Privacypolicy.

1. Objective

This Privacy Statement articulates the privacy and data protection principles followed by Timidlly, Inc., also known as Timidlly (“Timidlly”, “we”, “us”, or “our”), operating in the United States, with respect to the personal information of its customers, business partners, contractors, prospects, and vendors whose personal information is processed by us (“Data Subjects”). This Privacy Statement explains how we collect, store, share and use (together, “process”) your personal information, your rights, and how to contact us. This United States edition of the Privacy Policy is directed to individuals located in the United States.

2. Scope of this Privacy Statement

This Privacy Statement applies to personal information processed by us on our websites (including www.timidlly.com and welcome.timidlly.com, owned and monitored by Timidlly, Inc., also known as Timidlly). By accessing our websites, purchasing our products or services, or sharing any personal information in the course of business, you agree to this Privacy Policy in addition to any other agreements that you might have entered into with us. In the event that such agreements contain terms that are in conflict with this Privacy Policy, the terms of those agreements shall prevail. If you access our website and avail of our services on behalf of a company (such as your employer) or other legal entity, you represent and warrant that you have the authority to bind that company or other legal entity to this Privacy Policy.

Timidlly will not be liable for any unsolicited information provided by you. You consent to Timidlly using such information as per this Privacy Statement.

3. Personal information collected by Timidlly

We may collect personal information such as your First Name, Last Name, E-mail Address, Job Title, Organization Name, Country, State, City, Phone Number, IP addresses, any other contact information, details of financial transactions and payment, product and service selections, and other information that identifies you.

We collect personal information from you at several different points, including but not limited to the following:

• when we correspond with you as a customer or prospective customer;
• when we correspond with you as a business partner or prospective business partner;
• when you visit our website or use the Platform;
• when you register as an end-user of our services and an account is created for you;
• when you contact us for help;
• when you sign up for our newsletter;
• when you attend our customer conferences or webinars; and
• when the site sends us error reports or application analytics data.

Mobile numbers and unsolicited information

When you provide information that enables us to respond to your request for products or services, we will, wherever permissible by relevant laws, collect, use and disclose this information to third parties for the purposes described in this Privacy Statement.

When you provide us your mobile phone number, you consent to the use of your mobile phone number for the purposes identified in this Privacy Statement. If you choose to refrain from receiving any text notifications from us on your mobile, we will not use your mobile number for such purposes unless required to meet legal requirements or legitimate business purposes. Message and data rates may apply. You may opt out of text messages at any time by replying STOP.

4. How Timidlly uses your Personal Information

The personal information we collect may be used to:

• provide information and deliver products and services as requested by you;
• provide you with customer support to address your queries and requirements, and process requests for products and services;
• perform research and analysis about your use of, or interest in, our products, services, or content, or products, services or content offered by other third parties;
• communicate with you by e-mail about products or services that may be of interest to you either from us, or other third parties;
• develop and display content and advertisements tailored to your interests on our site and other third-party websites;
• provide subscription related services and information;
• perform client communication, service, billing and administration;
• conduct data analysis;
• assess website performance and usage analysis;
• maintain leads;
• run marketing or promotional campaigns and create brand awareness;
• provide better services and generate demand;
• post testimonials from clients;
• request feedback from you regarding our services;
• market products and services based on legitimate business interest under the applicable law;
• conduct processing necessary to fulfil other contractual obligations for the individual;
• verify your eligibility and deliver prizes in connection with promotions, contests, and sweepstakes;
• enforce our terms, conditions and policies for business purposes, legal, and contractual reasons; and
• manage our business, and perform functions as otherwise described to you at the time of collection.

Legal bases

The basis on which we process your personal information may differ depending on applicable state law, but generally we process personal information in order to perform a contract with you, to comply with a legal obligation, or for our legitimate business interests. We consider such interests to be justified because the data is limited to browsing activities related to what is considered business or professional (our website does not offer any content directed to individual consumers, nor any content which might be used to draw inferences about your private life, habits or interests), we provide an easy opt-out and we limit the retention of data. Data that we receive directly from you is completely voluntary and at your option. Where consent is required by applicable law, we will obtain consent before processing.

