PRIVACY POLICY
Last Updated: January 1, 2025

This Privacy Policy explains how Tyronel (“We”, “Us”, “Our”) collects, uses, stores, protects, and shares information when you access or use Tyronel services, websites, or applications. By creating an account or using our platform, you agree to the practices described below. If you do not agree, you must stop using Tyronel.

1. INTRODUCTION

1.1 Tyronel is a consulting management SaaS platform providing workflow automation, reporting, communication, and client delivery solutions.
1.2 This policy applies to all users of Tyronel, including organizations, individual consultants, employees, and team members granted platform access.
1.3 This document explains:
 a. What data we collect
 b. Why we collect it
 c. Who we share it with
 d. How long we keep it
 e. Your rights regarding your data
1.4 Data processing complies with major privacy frameworks including GDPR where applicable.
1.5 We value transparency, responsibility, and user rights.

2. DATA WE COLLECT

We may collect the following categories of information:

2.1 Account Information

• Name

• Email

• Phone (optional)

• Password (encrypted)

• Account preferences

2.2 Business Information

• Company name

• Client names

• Organizational structure

• Project and workflow data

• File uploads

• Templates, documents, targets, and tasks

2.3 Payment Information

• Subscription tier

• Billing history

• Invoice records

• Transaction IDs
  Payment processing is handled by third-party processors; Tyronel does not store full payment card details.

2.4 Usage Data

• Login timestamps

• Feature interactions

• Click paths

• Time spent in sections

• System performance logs

• Error/crash reports

2.5 Device & Technical Data

• IP address

• Browser version

• Operating system

• Screen resolution

• Cookies and tracking identifiers

2.6 Communications

• Support requests

• In-app messages

• Automated notifications

• Email exchanges

2.7 Optional Data

Users may upload content such as:

• Files

• Client notes

• Strategic plans

• Media

• Attachments
  This information belongs to the user.

3. WHY WE COLLECT DATA

Tyronel collects data to:

3.1 Provide platform functionality
3.2 Personalize user experience
3.3 Improve product performance
3.4 Enable secure login authentication
3.5 Generate usage analytics
3.6 Deliver customer support
3.7 Handle billing and invoicing
3.8 Send essential service announcements
3.9 Prevent fraud or abuse
3.10 Comply with legal obligations

We only collect the minimum necessary information required for legitimate business purposes.

4. COOKIES AND TRACKING

4.1 Tyronel uses cookies and similar technologies to enable functionality.
4.2 Cookies may help authenticate users, remember settings, and optimize performance.
4.3 Users may disable cookies in their browser but this may affect platform operation.
4.4 Third-party analytics may also use cookies to measure engagement trends.

5. LEGAL BASIS FOR PROCESSING (GDPR)

Processing may occur based on:

5.1 Contractual necessity
5.2 User consent
5.3 Legal compliance
5.4 Legitimate business interest
5.5 User-requested processing of stored content

Users in GDPR regions have additional rights detailed later.

6. DATA OWNERSHIP

6.1 Users own the data they upload to Tyronel.
6.2 Tyronel does not claim ownership over business documents, workflows, tasks, or client details.
6.3 Users grant Tyronel limited access to process data solely for providing service.
6.4 Data is never sold to third parties.

7. HOW WE USE DATA

We use user and client data to:

• Operate platform functionalities

• Create dashboards and analytics

• Improve workflow automation

• Process platform activity

• Enhance product usability

• Monitor system health

• Detect suspicious activity

• Maintain legal compliance

Data is not used for advertising beyond Tyronel services.

8. DATA SHARING

8.1 Tyronel does not sell personal or client data.
8.2 We may share data with trusted third parties including:
 a. Payment processors
 b. Hosting providers
 c. Email delivery systems
 d. Customer support tools
 e. Analytics providers
8.3 These providers are contractually obligated to protect data.
8.4 We may disclose data if required to:
 - Comply with law
 - Protect company rights
 - Investigate misuse

9. THIRD-PARTY LINKS & INTEGRATIONS

9.1 Tyronel may integrate with external services.
9.2 Third-party data handling is governed by their privacy policies.
9.3 Users are responsible for reviewing third-party compliance.

