Privacy Policy

Last updated: October 14, 2026

This policy explains what personal information Padraic McGee, doing business as Space Time Apps ("Space Time Apps", "we", "us") collects when you use spacetimeapps.com and its subdomains, sites published on spacetimesites.com, and visual.is (the "Service"). It also explains how we use that information and the choices you have. For Visualis and visual.is, see also "Visualis and visual.is" below. Capitalized terms not defined here have the meanings given in our Terms of Service.

Information we collect

  • Account information. Your name, email address and password (stored only as a one-way hash). If you add passkeys, we store their public keys. We also store your email preferences.
  • Organization information. Organization names and icons, members and their roles, and invitations, including the email addresses of the people invited.
  • Your Content. Data files, spreadsheets, visualizations, sites, text and images that you upload or create. These may include personal information about other people; see "Content you upload" below.
  • Connected services. If you connect Google, we store an access token, encrypted, for the files you choose.
  • Billing information. Your billing contact and history, your balance and your usage. Card details go directly to Stripe. We never receive or store full card numbers.
  • Technical information. IP address, browser and device type, the pages and features you request, and timestamps (in server logs). It also includes error reports from the app: the error, the page or component, your user and organization IDs, and the actions leading up to it. We use these to keep the Service secure and working.
  • Communications. Messages you send us, for example through the contact form or by email.

How we use it

  • To provide the Service: signing you in, storing and processing your data, rendering and sharing visualizations and sites, and running the imports and refreshes you set up.
  • To measure usage and bill for it, and to send receipts and balance and billing notices.
  • To send service emails, such as invitations, shares, password resets and security notices. These are not optional while you have an account.
  • To send occasional product emails, if your email preferences allow it. You can unsubscribe from these at any time.
  • To keep the Service secure, prevent abuse, diagnose errors and improve performance.
  • To comply with the law and to enforce our Terms.

We do not sell your personal information. We do not share it for targeted advertising. We do not use advertising or analytics trackers. If the law where you live requires a legal basis (for example, the GDPR), we rely on: performing our contract with you (providing the Service); our legitimate interests (security, fixing errors, improving the Service); your consent (optional emails, which you can withdraw); and legal obligations.

Google user data

When you import from Google Sheets, we use Google's file picker with the drive.file permission. This gives us access only to the files you pick, not your whole Drive. We read the sheets you choose to bring their data into the Service and, where you ask, to refresh it. We do not use Google user data for advertising, we do not sell it, and we do not use it to train general AI or machine-learning models. People can read it only with your permission, or where needed for security or by law. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can remove our access at any time from your Google Account permissions.

Content you upload

When you upload or connect data that contains personal information about other people, you decide what is in it and how it is used. We process it only to provide the Service to you. You are responsible for having a lawful basis to use it. If a person asks us about data that you uploaded, we will refer them to you where we can.

Sharing and public content

Content you make public, embeddable or published on a site can be seen by anyone with the link or page. Your name may appear on content that you share with others or that others share with you. Members of your organizations can see the organization's content and member list.

Service providers

We use the following providers to run the Service. They process information on our behalf, only for that purpose:

  • Hetzner — servers and databases (United States)
  • Backblaze B2 — file and backup storage
  • Stripe — payments
  • Mailgun — email delivery
  • Google — the Sheets/Drive integration you choose to use, and web fonts on some pages
  • Skylight and Rollbar — performance monitoring and error reporting
  • Cloudflare (cdnjs) — delivery of some page scripts

We may also disclose information when required by law, to protect the rights, property or safety of us or others, or as part of a merger, acquisition or sale of assets. If that happens, we will notify you and this policy will continue to apply.

Visualis and visual.is

Visualis (visualis.spacetimeapps.com) and visual.is are provided by Visualis Technology G.P., a general partnership based in Quebec City, Canada ("Visualis Technology"), and operated by Space Time Apps on its behalf. For personal information collected through Visualis and visual.is, Visualis Technology is responsible for it (it is the "controller", or the enterprise responsible under Quebec's Law 25), and Space Time Apps processes it on Visualis Technology's behalf, under this policy and using the same systems, safeguards and service providers. Because accounts are shared across our apps, your account information is also used by Space Time Apps to provide its other apps to you.

Visualis Technology's person in charge of the protection of personal information can be reached at contact@spacetimeapps.com. If you live in Quebec, you can also complain to the Commission d'accès à l'information du Québec.

Former visual.is users

visual.is is now part of Visualis. To keep your visualizations and links working, we copied visual.is accounts into the Service, together with the visualizations, data and images their users had a role on. A copied account includes your name, email address and password hash. If you have not signed in since, your account is inactive. We use it only to keep your shared links working and to let you claim the account by signing in. If you would like the copied account and its content deleted instead, email contact@spacetimeapps.com.

Where your data is stored

We store and process data in the United States. If you use the Service from another country, your information is transferred to the United States. This includes personal information collected for Visualis Technology in Quebec, which is processed in the United States by Space Time Apps and its service providers. Where the law requires, we use appropriate safeguards for these transfers, such as Standard Contractual Clauses.

How long we keep it

  • Account information and Your Content: while your account is active. After you ask us to delete it, we delete it within 30 days.
  • Data source backups: nightly snapshots, keeping the latest 7 daily and 4 weekly copies. When a source is deleted, its backups are deleted too.
  • Undo history for data edits: 24 hours.
  • Error reports: 30 days for individual reports, and 90 days for summary counts.
  • Server logs (requests, IP addresses and application output): 30 days.
  • Billing records: as long as tax and accounting law requires.

Security

All traffic is encrypted with HTTPS. Passwords are hashed. Google tokens and other sensitive credentials are encrypted at rest. Only authorized staff can access production systems, and only when they need to. No system is perfectly secure. If a breach affects your personal information, we will notify you as the law requires.

Your choices and rights

You can update your account details and email preferences in your account settings, and download your data from the app. Depending on where you live (for example, under the GDPR, the California Consumer Privacy Act or Quebec's Law 25), you may have the right to:

  • access your personal information, or get a copy of it;
  • correct it or delete it;
  • object to or restrict how we process it;
  • withdraw your consent;
  • complain to your local data protection authority.

To make a request, email contact@spacetimeapps.com. We will verify your identity and respond within 30 days. We will not treat you differently for exercising these rights.

Cookies

We use only the cookies that the Service needs to work. See our Cookie Policy. We do not respond differently to "Do Not Track" signals, because we do not track you across other websites.

Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

Changes

We will post any changes on this page and update the date above. For material changes, we will notify you by email or in the Service before they take effect.

Contact

Padraic McGee, doing business as Space Time Apps, 1244 Wisconsin St, Oshkosh, WI 54901, United States. Email: contact@spacetimeapps.com.

For Visualis and visual.is: Visualis Technology G.P., 7355 Jacqueline-Auriol, Quebec City, QC G2G 0J7, Canada, operated by Space Time Apps. Email: contact@spacetimeapps.com.