5. Sharing of personal information with third parties

We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfil business and contractual obligations. Timidlly does not share personal information about you with affiliates, partners, service providers, group entities and non-affiliated companies except: (a) to provide products or services you have requested; (b) when we have your permission; or (c) under the following circumstances:

• We may share your data with third-party vendors, service providers, contractors or agents who perform services for us or on our behalf and require access to such information to do that work. Such parties provide hosting and maintenance services, virtual infrastructure, payment processing, data analysis, customer service, marketing services, and other services to us.
• We may provide the information to trusted entities who work on behalf of or with Timidlly under strict confidentiality agreements. These entities may use your personal information to help us communicate with you for legitimate business purposes. However, these companies do not have any independent right to further share or disseminate this information.
• We may share information with statutory authorities, government institutions, law enforcement agencies or other bodies where required for compliance with legal requirements.
• We may use the information to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims.
• We may share information where we believe it is necessary in order to investigate, prevent, or take action against any illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or as otherwise required by law.
• We may share information where we believe it is necessary in order to protect or enforce Timidlly’s rights and usage terms, and to protect the security or integrity of our products and services.
• We may share your data with any parent company, subsidiaries, joint ventures, other entities under common control, or third-party acquirers.
• We may share information about you with a potential acquirer or merger partner after ensuring such entity offers an equivalent level of protection for personal data.
• We may share your information with our business partners to offer you certain products, services or promotions.

Sale of personal information

Timidlly does not sell your personal information for money, and we do not knowingly sell or share the personal information of consumers under 16 years of age. Please note that some third parties may be located in other countries where the laws on processing personal information may be less stringent than in the United States. Unless described in this Policy, we do not sell, rent or trade any of your information with third parties for their own promotional purposes.

6. Authenticity

Timidlly shall not be responsible for the authenticity of the personal information supplied to it by its service providers, whose duty it is to ensure that the information provided by them or their employees is authentic.

7. Potential for Other Users to Contact You

To the extent that a given application supports personal messaging functionality between and among end-users, you may receive personal messages from other end users. You can disable this functionality by using the unsubscribe and other disabling instructions in the given application.

8. Data Protection and Confidentiality

Timidlly has implemented reasonable and adequate physical, technical and administrative security measures to protect personal information from loss, misuse, alteration or destruction.

Timidlly discloses information to third parties only for legitimate purposes, such as to our service providers and agents who are bound by strict confidentiality agreements to maintain the confidentiality of personal information and may not use the information for any unauthorized purpose. Also, if our websites contain links to other sites, Timidlly is not responsible for the security practices or the content of such sites.

Timidlly will take reasonable steps to ensure that all dealings in personal information shall:

• Be processed fairly and lawfully.
• Be obtained only with the consent of the information provider where such consent is required by applicable law.
• Be collected only when the information is collected for a lawful purpose connected with a function or activity of Timidlly, and where the collection of sensitive personal information is considered necessary for that purpose.
• Be available for review by the information provider, as and when requested.
• Be kept secure against unauthorized or unlawful processing and against accidental loss, destruction or damage, in accordance with prescribed standards to protect the quality and integrity of your personal information.

Internet transmission

Unfortunately, the transmission of information via the internet is not completely secure and, although we will take steps to protect your personal information, we cannot guarantee the security of your personal information transmitted via the website; any transmission is therefore at your own risk.

9. Cookies and other technologies

A cookie is a small file, typically of letters and numbers, downloaded to a user’s computer or mobile device when the user accesses certain websites. Cookies are then sent back to the originating website on each subsequent visit. Cookies are useful because they allow a website to recognise a user’s device. They are used for a wide variety of purposes such as website analytics – counting visitors and their behaviour – targeted advertising, recording user preferences, or authentication. We use cookies to understand site usage and to improve the content and offerings on our websites. You can choose to accept or decline cookies, either by selecting accept or decline in the banner on your first visit (in the latter case we will try to set a cookie to record your preference for future visits), or by changing the settings in your web browser. Most web browsers are set to accept cookies by default, but you can usually modify your browser settings to decline cookies if you prefer. These settings are usually found within the “privacy” section. For mobile devices these may be within the browser app settings. Full details are set out in our Cookie Policy.

We use Google Analytics, a service for the marketing analysis of the site provided by Google Inc. Google Analytics uses cookies to allow us to see how you use our site, so we can improve your experience. Google’s ability to use and share information collected by Google Analytics about your visits to the site is restricted by the Google Analytics Terms and the Google Privacy Policy. You can prevent Google Analytics from recognizing you on return visits to the site by disabling cookies in your browser. If you prefer not to have data reported by Google Analytics, you can install the Google Analytics Opt-out Browser Add-on available at https://tools.google.com/dlpage/gaoptout.

