Privacy Policy

1. Who we are

Chronolio ("we", "us") provides an AI-powered timeline and event planning platform at chronolio.com and app.chronolio.com. We are based in South Africa and process personal information in accordance with the Protection of Personal Information Act (POPIA) and, where applicable, the EU General Data Protection Regulation (GDPR). You can contact us about privacy at admin@chronolio.com.

2. Information we collect

• Account information: username, email address, and password (stored hashed) when you create an account.
• Content you create: timelines, events, templates, contacts, vendors, and images you upload to the service.
• Payment information: subscription and billing data processed by our payment provider, Lemon Squeezy. We do not store your card details.
• Communications: messages you send via our contact form and newsletter signup preferences.
• Usage data: aggregate analytics about how the website and app are used (see the Cookie Policy).

3. How we use your information

• To provide, maintain, and improve the service.
• To process subscriptions and payments.
• To generate AI-assisted timeline content: event descriptions you submit for AI processing are sent to our AI providers (Anthropic, OpenAI, and/or Google) solely to produce your requested output.
• To send transactional email (verification, password resets, sharing notifications) and, with your consent, product updates and offers.
• To respond to your inquiries and provide support.
• To protect the service against abuse and fraud.

4. Service providers we share data with

We use a small number of processors to run Chronolio: Neon (database hosting), Vercel (application hosting), Amazon Web Services S3 (image storage), Lemon Squeezy (payments), Calendly (demo scheduling), our SMTP email provider (transactional email), and AI providers (Anthropic, OpenAI, Google) for AI features. Each receives only the data required to perform its function.

5. Data retention

We keep your account data and content while your account is active. If you delete your account, associated timelines and personal data are deleted from our production systems, with residual copies in backups removed on their normal rotation schedule.

6. Your rights

Subject to POPIA and GDPR, you may request access to, correction of, or deletion of your personal information; object to processing; request portability; and withdraw consent for marketing at any time (every marketing email includes an unsubscribe link). To exercise any right, email admin@chronolio.com. You also have the right to lodge a complaint with the Information Regulator (South Africa) or your local supervisory authority.

7. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords, session security, and access controls. No method of transmission or storage is 100% secure, but we work to protect your information appropriately.

8. Children

Chronolio is not directed at children under 18, and we do not knowingly collect personal information from them.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page with an updated "Last updated" date.