This Privacy Policy explains how TnY Systems collects, uses, and discloses personal data. This policy applies to our website, enterprise data engineering services, and startup advisory engagements. We comply with North American privacy frameworks, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec’s Law 25, and applicable U.S. state privacy laws such as the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

1. Accountability and Privacy Officer

Under PIPEDA’s accountability principle, organizations must designate a specific person responsible for privacy compliance.

  • Our designated Privacy Officer oversees all data protection practices.

  • Contact the Privacy Officer for inquiries or to exercise your rights: privacy@tnysystems.com.

2. Information We Collect

We collect data necessary to deliver data engineering, cloud architecture, and Agentic AI automation services. We explicitly list the specific data we collect.

  • Directly Provided Data: Names, email addresses, phone numbers, and billing information provided during service onboarding or advisory consultations.

  • Technical and Usage Data: IP addresses, browser data, device identifiers, and cookie data collected automatically when accessing our website or APIs.

  • Client Telemetry: Raw, unstructured logs and pipeline metadata processed strictly on behalf of our enterprise clients for algorithmic structuring.

  • Sensitive Information: We do not typically process sensitive personal information (such as health, financial, or biometric data). If required, we obtain prior valid consent and limit collection to the minimum necessary.

3. Purposes of Processing

We state why we collect your data before or at the time of collection. We process your information only when we have a valid legal reason.

  • Service Delivery: Architecting cloud-native data pipelines, delivering startup advisory services, and facilitating account creation.

  • Analytics and Optimization: Measuring website performance, tracking analytics, and ensuring the security of our infrastructure.

  • Communication: Providing customer support, responding to inquiries, and sending technical updates.

4. Consent Mechanisms

We obtain meaningful consent before processing personal information.

  • General Consent: You provide implied or express consent when submitting inquiries or contracting our services. You can withdraw your consent at any time, subject to legal restrictions.

  • Quebec Law 25 Compliance: For residents of Quebec, we obtain express, specific consent for each processing purpose.

5. Third-Party Sharing and Cross-Border Transfers

We do not sell personal information to third parties. We share data only with authorized service providers under strict confidentiality agreements.

  • Sub-processors: We utilize cloud infrastructure providers (e.g., AWS, Snowflake) and analytics partners to deliver our services.

  • Cross-Border Transfers: Client data may be processed in the United States or Canada. Under Quebec’s Law 25, we conduct a mandatory Privacy Impact Assessment (PIA) before transferring any personal data outside of Quebec to ensure the receiving jurisdiction offers adequate protection.

6. Individual Privacy Rights

You maintain complete control over your personal data.

  • Canadian Residents (PIPEDA & Law 25): You have the right to access the personal information we hold about you, request corrections to inaccurate data, and challenge our compliance practices.

  • U.S. Residents (CCPA/CPRA): California residents have the right to request disclosure of the specific personal information we collect, request deletion of their data, and direct us to “Do Not Sell or Share My Personal Information”.

  • Exercising Rights: Submit requests to privacy@tnysystems.com. We will not discriminate against you for exercising these rights.

7. Security and Retention

We deploy production-grade security measures to protect your data.

  • Safeguards: We protect data using appropriate security measures, including AES-256 encryption, access controls, and secure private VPCs.

  • Retention: We retain personal information only for as long as necessary to fulfill the identified purposes or comply with legal obligations.

8. Cookies and Tracking Technologies

Essential cookies are used to ensure our website functions correctly. We also use non-essential cookies for performance and analytics.

  • Opt-Out: Users can decline or withdraw consent for non-essential tracking technologies. You will still be able to access our site, though certain functions may be limited.