We also use “web beacons” or “clear gifs” in our emails and web pages, which help us to monitor whether you have opened any newsletters we may have sent to you. A web beacon is one of various techniques used on web pages or in email to unobtrusively (usually invisibly) allow checking that a user has accessed some content. Common uses are email tracking and page tagging for web analytics. We use this information to deliver you a personalized service by ensuring that we send you information that we believe you will find interesting based on the content we know you have engaged with previously.

Our websites may provide advertising links to other, third-party sites and applications. Such third-party sites will have their own data collection practices and policies. Please review the privacy policy for such sites and exercise caution in providing information that personally identifies you. We have no responsibility, access, or control over the data collection practices and policies of such third-party sites and applications. You will use such sites and applications at your own risk and outside of the scope of this Privacy Policy.

10. Your (“Data Subjects”) rights with respect to your personal information

Your rights may differ depending on the state in which you reside and the applicable data protection laws. We respect your right to be informed, to access, to correct, to request deletion or restriction, to portability, to object, and your rights in relation to automated decision making and profiling, in our usage of your personal information as may be required under applicable law. We also take steps to ensure that the personal information we collect is accurate and up to date. Subject to such laws, you may have the following rights:

• You can ask us what personal information we maintain about you.
• If your personal information is incorrect or incomplete, you have the right to ask us to update it.
• You can also ask us to delete or restrict how we use your personal information, but this right is determined by applicable law and may impact your access to some of our services.
• You have the right to access your personal information.
• You may manage your receipt of marketing and non-transactional communications by clicking on the “unsubscribe” link located at the bottom of our marketing emails.

11. Limitations to your rights

Your rights to your personal information are not without limits. Access may be denied when: denial of access is required or authorized by law; granting access would have a negative impact on another person’s privacy; doing so protects our rights and property; or where the request is frivolous or vexatious.

12. Access and rectification

You have a right to request access to your personal information. You may send us a request for access. You also have the right to correct any inaccuracies in your personal information. All of the above relevant rights (including those applicable under the CCPA/CPRA and other United States state privacy laws, but not limited to them) can be exercised by writing to the email listed in the “Contact Us” section of this policy.

13. Use and Retention of personal information

The collection of your personal data will be limited to that which is needed for the purposes identified in this privacy statement. Unless you consent, or we are required by law, we will only use the personal data for the purposes for which it was collected. If Timidlly will be processing your personal data for another purpose later on, Timidlly will further seek your permission or consent, except where the other purpose is compatible with the original purpose.

We will retain your personal information for as long as necessary to provide the services you have requested, or for other essential purposes such as performance of a contract, complying with our legal obligations, resolving disputes, and enforcing our policies.

14. Disclosure of information

Timidlly may share your personal information with your consent, or where the disclosure is necessary for compliance with a legal obligation or where required by government agencies mandated under law to procure such disclosure. Timidlly shall also take steps to ensure that information transferred to a third party is not further disclosed by that third party except where permissible under law.

15. International transfer of Personal Information

Timidlly may transfer your personal information across geographical borders to associated entities or service providers working on our behalf in other countries with different data protection laws that may not be on par with those of the United States, and by accessing our sites and using our services, you consent to any such transfer of information outside of the United States.

16. Applicable Rights for California Residents

Timidlly does not currently respond to browser “Do Not Track” (DNT) signals. We do, however, honour Global Privacy Control (GPC) opt-out preference signals where required by law. Third parties may collect personal data about your online activities over time and across sites when you visit the Site or use the Service.

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), provides residents of California with the following rights regarding their personal information:

