Privacy policy - 3rd party apps

Last updated: July 29, 2026

To help us run Timetastic we use some 3rd party apps and services. Things like email providers, customer service software, cloud hosting providers. Obviously this means sharing some personal data with these services - so we establish GDPR compliant processing agreements with each one and check there are appropriate safeguards in place.

The following is a list of sub-processors we use and what we use them for:

Peaberry Software Inc.

We use Customer.io for sending emails. To do this Customer.io stores user names, email addresses and analytical data on their usage of Timetastic. We use this data to make sure we only send emails that are relevant to your use of Timetastic.

The types of data shared are: Identity, Contact, Technical, Profile, Usage.

All the data is stored in the EU.

Basis of transfer is the UK-EU adequacy agreement.

Intercom R&D Unlimited Company

We use Intercom for customer support and to host the content on our help centre. When you send a support request or visit our help centre, your name and email address will appear in Intercom along with the discussion between us.

The types of data shared are: Identity, Contact, Technical, Profile, Usage.

Data is stored in the USA.

Basis of transfer is a Data Processing Agreement that includes the EU-U.S. Data Privacy Framework and the UK-US Data Privacy Framework.

Churnkey Inc.

We use Churnkey to manage subscription cancellations. When you cancel your Timetastic subscription, Churnkey processes your account information to present cancellation options and retention offers.

The types of data shared are: Identity, Contact, Usage.

Data is stored in the USA.

Basis of transfer is a Data Processing Agreement that includes the EU Standard Contractual Clauses.

Sendgrid Inc.

All the transactional emails from Timetastic are sent out through Sendgrid Inc. That means sharing email addresses and email content.

The types of data shared are: Identity & Contact.

Data is stored in the USA.

Basis of transfer is a Data Processing Agreement that includes the International Data Transfer Addendum to the EU Standard Contractual Clauses.

Cloudflare Inc.

We use Cloudflare to deliver content globally, manage web traffic and as part of our web security setup. All information contained in web traffic to and from Timetastic goes through Cloudflare’s systems, but they don't have access to this information.

The types of data shared are: Technical - IP address and device information.

Data is stored worldwide.

Basis of transfer is the EU Commission Standard Contractual Clauses and UK transfer addendum.

Microsoft Inc.

We use Microsoft Azure to host and provide you with Timetastic (they are our cloud hosting provider).

The types of data shared are: Identity, Contact, Technical, Profile, Usage, Location.

Data is stored in the UK.

Agendrix Inc.

Service: Provision, development and maintenance of rota and timeclock functionality (including related processing of employee attendance, photographs and biometric match scoring where enabled by the Client)

‍Location of Processing: United Kingdom, Canada

‍Cross-border Documentation in place: Intra-group data sharing agreement incorporating appropriate safeguards for international transfers, including Standard Contractual Clauses and/or UK Addendum where required

Citation Group

Service: Infrastructure, development, IT and operational support services to the Processor

‍Location of Processing (Country): United Kingdom

‍Cross-border Documentation in place: N/A

HubSpot

Service: CRM, marketing automation, sales pipeline management, contact forms and customer communications.

‍Location of Processing: European Union, United States‍