Privacy Policy
Last updated: 24 October 2026
1. Who we are
BrandTimer is a product of Vivivo Solutions, operated under the Uynix brand. For the personal data this policy describes, the controller is Vivivo Solutions, ul. Cicha 26, 96-513 Kozłów Biskupi, Poland. NIP: 1251758025. REGON: 526903367.
Contact: contact@uynix.com. We have not appointed a data protection officer. This policy covers the BrandTimer site, app, editor, and timer images. It does not cover EmailStitch.
2. Two roles
We are the controller for accounts, billing, security of the service, and the cookies on our site.
You are the controller for the templates and brand kits you store, and for the decision to put a timer in an email. We process that content only to provide BrandTimer. The Data Processing Addendum is the contract for that processing. People who open your emails are your recipients. Their addresses stay in your email tool. We do not receive them.
3. What we process, why, and the legal basis
| Data | Why | Legal basis |
|---|---|---|
| Account: email address, and the name and profile details your sign-in provider shares (including Google, if you use it). Passwords are stored by Clerk, not by us. | Create the account, sign you in, and send service email. | Contract, Art. 6(1)(b) GDPR. |
| Timers: name, HTML and CSS, deadline, time zone, whether the deadline is fixed or comes from your email tool, the email tool you picked, image size, and dates. | Save the timer and build the image. | Contract, Art. 6(1)(b). Where the template is your content, we act as your processor. |
| Brand kits: name, website address, colours, fonts, shape notes, and free-text notes. | Reuse a brand and restyle a timer. | Contract, Art. 6(1)(b), as your processor. |
| A public page at a website address you give us, limited to styling (colours, fonts, style blocks). | Match the restyle to that site. | Contract, Art. 6(1)(b), on your instruction. |
| The template and brand fields sent to the AI provider for a restyle. | Return restyled HTML. | Contract, Art. 6(1)(b), on your instruction. We do not use it to train models. |
| Open counts: one added to a counter for that timer, that day, and that month. No recipient email, and no per-open record. | Show usage in the app and apply plan allowances. | Contract, Art. 6(1)(b). |
| IP address, used only as an in-memory counter for a short window (up to one hour for saves, up to 24 hours for an anonymous restyle). | Rate limits and abuse prevention. It is not written onto your account. | Legitimate interests, Art. 6(1)(f): keeping the service reliable. You can object; see section 8. |
| Connection data of an image request (such as IP address and user agent), processed by our host to deliver the file. | Serve the GIF and protect the service. We do not store it in our database and we do not use it to identify the person who opened the email. | Legitimate interests, Art. 6(1)(f): delivering the image you embedded. For your campaign, we do this as your processor. |
| A deadline your email tool adds to the image address. | Draw the remaining time for that open. We do not store it against a person. | Contract, Art. 6(1)(b), as your processor. |
| Plan, billing interval, subscription status, and Paddle customer and subscription ids. | Know which plan the account is on. | Contract, Art. 6(1)(b), and legal obligation for tax records held by Paddle, Art. 6(1)(c). |
| Service email about usage (your email address and the usage figures in the message), sent through Resend. Sign-in email is sent by Clerk. | Tell you when you reach 80% and 100% of monthly opens. | Contract, Art. 6(1)(b). |
| An unsaved timer kept in the browser’s session storage while you sign up. | So the design is still there after you create an account. It stays on that device until you save it or close the tab. | Contract, Art. 6(1)(b). |
We do not sell personal data. We do not use it for advertising. We do not run analytics cookies. We do not make decisions that produce legal effects, or similarly significant effects, by automated means alone. We do not train AI on your HTML.
If you use the editor without an account, we process only the in-memory rate-limit counter, the session-storage draft on your device, and, if you run a restyle, the template and brand fields for that request.
4. People who open an email
Loading the timer is an image request. We count it. We do not receive the recipient’s email address, we do not store their IP address in our database, and we do not build a profile of them. Your email tool may count the open on its own side. That counting is yours, under your tool’s terms.