• Right to Opt-Out of the Sale or Sharing of Personal Information — You have the right to opt out of the sale or sharing of your personal information, and you can request that Timidlly stop selling or sharing your personal information with third parties.
• Right to Know About Personal Information Collected, Used, Disclosed, or Sold — You have the right to request, up to twice in a 12-month period, that we disclose certain information to you about our collection, use and disclosure of your personal information over the past 12 months. Once we receive your request and verify your identity, we will disclose to you: (1) the categories of personal information we collected about you; (2) the categories of sources for the personal information; (3) our business or commercial purpose for collecting or selling that personal information; (4) the categories of third parties with whom we shared that personal information; and (5) the specific pieces of personal information we collected about you in the preceding 12 months.
• Right to Delete Personal Information Collected or Maintained — You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your request and verify your identity, we will delete your personal information from our records, unless an exception under the CCPA applies. In our response to your request to delete, we will specify the manner in which we have deleted your personal information or, if we must deny your deletion request, the basis for the refusal.
• Right to Correct Inaccurate Personal Information — You have the right to request that we correct inaccurate personal information that we maintain about you, taking into account the nature of the personal information and the purposes of processing it.
• Right to Limit Use and Disclosure of Sensitive Personal Information — To the extent we process sensitive personal information for purposes beyond those permitted by the CCPA, you have the right to direct us to limit that use and disclosure.
• Shine the Light Request — You may also have the right to request that we provide you with (a) a list of certain categories of personal information we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year, and (b) the identity of those third parties.
• Right of Non-Discrimination — You also have a right not to receive discriminatory treatment for exercising these privacy rights.

How California residents exercise rights

To exercise any of the rights described above, please submit a verifiable consumer request to us at support@timidlly.com. You may designate an authorized agent to make a request on your behalf; we may require the agent to provide proof of authorization and may require you to verify your own identity directly with us.

California Civil Code Section 1798.83 permits you to request certain information regarding our disclosure of personal data to third parties for the third parties’ direct marketing purposes. If you are a California resident under the age of 18, and a registered user of our Site or Service, California Business and Professions Code Section 22581 permits you to request and obtain removal of content or information you have publicly posted. To make such a request, please send an e-mail with a detailed description of the specific content or information to support@timidlly.com. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted, and that there may be circumstances in which the law does not require or allow removal even if requested.

17. Applicable Rights for Residents of Other U.S. States

If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana or another state that has enacted a comprehensive consumer privacy law, you may have rights similar to those described above, including the right to confirm whether we process your personal data and to access that data; the right to correct inaccuracies; the right to delete personal data you provided or that we obtained about you; the right to obtain a copy of your personal data in a portable, readily usable format; and the right to opt out of targeted advertising, the sale of personal data, and certain profiling.

We do not process personal data for purposes of targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise any of these rights, contact us at support@timidlly.com. If we decline to act on your request, you may appeal that decision by replying to our response or writing to support@timidlly.com with the subject line “Privacy Appeal”. We will inform you in writing of the outcome of the appeal, and, where applicable, of your right to contact your state Attorney General.

18. Children’s Privacy

Our websites and services are intended for businesses and for individuals aged 18 and over. We do not knowingly collect personal information from children under the age of 13 in accordance with the Children’s Online Privacy Protection Act (“COPPA”). If you believe that a child under 13 has provided us with personal information, please contact us at support@timidlly.com and we will take steps to delete that information.

Notice to End Users

Most of our services are intended for use by organizations. Where the services are made available to you through an organization (e.g. your employer), that organization is the administrator of the services and is responsible for the accounts and/or service over which it has control. Please direct your data privacy questions to your administrator, as your use of the services is subject to that organization’s policies. We are not responsible for the privacy or security practices of an administrator’s organization, which may be different from this policy. Administrators may be able to: help you exercise the rights described in Section 16 or Section 17 (if applicable); allow you to reset your account password; restrict, suspend or terminate your access to the services; access information in and about your account; access or retain information stored as part of your account; change your information, including profile information associated with your account; and allow or restrict your ability to edit, restrict, modify or delete information. Please contact your organization or refer to your administrator’s organizational policies for more information.

Effective Date

This Privacy Statement is effective from 8 September 2026 and supersedes all existing policies on the subject matter for users located in the United States.

Changes to this Privacy Statement

We may change this Policy at any time, and the changes will apply to any personal information we already hold and to any new personal information collected after the change occurs. If we make any material changes to this Policy, we will endeavour to notify you by posting a prominent notice on the Services prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices. Your continued use of our Services after the effective date of this Policy constitutes acceptance of the amended terms.

The date the Privacy Notice was last updated is identified at the top of the page.

Contact Us

We have designated a Data Protection Officer who is responsible for monitoring Timidlly’s ongoing compliance with this Privacy Policy. If you have any questions about this Privacy Policy, our information practices, or concerns about this site, please contact us at support@timidlly.com.

Timidlly, Inc., also known as Timidlly. By email: support@timidlly.com. www.timidlly.com