PRIVACY POLICY
This Privacy Policy explains how Tvali collects, uses, and protects your information when you use our platform. We take your privacy seriously.
1. Information We Collect
We collect the following information:
- Account information: Your name, email address, username, and company name provided during registration.
- Business data: Inventory, orders, bookings, and other data you enter into the platform.
- Usage data: Basic technical information such as IP address, browser type, and pages visited, used solely for security and audit purposes.
- Payment information: Billing is handled entirely by Paddle. We do not store your credit card details.
2. How We Use Your Information
We use your information only to:
- Provide and operate the Tvali platform
- Send transactional emails (account verification, booking notifications)
- Maintain security and audit logs within your account
- Respond to support requests
We do not use your data for advertising, analytics products, or any purpose beyond operating the service.
3. Data Isolation
All business data is strictly isolated per company. No company can access another company's data. Every database query is scoped to your company — this is enforced at the application level.
4. Data Sharing
We do not sell your data. We share data only with:
- Paddle — for payment processing
- Resend — for transactional email delivery
- Railway — our cloud hosting provider
- Cloudflare — for DNS and media storage
All third-party providers are bound by their own privacy policies and data processing agreements.
5. Data Retention
Your data is retained for as long as your account is active. If you delete your account, your data is permanently removed within 30 days. Audit logs may be retained for a shorter period as configured by your account admin.
6. Security
We take reasonable technical measures to protect your data, including encrypted connections (HTTPS), secure cloud infrastructure, and access controls. However, no system is completely immune to security risks.
7. Cookies
Tvali uses session cookies strictly for authentication purposes. We do not use tracking cookies or third-party advertising cookies.
8. Your Rights
You have the right to:
- Access the data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and data
- Export your data (available via CSV export within the platform)
To exercise these rights, contact us at [email protected].
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email. Continued use of the service after changes constitutes acceptance.
10. Contact
For privacy-related questions or requests, contact us at [email protected].