Last updated: 25 September 2026
Timeback runs jointimeback.com, the Timeback app and our training programs. This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it and what you can ask us to do about it. The short version: we collect the minimum we need to run our programs, we never sell your data, and you can ask us to delete it at any time.
On this page
The controller of your personal data is:
TimebackAI OÜ
Registry code 17544750 (Estonian Business Register)
Sepapaja tn 6, Lasnamäe linnaosa, 15551 Tallinn, Harju maakond, Estonia
Email: hello@jointimeback.com
We are not required to appoint a Data Protection Officer. Privacy questions go straight to the founders at the address above — that is the fastest route and we answer them ourselves.
We only collect data you give us or that is generated when you use the site. Here is every category, why we use it, and the legal basis under Article 6 of the GDPR.
| Data | Why | Legal basis |
|---|---|---|
| Newsletter Email address, sign-up date |
To send you the emails you asked for: webinars, live sessions, events, occasional writing. Every email has an unsubscribe link. | Consent (Art. 6(1)(a)). You can withdraw it at any time. |
| Forms and booking requests Name, email, company, phone if you give it, and what you write in the message |
To answer you, prepare a call, and work out whether a program is a fit. | Steps taken at your request before entering a contract (Art. 6(1)(b)). |
| Program participants Name, email, billing details, company, what you share in onboarding questionnaires, notes and materials from your sessions, the workflows and automations we build with you |
To deliver the program you bought: prepare and run your sessions, build your setup, give you access to the app and to the course and workflow libraries, and support you during the program. | Performance of our contract with you (Art. 6(1)(b)). |
| Payments Billing name, email, country, amount, invoice and transaction reference |
To take payment and issue invoices. Payments are handled by Stripe — we never see or store your card number. | Contract (Art. 6(1)(b)) and our legal accounting obligations (Art. 6(1)(c)). |
| App account Login email, account settings, content you create in the Timeback app |
To run your account and give you the app. | Contract (Art. 6(1)(b)). |
| Analytics Pages visited, referrer, approximate location from a truncated IP, device and browser type, a randomly generated visitor ID |
To understand which pages are useful and where people get lost, so we can improve the site. Aggregated — we do not use it to identify you. | Consent (Art. 6(1)(a)), asked for in the cookie banner. Nothing is loaded until you accept. |
| Server and security logs IP address, timestamp, requested URL, user agent |
Kept automatically by our hosting provider to serve the site, spot abuse and keep it secure. | Our legitimate interest in a site that works and is not attacked (Art. 6(1)(f)). |
| Emails you send us Your message and contact details |
To reply and to keep a record of what we agreed. | Legitimate interest in answering you, or contract if you are a client (Art. 6(1)(b) and (f)). |
Giving us your data is voluntary. If you do not give us the data marked as required in a form, we may not be able to answer you or deliver the program.
We do not carry out automated decision-making or profiling that produces legal effects for you.
We set only the storage that is strictly necessary for the site to work unless you tell us otherwise. Google Analytics is not loaded at all until you accept it in the banner, and you can change your mind at any time through cookie settings. The full list of cookies, what each one does and how long it lasts is in our Cookie Policy.
We never sell or rent your personal data, and we do not share it for anyone else's marketing. We do use service providers ("processors") to run the business. Each one is bound by a data processing agreement and may only use your data on our instructions.
| Provider | What for | Where |
|---|---|---|
| Vercel | Website hosting and server logs | USA / EU |
| Brevo | Newsletter, contact lists, form submissions and the notification emails they trigger | EU (France) |
| Stripe | Payments, invoicing, fraud prevention | EU (Ireland) / USA |
| Analytics, Workspace (email, drive), Calendar and booking pages, Forms | EU / USA | |
| Tally | Application and survey forms | EU (Belgium) |
| Calendly | Call scheduling | USA |
| Zoom | Live sessions and, where announced, recordings | EU / USA |
| Anthropic | The Claude tooling we build and run with you during programs | USA / EU |
| Tella | Video hosting for embedded videos | USA |
We may also disclose data to our accountants and legal advisers, or to an authority where the law requires it. If Timeback is ever sold or merged, your data may transfer to the buyer under the same protections, and we will tell you before that happens.
Some of the providers above are based in the United States. When your data goes there, we rely on one or both of these safeguards: the provider's certification under the EU–US Data Privacy Framework, or the European Commission's Standard Contractual Clauses together with the additional measures our providers commit to. You can ask us for a copy of the relevant safeguards at hello@jointimeback.com.
Under the GDPR you can ask us to:
Write to hello@jointimeback.com and we will answer within one month. It is free, unless a request is clearly excessive or repetitive.
If you think we have got it wrong, you can complain to the Estonian Data Protection Inspectorate — Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, info@aki.ee, aki.ee — or to the supervisory authority in the EU country where you live or work. We would rather you came to us first.
The site runs over HTTPS. Access to client data is limited to the two founders and to the providers listed above, protected by strong passwords and two-factor authentication. We keep as little as we can, for as short as we can. No system is perfect: if a breach ever puts your rights at risk, we will tell you and the supervisory authority as the law requires.
We teach people to work with AI agents, and we use them ourselves. Two commitments: we do not put your personal data into AI tools beyond what is needed to deliver your program, and we use business and API plans whose terms do not allow your content to train the provider's models. During a program you decide what goes into your own setup — we advise you on how to keep client data out of it.
Our programs are for professionals. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, write to us and we will delete it.
When we change this policy we update the date at the top. If a change matters to you — a new purpose, a new category of data — we will tell you by email or on the site before it takes effect.
Anything unclear, or a request to make? Email hello@jointimeback.com. Company details are on our Legal Notice.
Claude is a trademark of Anthropic, PBC. Timeback is an independent training company; our programs, including the Timeback Claude Bootcamp, are not affiliated with, sponsored, or endorsed by Anthropic. All other product names, logos and brands mentioned on this site are the property of their respective owners and are used for identification purposes only.