Privacy Policy

Last updated: July 2026 · TimelySite

This policy explains what TimelySite collects when companies and crews use the web dashboard, Telegram bot, email inbox, and optional SMS features.

What we collect

Account data: company name, owner name, email, password (hashed), timezone.
Crew data: names, roles, project assignments, optional phone numbers for invites.
Telegram: Telegram user id and messages you send the bot (commands, notes, voice transcripts).
Jobsite data: projects, rooms, tasks, photos, material requests, check-ins, tickets, reports.
Client contacts (when used): name, phone, email, address for service and reminders.

Worker location and consent

Some check-in flows may request location from Telegram. Location sharing is optional and consent-based. Workers may skip sending location when the bot presents that option. Location, when provided, is used only to support site presence and manpower records for the worker’s company — not for advertising or sale to third parties.

Company owners and foremen who invite crew are responsible for telling workers that TimelySite may process jobsite activity, photos, and optional location for operational purposes.

SMS consent

Client SMS (appointment reminders, job-scope links) is sent only when a valid consent timestamp is recorded for that client. STOP/HELP are honored. Invite SMS to crew is initiated by the company that requested the invite.

How we use data

Run checklists, tasks, materials, tickets, and reports for the company that owns the data.
Authenticate web users and link Telegram accounts to the correct company user.
Optional AI assistance: questions and tool results stay within company-scoped data; AI never writes without human confirm.

Sharing

We use infrastructure providers (hosting, storage, email, SMS, Telegram Bot API) only to operate the product. We do not sell personal data. Cross-company access is blocked by design (tenant scoping).

Retention and security

Data is retained while the company account is active and as needed for operations and legal obligations. Media is stored privately; access uses signed URLs with expiry. Secrets and tokens are never committed to source control.

Your choices

Workers can stop using the bot and ask their company admin to deactivate their account. Owners can request export or deletion of company data by contacting support. Clients can opt out of SMS via STOP.

Contact

Privacy questions: contact your company administrator or TimelySite support through channels published on our website.