Privacy Policy

Last Updated: November 17, 2025

Timo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our lead generation and marketing services.

1. Information We Collect

1.1 Information You Provide

We collect information that you provide directly to us, including:

• Account information (name, email address, password)
• Business information (company name, website, contact details)
• Payment information (processed securely through third-party payment processors)
• Communications you send to us

1.2 Lead Data

When you use our services to collect leads, we process and store:

• Lead contact information (names, email addresses, phone numbers)
• Lead form responses and custom fields
• Source information (e.g., Facebook campaigns, landing pages)
• Timestamps and metadata related to lead submissions

1.3 Information from Third-Party Services

We integrate with Facebook and other third-party platforms. When you connect these services, we may receive:

• Facebook Page and ad account information
• Lead ad form submissions from Facebook
• Campaign performance data and analytics
• Profile information from your connected social media accounts

1.4 Automatically Collected Information

When you access our platform, we automatically collect:

• IP address and device information
• Browser type and version
• Usage data and interaction patterns
• Cookies and similar tracking technologies

2. How We Use Your Information

We use the collected information for the following purposes:

• To provide, maintain, and improve our lead generation services
• To process and deliver leads to you in real-time
• To authenticate users and maintain account security
• To communicate with you about your account, updates, and support
• To analyze usage patterns and optimize platform performance
• To comply with legal obligations and enforce our terms of service
• To detect, prevent, and address technical issues or fraudulent activity
• To send marketing communications (with your consent)

3. Information Sharing and Disclosure

We may share your information in the following circumstances:

3.1 With Your Consent

We share information when you explicitly authorize us to do so.

3.2 Service Providers

We work with third-party service providers who assist us in operating our platform, including:

• Cloud hosting and storage providers
• Payment processing services
• Email and communication platforms
• Analytics and monitoring tools

3.3 Social Media Platforms

We interact with Facebook and other social media platforms as part of our lead generation services. These platforms have their own privacy policies governing how they handle your data.

3.4 Legal Requirements

We may disclose information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Secure webhook verification for third-party integrations
• Regular backups and disaster recovery procedures

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Specifically:

• Account information is retained while your account is active
• Lead data is retained according to your subscription plan and legal requirements
• Log and analytics data is retained for operational purposes (typically 90 days to 2 years)
• Deleted data may persist in backups for a limited period

6. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Data Portability: Request your data in a machine-readable format
• Opt-out: Unsubscribe from marketing communications
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing of your personal information

To exercise these rights, please contact us using the information provided in Section 11.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze platform usage and performance
• Provide targeted content and advertising

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our platform.

8. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our platform
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

Your continued use of our services after changes become effective constitutes acceptance of the updated Privacy Policy.

13. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Contractual necessity: To perform our services under our agreement with you
• Legitimate interests: To improve and secure our platform
• Consent: For marketing communications and certain data processing activities
• Legal obligations: To comply with applicable laws and regulations

14. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights