetry. You may adjust your device or browser settings to block cookie-based marketing analytics, or configure tracking parameters through Meta's native advertising settings.

6. Data Retention and Deletion Rights

We retain your encrypted personal data only for as long as your account remains active. Users retain full autonomy over their information. You hold the right to access your records, request structural corrections, or demand the permanent erasure of all account data from our Canadian VPS databases. To exercise your rights under GDPR or international frameworks, submit a formalized request to our technical support desk at support@timetab.cc.