Privacy Policy

1. About this Policy

This Policy explains how TimelineFlow processes personal data. The service provider in Service operator is responsible for that processing. Contact [email protected] for privacy requests.

TimelineFlow determines how account, security and billing data is used. An organisation that submits personal data remains responsible for its lawful collection and instructions. The roles of independent providers follow their own policies and applicable agreements.

2. Scope and roles

This Policy covers TimelineFlow websites, accounts, the editor, cloud files, public and community features, messages, support, Connector, and related services. It does not govern third parties you choose, including Google, AI providers, stock-media sources, Ollama, ComfyUI, custom nodes, models, or websites linked from the Service. Their policies apply independently.

When a business uses TimelineFlow to process personal data on its behalf, separate controller/processor terms or a data processing agreement may be required. Do not use the consumer Service for regulated processing that requires such terms until they are agreed.

3. Data we process

Account data includes email, profile, authentication, session records, consent versions and timestamps. Collaboration data includes shared projects, files, messages, permissions and moderation reports. Technical records can include IP address, browser/device information, request IDs, errors and security events.

Hosted AI processes prompts, selected image, video or audio references, model settings, outputs, job status, usage and costs. References may contain faces, voices and other personal data. Billing records include account and plan identifiers, credit allocations and usage, price versions, payment transaction IDs and records needed to investigate billing changes.

Local media stays on your device unless you select a feature that uploads or shares it. Cloud sync, collaboration, messages, hosted AI and remote BYOK providers can transmit selected content. Recipient copies may remain after you delete your copy.

4. Hosted AI, BYOK and local tools

TimelineFlow AI sends your prompts, selected references and settings to the provider needed for your request. This includes fal and its upstream model providers, including OpenRouter for supported assistant models. Where enabled, realtime music uses Google. Their privacy and model-specific policies also apply: fal Privacy, fal Dpa, fal Retention and google Privacy.

For fal requests, we request no stored input/output history, reference expiry after 24 hours and generated-media expiry after 7 days. These provider settings do not delete copies saved in TimelineFlow, your projects or backups, and upstream policies may differ. Keep important results and do not share private media links.

BYOK uses your provider account and its own retention, data-use and billing policies. Keys can remain in browser memory or be saved in browser storage only when you select that option. Connector forwards chosen work to configured ComfyUI or Ollama; workflows and plugins may contact remote services. Submit references only with appropriate rights and consent, and avoid unnecessary sensitive data.

5. Why we process data and legal bases

Where GDPR, UK GDPR, or similar law applies, we rely on the following bases:

• Contract: provide and secure your account and the features you request; process subscriptions you purchase; apply plan limits; and provide support.
• Legitimate interests: prevent fraud and abuse, protect users and systems, diagnose faults, measure service performance, understand aggregate feature use, defend legal claims, and improve reliability. We balance these interests against your rights.
• Legal obligation: respond to lawful requests, keep tax/transaction records, enforce sanctions, preserve evidence, and meet consumer, safety, and platform duties.
• Consent: only where law requires it, such as optional non-essential cookies or marketing. You may withdraw consent prospectively without affecting prior processing.
• Vital interests: exceptionally, to address a credible threat to someone's life or physical safety.

We do not currently use personal data for behavioural advertising, sell personal data for money, or use private content to train generative models. If this changes, we will update this Policy and provide choices required by law before the new use.

6. Recipients and payments

Recipients include hosting, database, object storage/CDN, email and security providers needed for TimelineFlow; fal and relevant upstream models for selected AI work; and people you share with. Authorised staff access records as needed for support, moderation, billing and security. Disclosure may also be required by law or to address fraud and protect rights.

Paddle processes checkout, payment details, tax, subscriptions, receipts, refunds and fraud checks as merchant of record under paddle Privacy and paddle Terms. Our server receives transaction/subscription IDs, statuses and accounting details, not full card numbers. Paddle may process data internationally under its stated safeguards.

AI and infrastructure providers may process data outside your country. For information about current recipients and the safeguards applicable to your data, contact [email protected].

We use Render for hosting and databases, Cloudflare for delivery, security, file storage and call services, and Resend for service emails. Google handles Google sign-in and selected AI features. Calls transmit the audio, video and connection information needed for the call; recordings are processed when you use recording. Recipients depend on the features you choose.

