Effective Date: August 5, 2025
Security and Privacy on the pickAtime website is very important to us.
Our site has security measures in place to help protect against the loss, misuse, and alteration
of the data under our control. We use Secure Socket Layer (SSL) technology to encrypt all data
transmissions between your browser and our servers. SSL technology uses both server
authentication and data encryption to ensure that your data is safe, secure, and available only
to authorized users in your organization. A dedicated and robust firewall provides a strong
barrier of network security from the Internet. Additionally, we employ AES-256 encryption for
data at rest.
Access to client accounts requires a login with a unique username and password. These
passwords can be changed at any time. Strong passwords, forced interval password changes are
available as security settings. We log all account login attempts, and account lockout policies
are enforced after a certain number of failed login attempts.
pickAtime maintains a secure environment to store and use data to manage appointments for its customers.
Should pickatime determine that a security breach has occurred, all customers whose data was breached will be notified in a timely manner.
Pickatime will fully cooperate with law enforcement officials, and if advised to delay notification, will do so if requested.
The notification will include any specifics of the scope of the breach that we are aware of at that time. We will continue to notify customers as we determine new information.
Our servers are in a Tier II/III high security dedicated data center located in the United States and monitored 24/7. Access is strictly monitored through card key protocols. Data center facility has a dedicated power feed. Electrical systems are protected by fully scalable 3-phase Uninterruptible Power System (UPS) with automatic failover, checking and monitoring systems. In the event of a full-power outage, automatic backup generator power is provided. Multi-redundant HVAC system.
Our systems operations team monitors the network 24/7, and engineers are available at any time in the event of an emergency.
The vendor that you are making an appointment with can use your information per their privacy policy.
PickAtime works with other third-party vendors that also respect the privacy of their customers.
Customer and client data will never be shared with anyone. We will not share the personal
schedule information of customers except with the client creating the schedule. All scheduling
and appointment information will be confidential. Each customer can view only information
relating to the customer’s own account.
All our clients are required to log in before they are provided with access to their account
information. A unique username and password must be entered.
Technical or support staff may view your data in order to help with a technical problem or to
provide customer support. Access to personal information is limited to the few employees that
may need to provide support to your account.
Data backups are done daily, and are held both locally and in cloud storage. Backup
copies are encrypted before they leave our systems and encrypted again by the storage
provider.
Cloud backups are retention-locked. Once a backup is written it cannot be altered or deleted until its retention period expires - not by pickAtime, and not by anything that has reached the systems it was taken from. This is the specific protection against ransomware, destructive malware and accidental deletion: the recovery point survives the incident, so recovery from a full data center loss is a restore rather than a reconstruction. Deleted customer data ages out of these backups when the retention period ends, within 60 days.
PickAtime will not collect, maintain, use, or share imported personal information beyond that needed for authorized educational/school/business' purposes, or as authorized by the customers' account administrator. All information in the pickAtime system is used solely for the purposes of the events prepared by the customer and imported by the customer. PickAtime will keep all personal information confidential, and will not sell or share it with any third party other than the Vendor that you (the customer) registered with. PickAtime does not permit behaviorally targeted advertising on any of our customers’ individual scheduling sites. PickAtime only retains personal information for as long as the Vendor wishes, Vendor retains the ability to delete information whenever they wish. All personal information held on the pickAtime servers can only be accessed by preapproved individuals on the customers' team.
Descriptions of pickAtime's services on this website are general in nature and provided for
informational purposes. Customers are ultimately responsible for determining whether pickAtime
meets the specific requirements of their intended use.
pickAtime makes no representation, warranty, or claim of suitability for any particular purpose
except as expressly set out in the written agreement between pickAtime and the customer. Nothing
on this website forms part of, is incorporated by reference into, or modifies that agreement.
Where this website and a customer agreement differ, the agreement controls.
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.
If the changes are significant, we will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the "effective date"
at the top of this Privacy Policy.
