Privacy Policy

Last update: October 5, 2026

1. Introduction

ASKING GALAXY S.R.L. ("we", "us", or "our") respects your privacy and is committed to protecting your personal data when using CatMai.

This policy explains what data we collect, why we collect it, and how you can exercise your rights under GDPR and applicable laws.

2. Data Controller

ASKING GALAXY S.R.L.
Dobrești, nr. 306, comuna Dobrești, județul Argeș, România
Email: privacy@timesimplify.com
Phone: +40 750 246 655

3. Data We Collect

3.1 Data provided directly by you

  • Identification data: first name, last name, email address
  • Account data: encrypted password, account preferences
  • Payment data: card-related details are processed by Stripe
  • Event data: details for events you create and manage
  • Communications: messages sent through the contact form

3.2 Data collected automatically

  • Technical data: IP address, browser type, operating system
  • Usage data: visited pages, session duration, actions performed
  • Cookies: according to our Cookie Policy

3.3 Data from third parties

  • Social login: if you sign in with Google, we receive your name and email
  • Payment processor: Stripe provides us with payment confirmations

4. Legal Basis & Purpose

  • Contract performance: to provide the services you request
  • Consent: for marketing and non-essential cookies
  • Legitimate interest: to improve security and service quality
  • Legal obligation: accounting, tax and legal compliance

5. Purposes of processing

  • Provide and manage your account
  • Process payments and manage subscriptions
  • Communicate service updates and operational notices
  • Improve and personalize user experience
  • Ensure platform security and fraud prevention
  • Comply with legal obligations
  • Direct marketing only with valid consent

6. Data sharing

We do not sell personal data. We share data only with trusted processors and only when necessary.

  • Service providers: Supabase (hosting), Stripe (payments), Vercel (hosting)
  • Authorities: when legally required
  • Business partners: only with explicit consent

6.1 AI assistants (ChatGPT, Claude, Grok and others)

If you choose to connect your account to an AI assistant, you explicitly authorize the connection through OAuth. The assistant can read and change event data within your role permissions for the tasks you request: planning and editing agendas, displaying messages, reading results and archiving events.

Shared data may include organization events, titles, descriptions, dates and times, event venue, agendas and their notes, speaker names, live status, screen messages, screen, speaker and registration links, registration, ticket and check-in counts, audience question texts and aggregated poll results. We do not send named registration lists, attendee emails or stored question author identities. Free text entered by organizers or attendees may contain personal data; avoid including details unnecessary for the task.

The recipient is the provider of the assistant you connect, such as OpenAI for ChatGPT, Anthropic for Claude or xAI for Grok. The provider processes and retains received data under its own privacy policy and your account settings. Revoking the connection does not delete data already sent to the provider.

You can revoke OAuth access at any time under Settings → AI assistants. For API key connections, revoke the key separately under Settings. Event creation, edits, archiving and messages executed through the assistant are recorded in your organization audit log with the organizer, assistant and action details. Data retained by CatMai follows the periods in section 8; for data retained by the assistant, consult its provider privacy policy and deletion controls.

7. International transfers

  • We use adequacy decisions where available
  • We implement EU-approved Standard Contractual Clauses
  • We work with certified providers where applicable

8. Data retention

  • Account data: during account lifetime + 30 days after deletion
  • Payment data: 10 years (tax/legal obligations)
  • Usage data: 2 years
  • Communications: 3 years
  • Cookies: according to the Cookie Policy

9. Your rights

You can request access, rectification, deletion, restriction, portability, or objection by contacting us at privacy@timesimplify.com.

We respond to valid privacy requests within 30 days.

10. Data security

  • SSL/TLS encryption for communications
  • Modern password hashing and secure authentication flows
  • Restricted access based on need-to-know principle
  • Continuous monitoring and backup strategy

11. Children

Our service is not intended for individuals under 16 years old. If we identify such data, we remove it without undue delay.

12. Cookies

We use cookies and similar technologies. For full details, please read our Cookie Policy.

13. Policy updates

We may update this policy periodically. Material changes are communicated via email or in-product notice.

14. Complaints

If you believe your data was processed unlawfully, you can lodge a complaint with your data protection authority.

ANSPDCP
B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, București
Email: anspdcp@dataprotection.ro
Website: www.dataprotection.ro

15. Contact

Data Protection Contact
Email: privacy@timesimplify.com
Address: Dobrești, nr. 306, comuna Dobrești, județul Argeș, România