7. Cookies and browser storage

We use essential cookies and browser storage for sign-in, security, access to your chosen workspace, preferences and notice choices. Provider API keys are saved on the device only when you explicitly choose that option. We do not currently use optional advertising or marketing cookies. Optional analytics, advertising or marketing cookies require the notice and choice required by law.

Clearing cookies or site data may sign you out, remove preferences and locally saved API keys, revoke remembered workspace access, or require reconfiguration. It does not necessarily delete server data.

8. Retention and deletion

The service normally clears saved prompts and result links from completed AI job records after 30 days; successful results remain until at least 30 days after confirmed delivery. This does not delete files saved to your project or cloud library. Financial records and provider copies follow their separate retention rules.

To prevent repeated welcome-credit claims, promotion records use protected identifiers derived from your verified email, Google account when used, and network address, rather than raw email or IP addresses. These records remain after account deletion for abuse prevention and financial reconciliation; no automatic deletion period is currently configured. Contact [email protected] to request a review or exercise your rights.

Payment and credit records are retained for accounting, tax, fraud prevention, disputes and legal duties. No automatic deletion period is currently configured; the applicable requirements and unresolved transactions determine retention. After account closure, use is restricted to those purposes. Contact [email protected] to request a retention review.

Account, consent, security and support data stays while needed for the account and applicable security, disputes and legal duties. Messages, moderation, backups, caches, legal holds and recipient copies may have separate lifecycles. Where a fixed period is not configured, purpose, sensitivity, security risk and legal duties determine retention. Local files remain under your control.

Request access, correction or deletion through [email protected]. We verify identity and explain applicable exceptions and appeal routes. Delete local files and saved keys separately. Account deletion cannot retract collaborator copies or immediately purge every provider record, backup or legal hold. Independent provider accounts follow their own deletion process.

9. Security and international transfers

We use access controls, hashed passwords and session/Connector tokens, transport security, rate limiting, and restricted service credentials designed to protect data. No system, device, browser storage, local network, provider, or transmission is completely secure. You are responsible for device security, backups, endpoint configuration, and secret rotation.

TimelineFlow and its providers may process data outside your country. Where required, we rely on adequacy decisions, approved contractual safeguards, or another lawful transfer mechanism and assess supplementary measures. Your direct selection of a provider may also create a transfer governed by your relationship with that provider.

10. Your privacy rights

Depending on location, you may have rights to access, correct, delete, restrict, object, withdraw consent, obtain a portable copy, appeal a refusal, and complain to a supervisory authority. You may also have rights to know categories/sources/recipients, correct inaccuracies, delete data, and opt out of sale, sharing, targeted advertising, or certain profiling. TimelineFlow does not currently sell data or use it for cross-context behavioural advertising.

Email [email protected] to exercise a right. Describe the account and request. We may verify identity, ask an authorised agent for proof, refuse or charge for manifestly unfounded/excessive requests where permitted, and retain data where an exemption applies. We will respond within the legally required period and explain any denial or appeal route.

11. Age limits and sensitive data

TimelineFlow is for people aged 18 or older and is not directed to children. If you believe a minor provided data, contact us for investigation and deletion. Do not submit sensitive or regulated data unless necessary, lawful, and supported by appropriate notices, consents, security, and contractual terms.

12. Automated decisions

We may use automated rate limits, spam signals, and security checks to protect the Service, but do not currently make solely automated decisions that produce legal or similarly significant effects about users. Provider moderation or generation decisions are governed by that provider. Contact support if you believe an automated restriction was incorrect.

13. Changes to this Policy

We may update this Policy as the Service, providers or law changes. The date above identifies the current revision. We give additional notice for material changes when required. A new purpose that requires consent will not apply until valid consent is obtained.

The rules governing use of the Service are in the Terms of Service. Subscription cancellation and refunds are covered by the Refund & Cancellation Policy.

Service operator

Individual Entrepreneur MELNIK KONSTANTIN

306403736

Georgia

Georgia, Tbilisi, Samgori District, Police Lane I N 5, Floor 2, N 4a

Product and account support: [email protected].

Privacy, rights and legal requests: [email protected].