TimeZest sees a significant amount of personally-identifiable data, and we are careful in how we treat that data to ensure it is stored and used securely, and handled in ways that comply with, and allow you to comply with, various data protection laws like the GDPR.
This article describes exactly how TimeZest deals with different types of data, in particular after you cease being a customer of TimeZest.
While you remain a TimeZest customer
As long as you remain a paying (including on the free plan) TimeZest customer (or have an active trial), TimeZest will not delete any data in your account.
Should you require any data to be deleted, for example to take action on a data deletion request you have received from one of your customers, contact TimeZest support and it can be handled manually.
After you cease being a TimeZest customer
TimeZest defines "ceasing being a TimeZest customer" as one of the following:
When you have pro-actively cancelled your TimeZest account,
When you have deactivated every user in your TimeZest account,
When TimeZest has cancelled your account after being unable to charge your means of payment, or
When your trial to TimeZest has expired, and you have not signed up to a plan.
For the first 30 days after any of these events, TimeZest will retain your data without any modifications.
After 30 days have elapsed, TimeZest will automatically do the following:
Delete completely any API credentials and access tokens (such as credentials used to access PSA systems like ConnectWise PSA).
Delete information that associates your users with accounts in other systems which are integrated to TimeZest (such as Microsoft 365)
Modify all the PII regarding your customers (primarily their name, email, company name and any phone number given) so that it is anonymized. We need to retain this data for internal statistics and for purposes of security and data integrity.
An example of how we anonymize data is replacing the name of an end user with something like "User 21765312" where the number refers only to a primary key in TimeZest's database and has no intrinsic meaning or is associated with any other system.
TimeZest backs up its database regularly to encrypted storage. Your data will remain in its original form in these backups, and we retain backups for 90 days after they were made.