PRIVACY

Privacy Policy

Last updated: October 2, 2026

Accountability and requests

Tynous Technology Inc. is responsible for the privacy practices described here. Contact the Privacy Officer at info@tynous.com for privacy questions, complaints, or requests to access, correct, delete, or close an account or Workspace. We may need to verify your identity and your authority for the relevant Workspace before acting. Signed-in customers may also use Help & Support.

Information Tynous handles

Depending on the features you use, Tynous handles account and Workspace details; company and business information; customer, prospect, supplier, employee, team-member and other contact information; website inquiries; connected-mailbox messages, participants and metadata; uploaded documents and media; quotes, invoices and other business documents; AI-generated drafts and recommendations; approved business facts, Business Evidence and Business Memory; approval and action history; subscription and billing metadata; support records; and security, technical and operational telemetry.

How information is used

We use information to provide, secure, support and maintain the service; present and organize Workspace records; synchronize enabled integrations; process subscriptions; respond to support and privacy requests; and provide requested AI-assisted functionality. We do not sell customer business data or use it for cross-site advertising.

Connected business email

A Workspace owner or administrator may connect Google Gmail, Microsoft Outlook, or a supported customer-selected IMAP/SMTP mailbox. Tynous may synchronize message content and metadata needed for Inbox, customer, communication and reply features. OAuth tokens and customer-supplied mailbox credentials are protected server-side. Tynous does not request a Google or Microsoft account password.

AI Office may prepare business communications, but a consequential send through a connected mailbox requires an authorized owner or administrator to review and approve the sender, recipient, subject and body. Disconnecting stops Tynous from actively using the stored connection and clears locally usable credentials. For Google, Tynous also attempts provider-side token revocation. A provider may already have invalidated a token or may be unavailable, so customers may also revoke access in their provider account. Disconnecting does not automatically erase historical messages or business records already created in the Workspace.

AI processing

When requested functionality needs AI processing, Tynous may send the configured AI provider the business context necessary for that request. This may include company context, customer or contact information, email subjects, bodies and participants, selected document or resource content, approved facts or evidence, images, and voice, audio or transcripts where Voice Mode is used. Tynous currently uses the OpenAI API for configured AI features. Tynous requests provider processing for the requested functionality and does not use customer content to train its own generalized model. OpenAI's processing and retention are governed by its business/API terms and account-level controls; Tynous does not claim Zero Data Retention.

Google API Services and Limited Use

Tynous's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google Workspace API data is used only to provide or improve user-facing Tynous functionality requested by the user. Tynous does not use Google Workspace API data to develop, train or improve generalized or foundational AI or machine-learning models, and does not sell it or use it for advertising. When requested functionality requires OpenAI processing, only the data needed to provide that functionality is sent as service-provider processing.

Service providers and international processing

Tynous uses Google Cloud for primary application, database and file infrastructure; OpenAI for configured AI functionality; Google and Microsoft for customer-authorized mailbox integrations; Stripe for checkout, subscription and payment services; Resend for account, support and subscription-related email; and customer-selected email providers when a customer connects another mailbox. Tynous-controlled primary production application, database and file infrastructure is currently hosted in Canada. Service providers may process information outside Canada, including in jurisdictions where they or their subprocessors operate.

Retention, disconnect and deletion

Information is retained while a Workspace is active and as reasonably needed to provide the service. Individual uploaded resources or media can be deleted where the product supports deletion and no required dependency prevents it. Mailbox disconnect clears locally usable credentials but historical Workspace records may remain. Account or Workspace closure requests follow a controlled process that disables further use and identifies customer content for deletion or scheduled deletion.

Some limited records may be retained when reasonably necessary for security, fraud prevention, audit integrity, billing, accounting, dispute resolution or legal obligations. Backups expire through the normal backup lifecycle, and providers retain information under their own applicable terms and retention controls. Because retention depends on the record's purpose and applicable obligations, Tynous does not promise a universal deletion period.

Information about other people

Business customers may provide information about customers, prospects, employees, team members, suppliers, correspondents and other contacts. The Workspace customer is responsible for having appropriate authority and providing any notices or obtaining any consents required for information it supplies or connects. Tynous processes that information to provide the service for the Workspace. A request concerning information controlled by a customer Workspace may need to be directed to, or verified with, that Workspace.

Cookies and operational telemetry

Tynous uses essential session cookies, language or preference cookies, and short-lived OAuth security-state cookies. It also uses first-party operational, security and AI-usage telemetry needed to operate, protect and understand service reliability and cost. Tynous does not currently use cross-site advertising trackers.

Security incidents and complaints

Tynous maintains procedures for assessing and responding to suspected privacy and security incidents and provides notifications where required by applicable law. Contact the Privacy Officer at info@tynous.com with a concern or complaint.

Changes

We may update this policy as the service changes. The current version and update date will be published here.