10. DATA SECURITY

10.1 We use industry-standard encryption, firewalls, and secure hosting.
10.2 Passwords are stored as cryptographic hashes.
10.3 Access to data is role-based and limited internally.
10.4 No system is 100% invulnerable; users agree to maintain reasonable device security.
10.5 In case of a breach, affected users may be notified as required by law.

11. DATA RETENTION

11.1 We retain user data for as long as necessary to:

• Maintain account access

• Deliver services

• Meet financial and legal requirements
  11.2 When an account is deleted:

• Data may be permanently removed within a reasonable time

• Residual backups may persist temporarily
  11.3 We may store archived metadata for fraud prevention or compliance.

12. USER RIGHTS

Depending on jurisdiction, users may have the right to:

12.1 Access personal data
12.2 Correct inaccurate data
12.3 Request deletion (“Right to be Forgotten”)
12.4 Restrict processing
12.5 Obtain data in portable format
12.6 Withdraw consent
12.7 Reject automated decision-making
12.8 File complaints with a regional authority

We will respond to valid requests within reasonable timeframes.

13. ACCESSING OR MODIFYING DATA

13.1 Users may update account details through the dashboard.
13.2 For additional requests, users may contact support.
13.3 Validation may be required for security.

14. ACCOUNT DELETION

14.1 Users may request account deletion.
14.2 Deleting an account may permanently erase:

• Projects

• Clients

• Files

• Templates

• Tasks

• Activity logs
  14.3 Some information may remain in:

• Archived backups

• Financial records

• Legal compliance systems

15. INTERNATIONAL TRANSFERS

15.1 Tyronel may store data in servers located in different regions.
15.2 Cross-border transfers comply with applicable laws.
15.3 Users consent to cross-border storage as part of service operation.

16. CHILDREN’S DATA

16.1 Tyronel does not target individuals under 18.
16.2 If a minor uses the platform, parental consent and legal compliance apply.
16.3 We will delete unauthorized minor data upon request.

17. COMMUNICATIONS

17.1 Users may receive service-related messages such as:

• Alerts

• Feature updates

• Billing notices

• Account security notifications
  17.2 Marketing communication may be optional and can be unsubscribed.
  17.3 Important system messages cannot be opted out of.

18. DO NOT TRACK

18.1 Some browsers support Do Not Track (DNT).
18.2 Tyronel does not guarantee compliance with DNT standards due to variations across browsers.

19. USER-GENERATED CONTENT

19.1 Users are responsible for the content they upload.
19.2 Tyronel does not actively monitor user files unless required for:

• Abuse

• Security

• Legal compliance
  19.3 Unlawful content may be removed without notice.

20. AI-ASSISTED PROCESSING

If the platform uses AI features, they may:

20.1 Analyze stored content to generate automated reports, summaries, recommendations, or workflow suggestions.
20.2 Not publicly share or repurpose data outside user organization.
20.3 Only store data needed to generate user-requested outputs.
20.4 Follow data protection rules outlined in this policy.

21. BREACH NOTIFICATION

21.1 In case of a confirmed data breach affecting protected user information:

• Affected users may be notified

• Authorities may be contacted

• Mitigation efforts will be executed
  21.2 Notice timelines may follow regional laws.

22. CHANGES TO THIS POLICY

22.1 This policy may be updated periodically.
22.2 Material changes will be published and timestamped.
22.3 Continued platform use after changes constitutes acceptance.
22.4 Users should periodically review the policy.

23. LIMITATION OF LIABILITY

23.1 Tyronel is not responsible for losses caused by:

• User negligence

• Unauthorized device access

• Failure to protect login credentials

• Third-party breaches outside Tyronel control
  23.2 The platform is provided “as is” without warranties beyond legal minimums.

24. DATA PROCESSING FOR BUSINESS ACCOUNTS

24.1 If you manage multiple clients inside Tyronel, you are responsible for obtaining consent from your own clients.
24.2 Tyronel acts as a data processor; you act as data controller for your collected information.
24.3 You guarantee that uploaded data complies with applicable laws.