GDPR Privacy Policy

1. What we collect: We collect only essential data needed to provide our services: names, contact details, and service-related information you provide.

2. How we protect it: All data is encrypted and stored securely using Google Firebase and Google Workspace, with access strictly limited to authorised personnel.

3. How long we keep it: We retain active customer data while you use our services and for 90 days after account closure; automated conversation data is deleted after 30 days.

4. Your rights: You can request to view, correct, export, or delete your data at any time by contacting us at tinyorange.cloud@gmail.com.

5. Breach response: In the unlikely event of a data breach, we will notify affected users within 72 hours with full details and remediation steps.