Effective Date: October 28, 2025 | Last Updated: October 28, 2025
TNID Internal Operations ("TNID," "we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our internal business management platform ("Service").
Scope: This policy applies to all users of the TNID Internal Operations platform, including employees, contractors, and authorized business partners. This is an internal business platform and is not intended for consumer use.
Legal Compliance: We comply with applicable data protection laws including:
| Category | Examples | Required? |
|---|---|---|
| A. Identifiers | Real name, email address, account name, IP address, unique personal identifier | Yes (for account) |
| B. Personal Information (Cal. Civ. Code ยง 1798.80(e)) | Name, contact information, employment information | Yes |
| C. Protected Classifications | Not collected | N/A |
| D. Commercial Information | Records of products or services purchased, transaction histories | If applicable |
| E. Biometric Information | Not collected | N/A |
| F. Internet/Network Activity | Browsing history, interaction with our Service, cookies | Automatic |
| G. Geolocation Data | IP-based location (country/region level) | Automatic |
| H. Sensory Data | Not collected | N/A |
| I. Professional/Employment Information | Job title, department, work history, performance data | Yes |
| J. Education Information | Not collected | N/A |
| K. Inferences | User preferences, task assignment predictions | Automatic |
We process your personal data based on the following legal grounds:
| Legal Basis | Processing Activities |
|---|---|
| Contract Performance (Article 6(1)(b)) |
Account management, service provision, user support, billing |
| Legitimate Interests (Article 6(1)(f)) |
Security monitoring, fraud prevention, service improvements, direct marketing to existing users |
| Consent (Article 6(1)(a)) |
Optional cookies, marketing communications, third-party integrations |
| Legal Obligation (Article 6(1)(c)) |
Tax records, regulatory compliance, law enforcement requests |
| Vital Interests (Article 6(1)(d)) |
Emergency situations affecting life or health |
Legitimate Interests Assessment: Where we rely on legitimate interests, we have conducted balancing tests to ensure your interests and fundamental rights do not override our legitimate interests. You have the right to object to processing based on legitimate interests.
We use cookies and similar tracking technologies to track activity on our Service and hold certain information. For detailed information, see our full Cookie Policy.
| Type | Purpose | Duration | Opt-Out Available |
|---|---|---|---|
| Strictly Necessary | Authentication, security, load balancing | Session | No (required) |
| Functional | User preferences, language settings | 1 year | Yes |
| Analytics | Usage statistics, performance monitoring | 2 years | Yes |
| Advertising | Not used on internal platform | N/A | N/A |
We do not sell your personal information. We share information only in the following circumstances:
| Provider | Purpose | Data Shared | Location |
|---|---|---|---|
| Heroku (Salesforce) | Application hosting | All platform data | United States |
| Cloudinary | Document/media storage | Uploaded files, metadata | United States/EU |
| Anthropic (Claude AI) | AI processing | Task descriptions, content for generation | United States |
| Redis | Background job processing | Task queue data | United States |
| Social Media APIs | Content distribution | Authentication tokens, post content | Various |
All service providers are bound by Data Processing Agreements (DPAs) requiring them to protect your data and use it only for specified purposes.
We may disclose information when required by law:
In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any change in ownership or use of your personal information.
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:
You may request information about the specific safeguards applied to your data transfers by contacting us.
We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.
| Data Category | Retention Period | Justification |
|---|---|---|
| Account Information | Duration of account + 30 days | Service provision, recovery period |
| Task History | 2 years from completion | Business records, analytics |
| Financial Records | 7 years | Tax and accounting requirements |
| System Logs | 90 days | Security monitoring |
| Marketing Data | Until opt-out + 2 years | Campaign effectiveness |
| Legal Hold Data | As required | Legal proceedings |
| Backup Data | 30 days | Disaster recovery |
| AI Processing Data | 30 days | Service improvement |
Deletion: When retention periods expire, data is securely deleted or anonymized. Deletion from backups may take up to 30 additional days.
Depending on your location, you may have the following rights regarding your personal information:
| Right | Description | Jurisdictions |
|---|---|---|
| Access | Request a copy of your personal information | GDPR, CCPA, All |
| Rectification | Correct inaccurate or incomplete information | GDPR, CPRA |
| Erasure | Request deletion of your information | GDPR, CCPA |
| Portability | Receive your data in a portable format | GDPR |
| Restriction | Limit processing of your information | GDPR |
| Objection | Object to certain processing activities | GDPR |
| Opt-Out of Sale/Sharing | Opt-out of sale or sharing (not applicable - we don't sell) | CCPA/CPRA |
| Non-Discrimination | Not be discriminated against for exercising rights | CCPA, All |
| Withdraw Consent | Withdraw previously given consent | GDPR, All |
Authorized Agents: You may designate an authorized agent to make requests on your behalf. The agent must provide proof of authorization.
If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the GDPR:
You have the right to lodge a complaint with your local supervisory authority if you believe we have violated your rights:
As we do not have an establishment in the EU/UK, inquiries may be directed to our privacy team at privacy@tnid.com.
California residents have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
See Section 2 for detailed categories. In the past 12 months, we have collected categories A, B, D, F, G, I, and K.
See Section 3 for detailed purposes.
All categories listed in Section 2 may be disclosed to service providers for business purposes.
We do not sell personal information. We have not sold personal information in the preceding 12 months.
California Civil Code Section 1798.83 permits users to request information about disclosure to third parties for direct marketing. We do not disclose personal information for third-party direct marketing.
Age Restrictions: Our Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16.
If We Discover Underage Data: If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information immediately. Please contact us at privacy@tnid.com if you become aware of any underage data collection.
Parental Rights: Parents or guardians who believe we may have information from or about a child should contact us immediately. Upon verification, we will promptly delete such information.
We implement appropriate technical and organizational measures to protect your personal information:
Your Responsibilities: You are responsible for maintaining the confidentiality of your account credentials and for using secure connections when accessing our Service.
No Absolute Security: While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
We use artificial intelligence (AI) to enhance our Service capabilities:
| Activity | Purpose | Data Used | Human Review Available |
|---|---|---|---|
| Task Assignment | Suggest optimal agent for tasks | Task description, agent capabilities | Yes - can override |
| Content Generation | Create blog posts, social media content | Prompts, templates | Yes - all content reviewed |
| Workflow Optimization | Suggest process improvements | Usage patterns, performance data | Yes - recommendations only |
GDPR Article 22: You have the right not to be subject to decisions based solely on automated processing. All significant decisions involve human oversight.
In the event of a data breach affecting your personal information, we will:
If notified of a breach, we recommend you:
We maintain records of all breaches in compliance with Article 33(5) GDPR, documenting facts, effects, and remedial action taken.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.
You can request previous versions of this policy by contacting privacy@tnid.com.
TNID Internal Operations
Attn: Privacy Team
Email: privacy@tnid.com
Alternative: dpo@tnid.com
Phone: 1-800-TNID-PRIVACY (placeholder)
Response Time: Within 30 days
Submit requests for access, deletion, correction, or other privacy rights to privacy@tnid.com with subject line "Privacy Rights Request".
If you have concerns about our privacy practices, please contact us first. You also have the right to lodge a complaint with your local supervisory authority.
TSG Global, Inc.
Operating as: TNID Internal Operations
Jurisdiction: Washington State, United States