Privacy Policy

Who we are

Timix.AI ("we", "us") provides billable-hours tracking and reporting software for service businesses, at timix.ai. This policy explains what data we handle, why we handle it, and the choices you have. It covers both this website and the Timix.AI application.

If anything here is unclear, or you want to exercise any of the rights described below, email us at hello@timix.ai. A person reads every message.

Data we collect on this website

This website is a brochure site. It collects far less than most:

Analytics and advertising

We use Google Analytics 4 to understand which pages help visitors, and advertising tags to measure whether our ads reach the right people. Google's tag loads on every page. Where the law requires opt-in — the EEA, the UK and Switzerland — it runs in Google's Consent Mode: until you choose "Allow" in the consent banner, it sets no cookies and sends Google only cookieless signals — such as which page was viewed, when, and your browser type. If you arrived from one of our ads, these signals also include the click identifier the ad added to the link (for example gclid), so the visit can be credited to the right campaign; it travels in the link itself and is not stored in a cookie. If you choose "Decline", it stays that way. Everywhere else, including Israel and the United States, the tags run by default, with cookies, and no banner is shown; you can block them with your browser's tracking protection or a content blocker.

We also use advertising tags — Google Ads, LinkedIn and Reddit — to see whether an ad brought someone who went on to find the product useful. When you create an account, we report the sign-up to Google Ads and Reddit with a one-way cryptographic hash (SHA-256) of your email address, so each network can match the sign-up to an ad click. Neither receives your actual address, and we never send a hash for anyone who did not sign up. Reddit also receives the technical details of that sign-up — IP address, browser type and screen size — and an internal account ID that contains neither your name nor your email address. We tell LinkedIn only that a sign-up happened.

When you arrive from an ad, the campaign identifiers in the link (for example Google's gclid) are kept in your browser for up to 400 days and passed along if you continue into the app, so a signup can be credited to the right campaign. They identify the ad, not you. Declining, or clearing this site's data, removes them.

Your consent choice itself is stored in your browser's localStorage under the key timix_analytics_consent (in the app: bilabel_analytics_consent) — it stays on your device. Clearing this site's data in your browser resets the choice, and in the EEA, the UK and Switzerland you will be asked again.

Advertising measurement

When we advertise — currently on Google Ads, LinkedIn and Reddit — each network gives us a conversion tag that tells us whether a visit or a sign-up came from one of our ads. Inside the EEA, the UK and Switzerland, the LinkedIn and Reddit tags do not load, and we report no conversion to Google Ads, LinkedIn or Reddit, until you choose "Allow"; until then Google's tag only sends the cookieless signals described above. Everywhere else they load by default.

These tags may set cookies and share limited conversion data with the network — which of our pages you viewed, and the click identifier from the ad you arrived on — so we can tell which campaigns actually work. We do not upload customer lists to any ad network, and we never show third-party ads on this site.

Performance and error monitoring

To notice and fix problems, the website and the app run New Relic's browser monitoring on every visit. It sends New Relic page load times, errors, the address of the page and your browser type, and keeps a short-lived session ID in your browser's storage (it expires within four hours at most). It is not used for advertising.

The contact form

If you write to us through the form on our contact page, we receive what you typed: your name, email address, company, the topic you picked, and your message. Submitting the form sends a single email to our team, delivered through Resend, our email provider. The website does not store your submission in any database. We use your message to reply to you, and for nothing else.

The chat assistant

If you use the chat assistant on this website, what you type — together with the earlier messages of that conversation — is sent to Google Vertex AI to write the answer. We do not save the conversation, and we do not use it for advertising.

Data we process in the Timix.AI app

When you create an account in the Timix.AI application, we process two kinds of data:

• Account data — your name and email address, managed through Google Firebase Authentication (sign in with email and password, or with Google).
• Working data — the content your organization puts into Timix.AI: time entries, customers, projects, tasks, rates, reports, and settings.

Working data is stored per organization, with data isolation between organizations: members of one organization cannot see another organization's data, even when the same person belongs to several organizations.

Where your data lives

Timix.AI is hosted on Google Cloud Platform in the us-east1 region, in the United States (South Carolina). The website, the application, and its data are hosted there.

Service providers we rely on

We use a small number of providers to run Timix.AI. Each one processes data on our behalf, only as needed to provide the service:

• Google Cloud Platform & Firebase — hosting, infrastructure, and account authentication (including Sign in with Google). The app also loads its fonts from Google Fonts.
• Resend — transactional email delivery: contact-form messages and emails the app sends, such as invitations.
• Google Analytics & Google Ads — usage statistics for the website and the app, and ad conversion measurement, following the consent rules above. In the app, analytics is linked to an internal account ID.
• LinkedIn — advertising conversion measurement (the LinkedIn Insight Tag), following the consent rules above.
• Reddit — advertising conversion measurement (the Reddit pixel and Reddit's Conversions API), following the consent rules above.
• New Relic — performance and error monitoring for the website, the app and our servers (including server logs). The data is processed in New Relic's EU region.
• Google Vertex AI — AI features (the chat assistant on this website, and the Timix.AI assistant, voice input and AI Insights in the app) are processed via Google Vertex AI in Google Cloud regions in the United States (currently us-east1 and us-central1). Spoken replies in the app are generated with Google Cloud Text-to-Speech.

We do not share your data with anyone for their own marketing, and we add providers only when the service needs them.

How long we keep your data

Your account and organization data is retained for as long as your account is active. If your free trial expires before you choose a plan, your data is not deleted: it remains stored and read-accessible until you either activate a plan or ask us to delete it.

To request deletion at any time, email hello@timix.ai — see Your rights below.

Your rights

You can always ask us to:

• Access — get a copy of the personal data we hold about you.
• Correct — fix personal data that is inaccurate or out of date.
• Export — receive your organization's data in a portable format.
• Delete — erase your account and personal data.

Whatever your local privacy law calls these rights, the practical route is the same: email hello@timix.ai, we will verify the request is really yours, and we will respond.

What we never do

• Sell your personal data. Never, to anyone.
• Keep tracking you for advertising after you decline — declining stops the LinkedIn and Reddit tags and every conversion we report to Google Ads, LinkedIn or Reddit, keeps Google's tag in its cookieless mode, and deletes the campaign identifiers already stored on your device. Where the law requires opt-in (the EEA, the UK and Switzerland), the LinkedIn and Reddit tags do not load, and no advertising cookie is set, until you accept.
• Use your organization's working data for anything other than providing the service to you.
• Upload customer lists to an ad network. We measure whether a campaign works — how many people signed up, and from which ad. We do not send ad networks lists of our users.

Children

Timix.AI is a business tool and is not directed at anyone under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We will update this policy as the service evolves, and the "Last updated" date at the top always reflects the current version. If we make material changes, we will take reasonable steps to bring them to your attention — a notice on this site, or an email to account holders.

Contact us

Privacy questions, requests, or concerns: hello@timix.ai.