1. Scope of this policy
This policy is issued by Timeliss Pte. Ltd.. Business information and privacy contacts identifies the ways to contact Timeliss. Separate professional providers may handle information under their own notices; check the provider named in your engagement.
This policy applies when you visit Timeliss websites, create or access an account, complete a service intake, use a guided tool, participate in a case, communicate with us, or are referred by an employer, adviser, insurer or service partner.
A case may contain information about the person requesting help, family members, beneficiaries, executors, donees, witnesses, deceased persons and professional contacts. Only provide another person’s information when you are authorised to do so and it is relevant to the requested service.
2. Information we collect
- Account and identity information: name, email address, telephone number, authentication identities and account-security activity.
- Intake and case information: service needs, relationships, country, urgency, planning preferences, case answers, tasks, notes and status history.
- Documents and records: files you upload or that authorised participants and service providers add to a case.
- Communications: email and WhatsApp delivery records, support enquiries, notification preferences and messages connected with a case.
- Transaction information: quotes, acceptance records, payment status and provider references. Payment-card details may be collected directly by the payment provider rather than Timeliss.
- Technical information: device and browser data, IP address, security logs, session information, audit records and referral or campaign parameters.
We receive information directly from you, from people authorised to participate in a case, from organisations making a permitted referral, and from authentication, communications, storage or payment providers used to deliver the platform.
3. How we use information
We use information to:
- identify the country and service you need;
- create and operate accounts, service intakes, tools and secure case dashboards;
- prepare recommendations, checklists, drafts, quotes and case tasks;
- coordinate authorised family members, Timeliss personnel and professional or service partners;
- send authentication codes, requested updates, reminders and service communications;
- protect users, investigate misuse, maintain audit records and improve reliability;
- meet contractual, regulatory, accounting, dispute-resolution and other legal obligations; and
- analyse service use in an aggregated or appropriately de-identified form.
WhatsApp chat answers and inbound messages are received by Timeliss’s business messaging integration and stored for preparation and support. Authorised staff can review the inbox, including requests not yet linked to a case. An enquiry is not automatically a confidential lawyer-client consultation. WhatsApp/Meta also processes communications under its own privacy terms. You can use the website instead.
The current will questionnaire and document generator use structured rules and templates, not an AI legal adviser. This flow does not send your answers to a generative-AI provider. A future AI feature would need a clear notice describing its data use and review arrangements before you use it.
WhatsApp and email are used for authentication, prompts and updates. Sensitive documents should remain in the secure Timeliss case rather than being sent through ordinary messages.
5. Security and account protection
Timeliss uses role-based access, secure authentication, encrypted transport, protected storage, audit logging and operational controls designed to prevent unauthorised access, use, alteration or disclosure. No internet service can guarantee absolute security.
Passkeys use public-key credentials; Timeliss does not receive your device’s fingerprint or face template. Document access depends on ownership, active participation and assigned professional access. Removing access prevents future platform access but cannot erase an authorised recipient’s downloaded copy.
Keep magic links, one-time codes and passkeys private. Contact us promptly if you believe your account, telephone number or email address has been compromised.
6. Retention and overseas transfers
We retain information for as long as it is reasonably needed to provide the service, maintain an accurate case and transaction record, resolve disputes, enforce agreements and meet legal or regulatory requirements. Different records may have different retention periods. Information that is no longer required should be deleted, anonymised or securely isolated unless continued retention is required or permitted.
New free will cases include 90 days of online document access from creation. Your case shows the expiry date. Download your draft and keep your own signed copy before then; the original signed paper should be kept safely. Expiry restricts document access and uploads; it does not automatically erase case, security or transaction records. Contact us about access extensions or deletion.
Saved will preparation expires after 30 days. Generated wills, case documents, chat history, account security records and payment records are separate records and are not all deleted when that preparation expires. Request closure or deletion if you no longer need the service; legal obligations, other people’s rights, disputes and backup cycles may limit or delay deletion.
Ask our privacy contact for the providers and processing locations relevant to your service before submitting sensitive records. Authentication and messaging providers may process data internationally; using the site does not mean all data stays in your country.
Some service providers may process information outside Singapore. Where the Singapore Personal Data Protection Act applies, Timeliss will use contractual or other safeguards intended to provide a standard of protection comparable to the PDPA, unless an applicable exception permits otherwise.
7. Your choices and requests
Subject to applicable law and permitted exceptions, you may ask to access personal data Timeliss holds about you, understand how it has been used or disclosed, or correct inaccurate information. You may also withdraw consent for a particular use with reasonable notice. Withdrawal may prevent us from continuing part of a service where that information is necessary.
For a privacy request, contact the Data Protection Officer below, identify your account or case and explain the request. We may verify identity, explain an applicable exception or ask for clarification. Do not email identity documents unless we have arranged a secure way to verify you. If dissatisfied with our response, ask for escalation; you may also contact the PDPC or, where the Australian Privacy Act applies, the OAIC. See complaint contacts.
STOP in WhatsApp disables case updates but does not delete your account or case. Notification settings do not replace separate consent for marketing. Providing data for a service is not blanket permission for unrelated uses.
You can update some account and notification settings directly. For access, correction, consent withdrawal, deletion or privacy complaints, email us with enough detail to identify the relevant account or case. We may need to verify your identity and authority before responding.
9. Changes to this policy
We may update this policy when services, providers or legal requirements change. The current version will be published here with its update date. Material changes may also be communicated through the platform or your registered contact details.
10. Contact the Data Protection Officer
Email dataprivacy@timeliss.com with privacy questions, requests or complaints. General service questions should go through the Contact Us page.
Singapore’s Personal Data Protection Commission provides an overview of organisations’ data-protection obligations on the PDPC website.