Tyndl U.S. Privacy Notice
Last Updated: July 6, 2026
This Privacy Notice explains how we collect, use, share, and protect personal information in accordance with all applicable U.S. privacy laws. Use the sections below to explore how we protect your privacy and support your rights.
Use the sections below to explore how we protect your privacy and support your rights.
📊 Information We Collect
Depending on your interactions with Tyndl, we may collect the following categories of personal information (also referred to as “personal data”):
| Category | Examples | Purpose of Collection |
| Identifiers | Name, email, phone number, mailing address, IP address | Communication, identity verification |
| Professional or Employment Data | Employer name, job role, income, work history | Business account management, client vetting |
| Commercial Information | Customer ID, transaction history, purchase details | Service delivery, client records |
| Internet/Network Activity | Browser and device info, clickstream data, session metadata | Security, usability analytics, site performance |
| Audio/Visual Data | Recordings of meetings or events (with prior notice) | Quality assurance, service improvement |
| Sensitive Personal Information | Limited financial data for transactions (e.g., last four of a card) | Secure payment processing, fraud mitigation |
Sources of Information:
- Directly from you (e.g., form submissions, conversations)
- From your organization (if you are a business contact)
- Through automated means (e.g., cookies, system logs)
- Occasionally from trusted third parties (e.g., analytics or service partners)
We only collect what is necessary and retain it in accordance with legal requirements and our data governance practices.
⚙️ How We Use Your Information
We use personal data to provide services, enhance user experience, and fulfill our legal and contractual obligations. Tyndl processes information only for specific, disclosed purposes, and in ways that are consistent with applicable privacy laws—including those in the U.S. and other jurisdictions, where applicable.
| Purpose | Description | Legal or Business Basis |
| Service Delivery | To operate our platform, process transactions, manage your account, and provide customer support | Contractual necessity; legitimate interests |
| Security and Fraud Prevention | To detect, prevent, and respond to fraud, misuse, and threats | Legal obligation; legitimate interests |
| Improvement and Research | To analyze trends, assess usage, and improve our services | Legitimate interests; consent (where required) |
| Compliance and Auditing | To meet our legal obligations, respond to law enforcement, or conduct audits | Legal obligation |
| Communications | To respond to your inquiries and send important service-related notices | Contractual necessity; legitimate interests |
| Marketing and Outreach (Non-Sales) | To inform you of relevant offerings or insights, without selling your data | Consent (where applicable); legitimate interests |
| Processing Sensitive Information | To facilitate secure transactions and prevent fraud, as permitted by law | Explicit consent; legal obligation |
We do not use your personal data to infer characteristics or make decisions that produce legal or similarly significant effects without your consent.
🛡️ Your Privacy Rights
Privacy laws across the U.S. give individuals important rights over their personal data. These rights may vary depending on your state of residence, but Tyndl honors valid requests from all individuals covered by applicable laws.
Depending on where you live, your rights may include:
| Right | What It Means |
| Right to Know | Request access to the categories or specific pieces of personal data we’ve collected about you. |
| Right to Delete | Ask us to delete certain personal data we’ve collected (with legal exceptions). |
| Right to Correct | Request that we correct inaccurate personal data we maintain about you. |
| Right to Opt Out | Say no to the sale or sharing of your personal data for cross-context behavioral advertising. |
| Right to Limit | Restrict how we use your sensitive personal data to what’s necessary for core functions. |
| Right to Data Portability | Receive a copy of your data in a portable format. |
| Right to Appeal | If we deny your request, you can appeal our decision and receive an explanation. |
| Right to Non-Discrimination | You will not be denied services or charged differently for exercising your rights. |
We do not sell your personal data, but we still provide opt-out options for transparency and consistency.
📨 How to Exercise Your Rights
Tyndl Privacy Officer
privacy@tyndl.co
To protect your data, we may need to verify your identity before fulfilling your request. In some cases, we may also need additional information to process the request appropriately (for example, identifying the right dataset or confirming your relationship with us).
Verification and Timing:
- We will confirm receipt of your request within 10 business days.
- We will respond within 45 days. If more time is needed, we will notify you.
- You may designate an authorized agent to submit requests on your behalf.
If we decline your request, you may file an appeal using the same contact methods above. We will respond to appeals within 45 days, and you may also contact your state attorney general if needed.
🔒 Sensitive Personal Information Usage
Tyndl only collects sensitive personal information when it is strictly necessary to deliver our services or meet legal obligations.
We may process limited sensitive data such as:
- Financial details (e.g., payment credentials via a secure third-party processor)
- Government-issued identifiers (only if required for verification or compliance)
We do not use sensitive data to infer personal characteristics, nor do we process it for profiling or advertising purposes without explicit consent.
