Privacy Policy

1. General provisions

This Policy describes what personal data IT-m US LLC (Florida document No. L23000392381; the “Operator”) processes when you use the timespotter.app website, and on what terms.

2. What data is processed

Data you provide yourself in the request form: your name and phone number.

Data collected automatically: IP address, browser and device information, page address, date and time of the visit, and cookies. Yandex Metrica is used to collect statistics.

3. Purposes of processing

Contacting you about your request, consultations on the TimeSpotter service, improving the website and analyzing traffic.

4. Legal basis

The consent of the data subject, as well as the Operator’s legitimate interest in keeping the website running.

5. Retention period

Data is stored until the purpose of processing is achieved, but no longer than three years, or until consent is withdrawn. Anonymized statistics may be stored indefinitely.

6. Automated analysis of work activity

On paid plans, TimeSpotter can automatically determine which task an employee’s working time belongs to. For this purpose, technical information about activity is sent to an external data processing service, which may be located in another country: the name of the program in use, the website address, a shortened window title and the time of the event. Screenshots, the contents of documents and correspondence are not sent. The result is used only to allocate working time to tasks within the company’s account. The external service does not use the information for any other purpose and does not link it to the employee’s identity: the data is sent in de-identified form, without a name, email address or other direct identifiers.

7. Data sharing

The Operator does not disclose personal data to third parties, except where required by law. Anonymized visit data is processed by Yandex Metrica in accordance with its own terms.

8. Data protection

The Operator takes organizational and technical measures to protect data against unauthorized access, alteration, disclosure and destruction. Data is transmitted from the website over the secure HTTPS protocol.

9. Your rights

You have the right to request information about how your data is processed, to have it corrected, blocked or deleted, and to withdraw your consent. To do so, write to privacy@timespotter.ru.

10. Cookies

The website uses cookies to function properly and to collect statistics. You can disable cookies in your browser settings, but some features of the website may then not work correctly.

11. Additional information for visitors in the EU, the EEA and the United Kingdom (GDPR)

If you are in the European Union, the European Economic Area or the United Kingdom, the processing of your personal data is also subject to the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) or, in the United Kingdom, the UK GDPR. This section supplements the rest of this Policy.

Controller: IT-m US LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA, privacy@timespotter.ru (referred to in this Policy as the “Operator”).

Legal bases (Article 6(1) GDPR): your consent (point (a)) — for processing the data you enter in the request form; steps taken at your request before entering into a contract (point (b)) — for replying to your request and providing a consultation; the Operator’s legitimate interests (point (f)) — for keeping the website running and secure and for analyzing traffic. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Recipients: service providers that process data on the Operator’s behalf: the website’s hosting provider (Germany), Bitrix24 (the CRM system that receives requests, and the website chat) and Yandex Metrica (website statistics).

Transfers outside the EU and the EEA: the Operator is located in the USA, and Bitrix24 and Yandex Metrica process data in Russia. These countries may not ensure a level of data protection equivalent to that in the EU. Data from the request form is transferred because this is necessary to take steps at your request before entering into a contract (Article 49(1)(b) GDPR).

Your rights: access to your data (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), objection to processing based on legitimate interests (Article 21) and withdrawal of consent at any time (Article 7(3)). To exercise them, write to privacy@timespotter.ru. The Operator will reply within one month of receiving your request.

Right to lodge a complaint: you may lodge a complaint with a data protection supervisory authority, in particular in the EU or EEA member state where you live or work or where the alleged infringement took place; in the United Kingdom, with the Information Commissioner’s Office (ICO).

Providing data: providing your data in the request form is voluntary, but without your name and phone number the Operator cannot contact you.

Automated decision-making: the website does not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you (Article 22 GDPR).

12. Changes to this Policy

The Operator may amend this Policy. The current version is always available on this page.

Publication date: November 3, 2026.

Operator’s contact details: IT-m US LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA, privacy@timespotter.ru.