Privacy Policy

Last updated: 1 November 2026

This policy explains how SpiderByte Studios ("we", "us"), handles personal data when you visit teamizio.com or use Teamizio (the "Service").

1. Our role

For account, billing and website data we act as the controller. For the content an organization stores in Teamizio (such as its members' tasks, duties, comments and images) we process data on behalf of that organization, which decides how its workspace is used.

2. Data we collect

Account data: name, email address, sign-in and multi-factor authentication details, and your role in each organization.
Organization content: teams, duties, tasks, comments, attached images and related activity that members add.
Device and notification data: push notification tokens and basic device information needed to deliver reminders.
Billing data: subscription, seat and invoice details. Payments are processed by Paddle, our Merchant of Record; we do not receive or store full card numbers.
Technical data: security and diagnostic logs such as IP address, timestamps and error reports.
Support data: messages you send us.

The teamizio.com website does not use advertising or tracking cookies.

3. How we use data

To provide, secure and maintain the Service (performance of our contract with you or your organization).
To process subscriptions and payments and meet tax and accounting obligations (contract and legal obligation).
To send service emails and notifications such as invitations, reminders and billing notices (contract).
To prevent abuse, investigate incidents and improve reliability (legitimate interests).
To respond to support requests (contract and legitimate interests).

We do not sell personal data and do not use organization content for advertising.

4. Service providers

We share data only with providers that help us run the Service, under contracts that protect it:

Google Cloud / Firebase for authentication, database, file storage, hosting and notifications. Organization data is stored in EU regions.
Amazon Web Services (SES) for sending service emails.
Cloudflare for domain and network services.
Paddle for checkout, payments, invoicing and sales tax as Merchant of Record. Paddle's handling of your data is described in Paddle's Privacy Notice.

Some providers may process data outside your country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

5. Retention

Organization content is kept while the subscription is active. After it ends the workspace is read-only for 90 days, then deleted.
An organization owner can permanently delete the organization at any time after confirming. Deletion removes its content from the live Service; residual copies in backups expire on our backup schedule.
Billing and invoice records are kept as long as tax and accounting law requires.
Security logs are kept for a limited period and then deleted.

6. Security

Data is encrypted in transit and at rest. Each organization's data is isolated, access follows role permissions, and multi-factor sign-in is supported.

7. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to your local data protection authority. If your data is part of an organization's workspace, we may refer your request to that organization. To exercise your rights, email support@teamizio.com.

8. Children

The Service is intended for organizations and is not directed at children under 16.

9. Changes

We may update this policy and will post the new version here with a new date. We will notify organization owners of material changes.

10. Contact

Privacy questions: support@teamizio.com.