Privacy Notice

1. Data we collect

• Account data — name, email address, password hash, sign-in provider identifiers.
• Workspace data — the URLs, objectives, prompts, schemas and API keys you create, plus the pages and datasets retrieved on your instruction (which may contain personal data published on those pages).
• Usage and telemetry — job history, credits consumed, timings, error codes, device and browser information, IP address.
• Support data — the messages you send us.
• Billing metadata — customer and transaction identifiers returned by Paddle. Card details never reach us.

2. Why we use it, and on what legal basis

• Creating and running your account, executing retrieval jobs and storing your datasets — performance of our contract with you.
• Metering credits, invoicing and fraud prevention — contract and our legitimate interest in a sustainable, secure service.
• Security, abuse detection and rate limiting — legitimate interests.
• Product improvement and aggregate analytics — legitimate interests.
• Marketing emails — your consent, withdrawable at any time.
• Responding to lawful requests and keeping tax records — legal obligation.

We do not sell personal data, and we do not use your workspace content to train public AI models.

3. Who we share it with

• Hosting, database, email and AI processing providers acting as our processors under contract.
• Paddle.com, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) where necessary.
• Authorities where the law requires it.

4. International transfers

Our providers may process data outside your country, including outside the UK/EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses together with appropriate technical safeguards.

5. Retention

Account data is kept while your account is active and for up to 12 months after closure. Retrieved pages, datasets and job logs are kept until you delete them or the account is closed. Billing records are kept as long as tax law requires. After that, data is deleted or anonymised.

6. Your rights

Subject to local law you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests, and withdraw consent at any time. Write to support@tayaprofetch.com; we respond within one month. If you are in the UK/EEA you may also complain to your supervisory authority.

7. Security

We use encryption in transit and at rest, per-workspace row-level access control, hashed API keys and least-privilege access for staff. No system is perfectly secure, but we notify you of breaches where required.

8. Cookies

We use essential cookies and local storage for sign-in sessions and security. Any analytics or marketing cookies are optional and only set with your consent; you can clear or block cookies in your browser, though sign-in will not work without the essential ones.

9. Contact

Benoit Tano — support@tayaprofetch.com