Privacy Policy

1. Introduction

Countdown Trigger ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using Countdown Trigger, you consent to the data practices described in this policy. If you do not agree with our policies, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly, including:

• Account Information: Email address, password (hashed), name
• Profile Information: Phone number, timezone preferences
• Countdown Data: Names, descriptions, schedules, action configurations
• Message Content: Email content, SMS messages, webhook payloads you configure
• Recipient Information: Email addresses and phone numbers of your designated recipients
• Payment Information: Processed securely by Stripe; we do not store full payment card details
• Communications: Support requests, feedback, and correspondence with us

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, timestamps, click patterns
• Log Data: IP addresses, access times, referring URLs, error logs
• Cookies and Similar Technologies: Session cookies, authentication tokens

2.3 Information from Third Parties

We may receive information from authentication providers (if you use social login), payment processors (transaction confirmations), and analytics services.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide our services to you
• Legitimate Interests: Improving our services, security, fraud prevention, and analytics
• Consent: Where you have explicitly consented (e.g., marketing communications)
• Legal Obligation: Compliance with applicable laws and regulations

4. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service
• Process and execute your countdown actions (emails, SMS, webhooks)
• Process payments and manage subscriptions
• Send transactional communications (check-in reminders, account notifications)
• Respond to support requests and provide customer service
• Monitor and analyze usage patterns to improve the Service
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations and enforce our Terms of Service
• Send marketing communications (with your consent, where required)

5. Information Sharing and Disclosure

We do not sell your personal information. We may share information with:

5.1 Service Providers

Third parties who assist in our operations:

• Supabase: Authentication and database hosting
• Twilio: SMS message delivery
• Email Providers: Email delivery services
• Stripe: Payment processing
• AWS: Cloud infrastructure and scheduling
• Analytics Providers: Usage analytics

5.2 Legal Requirements

We may disclose information when required to:

• Comply with applicable laws, regulations, or legal processes
• Respond to lawful requests from government authorities
• Protect our rights, privacy, safety, or property
• Enforce our Terms of Service
• Investigate potential violations or fraud

5.3 Business Transfers

In connection with a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred. We will notify you of any such change.

6. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws than your jurisdiction.

For transfers from the EEA, UK, or Switzerland, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to ensure your data receives adequate protection.

7. Data Retention

We retain your information for the following periods:

• Account Data: Until you delete your account, plus 30 days for backup recovery
• Countdown Data: Until you delete the countdown or your account
• Triggered Messages: Logs retained for 90 days for troubleshooting
• Payment Records: 7 years for tax and legal compliance
• Server Logs: 90 days
• Analytics Data: 26 months (aggregated)

Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes.

8. Data Security

We implement appropriate technical and organizational security measures, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing
• Access controls and authentication requirements
• Regular security assessments
• Secure cloud infrastructure

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Your Privacy Rights

9.1 Rights for All Users

All users have the right to:

• Access your personal information
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Opt out of marketing communications

9.2 Additional Rights for EEA/UK Residents (GDPR)

If you are in the EEA, UK, or Switzerland, you also have the right to:

• Restriction: Request restriction of processing
• Objection: Object to processing based on legitimate interests
• Portability: Receive your data in a structured, machine-readable format
• Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
• Complaint: Lodge a complaint with your local supervisory authority

9.3 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the sale or sharing of personal information (we do not sell your data)
• Right to Non-Discrimination: Not be discriminated against for exercising your rights
• Right to Limit Use: Limit the use of sensitive personal information

Categories of Personal Information Collected: Identifiers (email, IP address), commercial information (transaction history), internet activity (usage data), geolocation data (approximate location from IP), and professional information (if provided).

Do Not Sell or Share: We do not sell or share (as defined by CCPA/CPRA) your personal information for cross-context behavioral advertising.

9.4 Exercising Your Rights

To exercise any of these rights, contact us at privacy@countdowntrigger.com. We will respond within 30 days (or 45 days for CCPA requests). We may need to verify your identity before processing your request.

10. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for authentication and security (cannot be disabled)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how you use the Service

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Service functionality.

11. SMS/Text Messaging

When you provide your phone number and consent to receive SMS messages, we may send:

• Check-in reminders before countdown deadlines
• Deadline alerts when countdowns are about to expire
• Trigger notifications when countdown actions are executed
• Account security notifications (two-factor authentication, password resets)

Message Frequency: Varies based on your countdown settings and notification preferences. You control frequency through account settings.

Opt-Out: Reply STOP to any message or disable SMS in account settings. You will receive a confirmation message after opting out.

Costs: Message and data rates may apply. Contact your mobile carrier for plan details.

Help: Reply HELP to any message or contact support@countdowntrigger.com.

12. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately at privacy@countdowntrigger.com, and we will delete such information.

13. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or prominent notice on the Service at least 30 days before they take effect. Your continued use of the Service after such notice constitutes acceptance of the updated policy.

15. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Countdown Trigger
Email: privacy@countdowntrigger.com

Data Protection Inquiries:
For GDPR-related inquiries, you may contact us at dpo@countdowntrigger.com