Security & Account Recovery

Think your account was taken over?

Email security@timeblox.ai immediately — from any email address you control, even if it is not the one on your TimeBlox account. Include:

• The email address your TimeBlox account uses (or used).
• What you noticed and roughly when (unexpected sign-in emails, changed settings, meetings you did not book).
• A phone number where we can reach you.

We aim to respond within one business day. Our team can lock the account, revoke every active session and connected calendar, remove attacker-added two-factor devices, and restore your email address after verifying you are the owner — verification uses signals like a fresh sign-in with the Google or Microsoft account originally connected, billing details, and the phone number on file.

Locked out but not compromised?

TimeBlox has no separate password: you sign in with your Google or Microsoft account. If you cannot sign in, first recover that Google or Microsoft account with your provider, then sign in to TimeBlox normally. Still stuck? Email support@timeblox.ai.

Reporting a security vulnerability

We welcome reports from security researchers. Email security@timeblox.ai with reproduction steps and impact. Please do not access other users' data or degrade the service while testing. Our machine-readable contact is published at /.well-known/security.txt.