WorldTimeFinder Pro Privacy Policy

Last updated: 18 September 2026

WorldTimeFinder Pro is published by Outgrow FZE (Dubai World Trade Centre, Dubai, United Arab Emirates), the data controller for the processing described in this policy. The app displays time zones and your Microsoft 365 calendar on a shared timeline so you can schedule meetings across teams. This policy explains what personal information the app handles, why, how long it is kept, and the choices you have. For any privacy question or request, email contact@outgrow.io.

Information we collect

Data read from Microsoft 365

When your organization connects WorldTimeFinder Pro to Microsoft 365, the app reads the following through the Microsoft Graph API, with permissions granted by you or your Microsoft 365 administrator:

• Your profile: display name, email address, and mailbox time zone.
• Coworkers' basic directory information: display name, email address, job title, and mailbox time zone settings.
• Your own calendars and the events on them for the days shown (title, time, availability status, location, organizer, attendees, and online meeting link). The app does not read coworkers' calendars.
• Calendar events you create or edit through the app, which are saved to your Microsoft 365 calendar.

This data is fetched on demand to render the current view and is not stored on our servers. Short-lived Microsoft access tokens are held in server memory only for the duration needed to call the Microsoft Graph API and expire automatically.

Subscription and billing data

If your organization purchases a subscription through Microsoft Marketplace, we store the records needed to operate the subscription: the Microsoft-issued subscription ID, your Microsoft 365 tenant ID, the plan, seat quantity and status, the purchaser's and beneficiary's email addresses provided by Microsoft, and the Microsoft 365 user IDs of the people in your organization who occupy purchased seats. We do not receive or store payment card details; billing is handled entirely by Microsoft.

Data stored in your browser

Your saved cities are stored in your browser's local storage and are not sent to our servers. Your device's time zone is sent with each request so the app can lay out the timeline. During subscription activation we set one signed, temporary session cookie so the sign-in and activation steps can be linked securely; it is strictly functional. We do not use advertising or third-party analytics cookies.

Technical logs

Our hosting provider records standard server logs (such as IP address, request URL, and timestamp) for security and reliability. Logs are retained for a limited period and are not used for profiling or advertising.

How we use information

• To draw the timeline: show coworkers' local times and your calendar.
• To create or edit the calendar events you ask the app to schedule.
• To verify your organization's subscription and assign purchased seats.
• To provide support when you contact us.
• To secure and maintain the service.

We do not sell personal information, share it with third parties for their own purposes, use it for advertising, or use it to train machine learning models.

Legal bases

Where the GDPR or similar laws apply, we process personal data to perform our contract with your organization (providing the app and managing subscriptions), and on our legitimate interest in keeping the service secure and reliable (technical logs).

Data retention

• Microsoft 365 profile, directory, and calendar data: not retained; fetched per request.
• Subscription and seat records: kept while the subscription is active and for up to 12 months after it ends, for accounting and dispute resolution, then deleted.
• Support emails: kept for up to 24 months after the request is resolved.
• Server logs: retained by our hosting provider for a limited rolling window.

Service providers

We use a small number of processors to run the service:

• Vercel Inc. (United States): application hosting and server logs.
• Neon Inc. (United States/EU): database hosting for subscription records.
• Microsoft Corporation: identity (Microsoft Entra ID), the Microsoft Graph API, and Microsoft Marketplace billing, governed by Microsoft's own terms with your organization.

These providers process data only on our instructions. Data may be processed outside your country, including in the United States; where required, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Security

All traffic is encrypted in transit with TLS. Access to Microsoft 365 data uses Microsoft's OAuth 2.0 flows with permissions granted by you or your administrator; the app never sees your password. Subscription records are stored in an access-controlled database. Access tokens are short-lived and are not written to persistent storage.

Your rights

Depending on your location, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict processing, and to lodge a complaint with a supervisory authority. Because most data the app touches lives in your Microsoft 365 tenant, requests about directory or calendar data are usually fulfilled by your organization's administrator. For data we hold (subscription and support records), email contact@outgrow.io and we will respond within 30 days.

Children

WorldTimeFinder Pro is a workplace tool intended for business users and is not directed at children under 16.

Changes to this policy

If we change this policy, we will update this page and its "Last updated" date. Material changes will be highlighted in the app or communicated to your organization's administrator.

Contact

Outgrow FZE, Dubai World Trade Centre, Dubai, United Arab Emirates. contact@outgrow.io