Last Revised: October 7, 2026
Overview
Timeglass, Inc. ("Timeglass") requires applicable Data Processing Agreements (DPAs) for services that process personal data on behalf of our customers. These agreements establish the parties’ processing roles and obligations. This page summarizes our processor-management approach; contact our Privacy Team for the agreement applicable to your use of Timeglass.
Our Data Processors
Timeglass uses the following data processors to provide our services:
The current List of Sub-Processors describes each service and the data it may process, including cloud infrastructure, direct AI APIs, OpenRouter and its permitted inference hosts, the workspace assistant, support, email and scheduling services, and website analytics and advertising services. Service-specific terms determine each provider’s role.
Provider Retention
Providers may retain personal data beyond the time needed to return a response, including for abuse monitoring, security or legal obligations under their applicable terms. The provider list describes service-specific retention, including the Google Gemini Developer API’s documented 55-day abuse-monitoring retention. Timeglass’s own deletion settings do not determine provider retention. Any different retention commitments in your agreement with Timeglass remain subject to that agreement.
DPA Execution
Applicable processor agreements may be separately signed or incorporated into accepted service terms. Timeglass tracks the agreement, covered service and evidence of acceptance in its vendor review. A publicly available DPA alone does not establish acceptance. Required agreement topics include:
- Subject matter and duration of processing
- Nature and purpose of processing
- Types of personal data and categories of data subjects
- Data subject rights and controller obligations
- Sub-processor authorization and management
- International data transfer mechanisms (Standard Contractual Clauses where applicable)
- Security and confidentiality obligations
- Audit and compliance procedures
Processor Responsibilities
Timeglass requires its processors to:
- Process personal data only on documented instructions from Timeglass
- Ensure that persons authorized to process personal data have committed to confidentiality or are under an appropriate legal obligation
- Implement and maintain appropriate technical and organizational security measures
- Obtain prior written authorization before engaging sub-processors
- Assist Timeglass in responding to data subject requests and exercising their rights under GDPR
- Assist Timeglass in ensuring compliance with GDPR obligations
- Delete or return all personal data after termination of services
- Make available all information necessary to demonstrate compliance and allow for audits
Data Subject Rights
Under GDPR and other applicable privacy laws, you have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request erasure of your data (right to be forgotten)
- Request restriction of processing
- Receive your data in a portable format
- Object to processing
- Lodge a complaint with a supervisory authority
For questions about Data Processing Agreements or to exercise your rights, please contact us at privacy@timeglass.ai.
Contact & Support
If you have questions about our data processing practices or our processors, please reach out to our Privacy Team at privacy@timeglass.ai.