Tavroka Privacy Notice

Data We Collect

We collect information necessary to operate the Tavroka platform, support customer relationships, and improve product performance. The specific data depends on how you interact with us.

• Account data: Names, emails, authentication credentials, and billing identifiers.
• Platform telemetry: Integration metadata, workflow execution logs, and performance metrics.
• Support interactions: Tickets, chat transcripts, and call notes provided to our teams.

How We Use Data

We process personal data to deliver the platform, fulfil contractual obligations, ensure security, and inform product decisions.

• Provide, maintain, and personalize automation services.
• Deliver customer support, incident response, and proactive guidance.
• Analyze usage patterns to improve reliability, performance, and user experience.

We do not sell personal data. We may share information with vetted subprocessors that support infrastructure, security, billing, or communications, subject to data processing agreements.

Legal Bases

Tavroka processes personal data under the following legal bases:

• Contract: To perform agreements with customers and users.
• Legitimate interest: To secure systems, prevent fraud, and enhance services.
• Consent: For optional communications or integrations that require prior approval.
• Legal obligation: To comply with applicable laws, audits, or regulatory requests.

Security & Retention

Security is embedded in Tavroka's architecture. We implement layered controls to safeguard personal data and maintain precise retention schedules.

• Encryption in transit (TLS 1.2/1.3) and at rest (AES-256).
• Role-based access, least privilege, and audit trails for administrative actions.
• Retention aligned with contractual commitments, followed by secure deletion.

International Transfers

Data may be processed in Canada, the United States, or other jurisdictions where Tavroka or our subprocessors operate. We use contractual safeguards (including Standard Contractual Clauses) and regional data residency options to protect information.

Your Privacy Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data, as well as to object to or restrict certain processing activities.

• Submit requests via privacy@tavroka.com.
• We respond within 30 days unless a longer period is permitted by law.
• You may appeal decisions by contacting the Tavroka Data Protection Officer.

Changes & Contact

We may update this Privacy Notice to reflect product evolution or regulatory requirements. Material updates will be posted here and communicated via email or in-product notifications.