Your Security is Our Priority
How TimeCampus protects your data and privacy across every channel — insight without surveillance, with security as a first principle.
Security Features
Advanced security measures that protect every aspect of your experience
Encryption in Transit and at Rest
Traffic between your device and TimeCampus uses TLS 1.2 or later, and databases, backups and file storage are encrypted at rest with AES-256.
Strong Sign-In
Accounts are protected by the Burdenoff identity platform, with multi-factor authentication and single sign-on, and every request is authorised at the API gateway.
Secure Data Storage
Your data is stored in India, on Amazon Web Services in the Mumbai region, with automated encrypted backups and tightly controlled operator access.
Trusted Payment Processing
Paid plans are billed through Razorpay (India) and Stripe (elsewhere), both PCI-DSS-compliant processors. We never see or store card numbers.
Privacy Protection
Your privacy matters to us. Here's how we protect your personal information.
Data Minimization
We only collect data necessary for providing our services and improving user experience.
Transparent Policies
Our privacy policy clearly explains what data we collect, how we use it, and your rights.
User Control
You have full control over your data with options to view, edit, download, or delete your information.
No Data Selling
We never sell your personal data to third parties or use it for purposes other than stated.
Standards We're Building Toward
These are the security and privacy standards we design the platform around — not certifications already obtained.
GDPR-Aligned
Built around European data-protection principles and user data rights
SOC 2 Principles
Engineered toward SOC 2 security and availability principles
Privacy by Design
Insight without surveillance, with privacy as a default
ISO 27001 Practices
Following established information-security management practices
Stay Safe Online
Follow these best practices to keep your account and transactions secure
Keep Your App Updated
Always use the latest version of our app for the newest security features and patches.
Use Strong Passwords
Create unique, complex passwords and enable two-factor authentication on your account.
Review What You Capture
Check your data-capture and retention settings so the Platform only records what you intend.
Report Suspicious Activity
Immediately report any unusual account activity or suspicious behavior to our support team.
Security Incident Response
If you notice any suspicious activity on your account or encounter a security issue, we're here to help immediately.
Immediate Actions:
- • Change your password immediately
- • Enable two-factor authentication
- • Review your account's recent activity
- • Contact our security team
We Will:
- • Acknowledge your report within 3 business days
- • Secure affected accounts
- • Keep you updated until it is resolved
- • Notify affected customers of a confirmed personal-data breach within 72 hours
Responsible Disclosure
Help us keep TimeCampus secure. If you discover a vulnerability, report it to us privately and we'll work with you to investigate and resolve it. We do not offer monetary rewards for vulnerability reports.
Scope
timecampus.com, app.timecampus.com, docs.timecampus.com, the TimeCampus APIs, and the TimeCampus desktop, mobile, browser and code-editor apps.
Please
- • Report privately and give us 90 days to fix before you disclose.
- • Use only accounts and workspaces you own or are allowed to test.
- • Do not access, change or keep other people's data, and stop as soon as you reach any.
- • No denial-of-service, spam, social engineering or physical testing.
Our commitments
- • We acknowledge reports within 3 business days and keep you updated.
- • Good-faith research within these rules is authorised: we will not pursue legal action or ask others to.
- • We credit you on request once the issue is fixed.
- • Need an encrypted channel? Say so in your first message and we will set one up.
Secure by Design
We're building TimeCampus around security and privacy from day one — because your trust is the whole point.