Timeout NOW

Data & Privacy

How Timeout NOW protects organizational information and works with service providers.

Timeout NOW uses layered administrative and technical controls appropriate to the information and service context. Controls include authenticated access, organization scoping, role and permission enforcement, password protections, session management, audit logging, controlled document history, evidence provenance, and least-necessary access patterns. Sensitive information should remain behind authenticated links rather than being exposed in email or SMS. Security and privacy controls are reviewed as capabilities, integrations and risks evolve. Organizations remain responsible for appropriate user access, device practices, local procedures and the information they choose to enter into the service.

Timeout NOW may use service providers to support hosting, email, SMS, mapping, storage, artificial intelligence, monitoring or other platform functions. Providers should receive only the information reasonably required for the service being performed and be subject to contractual, confidentiality, security and privacy expectations appropriate to the information involved. Timeout Studios Inc. remains accountable for personal information under its control when a third party processes it on its behalf. Material subprocessors and processing purposes should be documented and reviewed as the service evolves.