Privacy Policy

1. Introduction

CW Timer, LLC ("we," "us," or "our") operates the CW Timerservice available at cwtimer.app (the "Service") and the marketing website at cwtimer.com (the "Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service and Website.

By using CW Timer, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and company name. This information is required to provide you with access to the Service.

2.2 ConnectWise API Credentials

To integrate with your ConnectWise Manage instance, we collect and store your ConnectWise API credentials. These credentials are encrypted at rest and are used solely to read and write time entries and related data on your behalf.

2.3 Time Entry Data

We store time entries, timer sessions, and related metadata (such as ticket references and charge codes) that you create through the Service. This data is synchronized with your ConnectWise Manage instance.

2.4 GPS / Location Data

CW Timermay request access to your device's location data for the ticket map feature. This is entirely optional and only collected when you explicitly grant permission through your browser or device. You can revoke location access at any time through your device settings. Location data is used solely to display ticket locations on a map and is not sold or shared with third parties.

2.5 Session and Usage Data

We automatically collect certain information when you access the Service, including your IP address, browser type, user agent, device information, and pages visited. This data is used for security, debugging, and improving the Service.

2.6 Billing Information

Payment processing is handled by Stripe. We do not store your full credit card number, CVC, or other sensitive payment details on our servers. Stripe may collect and store payment information in accordance with their own privacy policy.

2.7 AI Chat Messages

The Website includes an AI-powered chat feature. Messages you send through this chat are processed by Anthropic's API to generate responses. We may retain chat transcripts for support and improvement purposes. Anthropic processes messages in accordance with their own privacy policy.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Authenticate your identity and manage your account
• Synchronize time entries with your ConnectWise Manage instance
• Process subscription payments through Stripe
• Respond to support requests and communicate with you
• Monitor and analyze usage patterns to improve the Service
• Detect, prevent, and address security issues and abuse
• Comply with legal obligations

4. Data Storage and Security

Your data is stored in a Neon Postgres database. The Service is hosted on Vercel. ConnectWise API credentials are encrypted at rest using industry-standard encryption. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

We use the following third-party services to operate CW Timer:

• Stripe — payment processing and subscription management
• Vercel — application hosting and deployment
• Neon — PostgreSQL database hosting
• Anthropic — AI chat feature on the marketing website

Each of these providers has their own privacy policy governing their handling of data. We recommend reviewing their respective policies.

6. Cookies and Sessions

CW Timer uses cookies to maintain authentication sessions. These cookies are essential for the Service to function and cannot be disabled while using the Service. We do not use cookies for advertising or third-party tracking purposes.

7. Data Retention and Deletion

We retain your data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

Time entries that have been synchronized to your ConnectWise Manage instance are governed by your own ConnectWise data retention policies and are not affected by account deletion in CW Timer.

8. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate or incomplete data
• Deletion — request that we delete your personal data
• Export — request a machine-readable export of your data
• Withdraw consent — for optional data collection such as GPS location

To exercise any of these rights, contact us at hello@mflit.com. We will respond to your request within 30 days.

9. Children's Privacy

CW Timer is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: hello@mflit.com
• Contact page: cwtimer.com/contact