Tell your recipients, in your own notice, that campaign emails load images from BrandTimer. You need your own lawful basis for sending the email.
5. Who receives data
| Recipient | Role | What they get |
|---|---|---|
| Clerk | Processor for sign-in. United States, with the EU-US Data Privacy Framework and/or Standard Contractual Clauses. Clerk DPA. | Account email, name, sign-in secrets, session. |
| Cloudflare | Processor for hosting and for AI restyle. United States and Cloudflare’s network, with the Data Privacy Framework and/or Standard Contractual Clauses. Cloudflare DPA. | The app and database, timer files, image delivery, and the restyle prompt (Workers AI). |
| Paddle | Independent controller for the payment. Merchant of record. United Kingdom and United States, with Standard Contractual Clauses. Paddle DPA. | What checkout needs to take payment, charge tax, and issue the invoice. We store only Paddle’s customer and subscription ids. |
| Resend | Processor for service email. United States, with Standard Contractual Clauses. Resend DPA. | Your email address and the usage message. |
We also share data if the law requires it, or to establish or defend a legal claim. We do not sell or share personal information for cross-context behavioural advertising, as those terms are used in the California Consumer Privacy Act.
6. Where data is processed
We are in Poland. Clerk, Cloudflare, and Resend process data in the United States. Paddle processes payment data in the United Kingdom and the United States. Transfers out of the European Economic Area rely on the EU-US Data Privacy Framework, where the recipient is certified, and on Standard Contractual Clauses. You can ask us for a copy of the safeguards we use.
7. How long we keep it
- Account, timers, brand kits, and usage counts: until you delete the account. Deleting a single timer hides it from the app and serves the “after the deadline” image, so the record stays until the account is deleted.
- Image files: removed when you delete the account.
- Rate-limit counters: kept in memory for the window described above, then discarded.
- Session-storage draft: until you save it or the tab session ends.
- Invoices and tax records: kept by Paddle for as long as tax law requires. We do not keep a separate copy of your card or invoice.
- Short-lived backups at our host, where they exist, age out on the host’s cycle. We do not restore them for ordinary use.
8. Your rights
If GDPR applies, you can ask us to:
- access the personal data we hold about you, and get a copy;
- correct it;
- delete it, including by deleting the account in Settings;
- restrict processing;
- receive the data you gave us, in a portable format, where the right applies (account email and the content of your timers and brand kits);
- object to processing based on legitimate interests;
- lodge a complaint with a supervisory authority.
Our lead authority is the President of the Personal Data Protection Office (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland, uodo.gov.pl. You can also complain to the authority where you live or work. We reply within one month, or we tell you why we need up to two more months.
There is no marketing list. Service emails about usage are part of the product. Sign-in emails come from Clerk.
If you are a California resident, you can ask us to know, delete, or correct personal information, and you will not be discriminated against for asking. We do not sell or share it, and we do not use or disclose sensitive personal information for purposes that give you a right to limit that use. We reply within 45 days, with one 45-day extension if we tell you. We verify the request by confirming it comes from the account email.
Email contact@uynix.com. If a request is about a recipient of your campaign, we point you to the account that sent it, because that customer is the controller.
9. Security
The site is served over HTTPS. Each account sees only its own timers and brand kits. Paddle notifies us of payments with a signed webhook. Saves and anonymous restyles are rate-limited. No method of transmission or storage is perfectly secure.
10. Breach
If we become aware of a personal-data breach that is likely to result in a risk to people’s rights, we notify the supervisory authority within 72 hours of becoming aware of it, where GDPR requires that, and we notify affected people where the risk is high. If the breach affects content we process for you, we tell you without undue delay.
11. Children
BrandTimer is not directed at anyone under 16. We do not knowingly create accounts for children.
12. Changes
We update this policy when the product or the law changes. The date at the top is the current version. If a change is material, we will say so in the app or by email.
13. Contact
Vivivo Solutions, ul. Cicha 26, 96-513 Kozłów Biskupi, Poland. NIP: 1251758025. REGON: 526903367.