Privacy notice

Who is responsible

RE Technologies, a registered Australian business name with ABN 62 127 504 482, operates TimePilot. Privacy questions, access or correction requests, deletion requests and complaints may be sent to privacy@timepilot.au.

Information collected

If early-access registration is enabled and you submit the form, we collect the email address, Company name, industry, current timesheet format, payroll system, timesheet volume and privacy-notice version shown in the form, together with submission and delivery timestamps and technical receipt identifiers.

For abuse prevention, Cloudflare receives the verification token, IP address and browser or device signals needed to assess the request. The TimePilot service uses a keyed, pseudonymous rate-limit value and does not store the raw IP address with the lead.

Why the information is used

We use submitted details to record your request, understand whether TimePilot may fit your workflow, acknowledge the submission, contact you about early access, prevent duplicate or abusive submissions, operate and secure the website, and respond to privacy or legal obligations.

Early-access consent is purpose-specific. It does not authorise unrelated marketing, optional analytics, model training or acceptance of future product terms.

Providers and disclosure

Cloudflare may provide DNS, TLS, website delivery, Workers, request security, rate limiting and Turnstile verification. Supabase stores the private early-access and delivery records. When email delivery is enabled, Resend receives the recipient address and message content needed to send the requested acknowledgement and authorised internal notification. Human replies and follow-up are handled through the TimePilot business mail service.

Submitted details may be available to authorised RE Technologies operators and contracted providers only where needed for these purposes, or to advisers, regulators or other recipients where required by law or needed to protect rights and safety. We do not sell personal information.

Analytics and monitoring

If you allow optional analytics, PostHog records limited page-view, browser and device information with an anonymous identifier stored in this browser. Autocapture, advertising profiles and session replay are disabled. TimePilot does not send early-access form fields to PostHog.

The same choice permits Sentry to receive scrubbed browser error and diagnostic events. The configuration excludes form contents, email addresses, authentication data, breadcrumbs, cookies and URL query values, and does not enable performance tracing or session replay.

Overseas processing

Cloudflare, Supabase and Resend may process limited information in Australia, the United States and other locations described in their current service and subprocessor information. RE Technologies uses reasonable contractual, technical and organisational safeguards for overseas processing.

Retention and deletion

Lead records are kept only while needed to assess and arrange early access, maintain consent and delivery evidence, handle security or disputes, and meet legal obligations. Short-lived receipt and abuse-prevention records expire separately. Provider backups may age out rather than being deleted immediately.

You may request deletion, subject to identity verification and any record RE Technologies is required to retain.

Security

The planned controls include encrypted transport, server-only provider credentials, private database access, row-level security, bounded inputs, Turnstile verification, rate limits, idempotent receipts, environment separation and restricted operator access. No internet service can guarantee absolute security.

Your rights and choices

You may ask to access or correct personal information RE Technologies holds about you, request deletion where applicable, withdraw from future optional communications, or complain. RE Technologies may verify your identity and authority before acting. If a privacy complaint remains unresolved, you may contact the Office of the Australian Information Commissioner or another regulator with jurisdiction.

Changes

This notice will be reviewed before material changes to the information collected, purposes, providers, processing locations, retention or future TimePilot product services. A new version must be shown and accepted where renewed notice or consent is required.