Under applicable privacy laws, you may request to limit how your sensitive personal information is used. We honor these requests in jurisdictions that provide this right.
🗃️ Data Retention
We retain personal data only for as long as needed to fulfill the purposes described in this Privacy Notice, unless a longer retention period is required or permitted by law.
| Data Category | Typical Retention Period | Purpose/Justification |
| Account & Contact Info | While active and up to 3 years post-deactivation | Business relationship, legal obligations |
| Transaction Records | 7 years | Financial regulations, audit readiness |
| Website Logs & Analytics | 12–24 months | Site performance, security, product improvement |
| Meeting Recordings | 90 days unless otherwise required | Quality assurance, consent-based purposes only |
| Sensitive Data (e.g., payments) | Not stored by Tyndl; retained by processor only | Security and fraud prevention, per PCI DSS standards |
We periodically review our retention schedules and update them in line with legal, operational, and security needs.
🔁 How We Share Information
Tyndl does not sell personal data. We only share information with third parties under limited circumstances and always with safeguards in place.
We may share your data with:
| Recipient Type | Purpose | Safeguards |
| Cloud and Hosting Providers | To store and deliver digital services | Encrypted transmission and storage |
| Analytics and CRM Platforms | To improve user experience and manage customer accounts | Contractual data processing terms (DPAs) |
| Payment Processors | To securely complete transactions | PCI-DSS compliant third-party systems |
| Legal or Regulatory Entities | When required to comply with laws or respond to legal requests | Disclosures limited to what is legally required |
| Authorized Service Providers | To perform tasks on our behalf (e.g., IT support, audits) | Bound by confidentiality and purpose limitations |
All third parties are contractually required to protect your data and may not use it for their own purposes.
🏛️ State-Specific Disclosures
This Privacy Notice is designed to comply with all applicable U.S. privacy laws. The information above applies generally to all users; however, some states require specific disclosures or grant additional rights. The following addenda address those unique state-specific requirements not already covered elsewhere in this Notice.
California (CCPA/CPRA)
- You have the right to request information about the categories of personal information we collect, the sources, purposes, categories of third parties we share it with, and whether we sell or share your data (we do not).
- California residents may submit opt-out requests via a “Do Not Sell or Share My Personal Information” link, where applicable.
- We honor “Limit the Use of My Sensitive Personal Information” requests under Cal. Civ. Code § 1798.121.
Colorado (CPA)
- You may opt out of the processing of personal data for targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects.
- We provide a clear and conspicuous opt-out mechanism.
Connecticut (CTDPA)
- Connecticut residents may revoke consent for the processing of sensitive personal data at any time.
- We do not process sensitive data without consent as defined by Connecticut law.
Virginia (VCDPA)
- You may appeal a denial of any privacy rights request within a reasonable time. Instructions for appeals are included in the How to Exercise Your Rights section.
Utah (UCPA)
- Sensitive data may be processed under opt-out, not opt-in, unless otherwise restricted by law. We adhere to these default standards.
Texas (TDPSA)
- Tyndl will not discriminate against any Texas resident for exercising their privacy rights.
Iowa (ICPA), Indiana (INCDPA), Montana (MTCDPA), Tennessee (TIPA)
- We honor all enumerated rights including correction, deletion, access, and opt-out of targeted advertising or data sales.
- These laws do not require opt-in consent for sensitive data, but we process such data with strict necessity.
Oregon (OCPA)
- Oregon residents have the right to obtain a list of specific third parties (not just categories) to whom their data has been disclosed.
- Tyndl will provide this list upon request.
Delaware (DPA), Florida (FSDBR)
- Tyndl’s commitment to non-discrimination and transparent opt-out aligns with requirements under these laws.
Nevada (SB 220)
- Nevada residents may opt out of the sale of covered information via the same mechanism provided to California residents. Tyndl does not sell covered information.
Maine
- ISPs operating in Maine have specific restrictions on data use. Tyndl is not an ISP and does not fall under these specific obligations but still supports transparency and user control.
New York (SHIELD Act)
- While the SHIELD Act is a data security statute, not a privacy rights law, Tyndl maintains a security program that meets or exceeds its requirements.
Massachusetts and New Jersey (Proposed)
- As these laws are finalized, Tyndl will incorporate any new rights or obligations promptly and transparently.
🔄 Changes to This Notice
We may update this Privacy Notice to reflect changes in our practices, technologies, or legal requirements. When we do, we will:
- Update the “Effective Date” at the top of this page
- Provide notice through our website or other appropriate means
- Indicate whether the changes are material and what your options are, if any
If material changes affect your rights or how we use your data, we will notify you in advance whenever possible.
We encourage you to review this Notice periodically to stay informed about how we are protecting your information.