1. Data Controller
The data controller for your personal data is Tandimy, accessible at tandimy.com. For any questions regarding the protection of your data, contact us at: privacy@tandimy.com.
2. Data Collected
We collect the following data when you use the Platform:
- Identification data: first name, last name, email address, password (hashed)
- Account data: subscribed plan, company, role, registration date
- Usage data: projects, tasks, activity history, preferences
- Payment data: billing information (processed by Stripe — not stored by Tandimy)
- Technical data: IP address, browser type, connection logs
3. Purposes of Processing
Your data is processed to:
- Provide and improve Platform services
- Manage your account and subscription
- Process payments and issue invoices
- Send notifications related to your activity
- Ensure security and prevent fraud
- Comply with our legal obligations
4. Legal Basis
The processing of your data is based on: (i) the performance of the subscription contract, (ii) your explicit consent for marketing communications, (iii) our legal obligations, and (iv) our legitimate interest in ensuring the security and improvement of the Platform.
5. Data Sharing
Tandimy does not sell your personal data. It may be shared with:
- Stripe — secure payment processing
- Cloud hosting providers — data storage (servers in the EU)
- Email service providers — sending transactional notifications
- Competent authorities — upon legal request only
6. Retention Period
Your data is retained for the duration of your subscription and up to 3 years after its termination, unless a longer legal retention obligation applies. Billing data is retained for 10 years in accordance with European regulations.
7. Your Rights (GDPR)
Under the GDPR, you have the following rights:
Access
Obtain a copy of your data
Rectification
Correct inaccurate data
Erasure
Request deletion of your data
Portability
Receive your data in a readable format
Objection
Object to certain processing activities
Restriction
Restrict processing of your data
To exercise your rights: privacy@tandimy.com. If your concern remains unresolved, you may contact your local EU data protection authority.
8. Cookies
Tandimy uses strictly necessary cookies for Platform operation (authentication, preferences) and anonymized analytics cookies to improve the user experience. You can manage your cookie preferences from your browser settings.
9. Security
We implement appropriate technical and organizational measures to protect your data against loss, unauthorized access, disclosure, or alteration: TLS/HTTPS encryption, password hashing, restricted data access, and regular security audits.
10. Contact
For any questions regarding this policy:
privacy@tandimy.com
Tandimy — tandimy.com