Privacy Policy

Account information. When you register for a TTF Service, we collect your name, email address, password (stored as a salted hash — we never store or can see your plaintext password), mobile number, and organization/company details where applicable.

Content you provide. Depending on the Service, this includes email messages and attachments sent or received through TTF Mail, employee, attendance, and payroll records entered into HRMS, and any other content you create or upload.

Device and push notification data. Our mobile apps register a device push token (via Firebase Cloud Messaging) so we can deliver notifications such as new-mail alerts. We also record basic device platform information (iOS/Android).

Usage and log data. We automatically log standard technical data — login timestamps, IP address, and basic request metadata — to operate, secure, and troubleshoot our Services.

• To provide, operate, and maintain each Service.
• To authenticate you and keep your account secure.
• To deliver messages and notifications you've asked for (e.g. mail delivery, new-mail push alerts).
• To respond to support requests and communicate important account or service updates.
• To detect, investigate, and prevent fraud, abuse, or security incidents.
• To improve our Services based on aggregated, non-identifying usage patterns.

We do not sell your personal data, and we do not use the content of your private messages or HR records for advertising.

We share information only with service providers who help us operate our Services, under obligations to protect it, and only for the purposes described below:

• Firebase (Google) — delivers push notifications to our mobile apps.
• Resend — sends and receives email on behalf of TTF Mail, including for organizations using a custom domain.
• Cloudflare — manages DNS records for organizations that connect a custom mail domain.
• Cloudinary — stores uploaded files, images, and attachments.
• A payment processor — handles billing for paid plans, where applicable. We do not store your card details ourselves.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, property, or safety of TTF, our users, or others.

Passwords are hashed (bcrypt) and never stored in plaintext. Sessions are authenticated with signed tokens. Where enabled, API traffic between our apps and servers can additionally be protected with AES-256-GCM payload encryption on top of standard TLS. No method of transmission or storage is 100% secure, but we work to use practices appropriate to the sensitivity of the data involved.

We retain account and content data for as long as your account is active or as needed to provide the Service. You can request deletion of your account and associated personal data at any time by contacting us at support@timetofuture.com. Some information may be retained where required for legal, security, or legitimate business record-keeping purposes.

Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to withdraw consent where processing is based on consent. You can exercise these rights by contacting us at contact@timetofuture.com. You can also disable push notifications at any time from your device's notification settings.

Our Services are intended for business and workplace use and are not directed at children. We do not knowingly collect personal information from children under 16.

Time to Future Pvt. Ltd. is based in Noida, Uttar Pradesh, India. If you use our Services from outside India, your information may be transferred to and processed in India or other countries where our service providers operate.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of a Service after changes take effect means you accept the revised policy.

Questions about this Privacy Policy or how we handle your data? Reach out to contact@timetofuture.com or write to us at B Block, Sector 63, Noida, Uttar Pradesh 201309, India.