1. Introduction
This Privacy Policy describes how Tyms (“Tyms”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards information when you visit tyms.ai, sign in to our applications, or otherwise interact with our products, agents, channels, marketplaces, masterclasses, and related services (collectively, the “Services”).
Tyms provides AI software and agents that help organizations run business operations across finance, sales, marketing, customer service, compliance, and more. We take privacy seriously and design our Services so that you stay in control of your data.
2. Scope of this policy
This policy applies to information we process as a controller — information collected through our marketing website, account sign-up, billing, support, events, masterclasses, and any other interactions where Tyms determines the purposes and means of processing.
When you use Tyms products to process information about your own end users (for example, customers you serve through Tyms agents or channels), Tyms acts as a processor on your behalf. That processing is governed by the data processing terms in your customer agreement, not by this policy.
3. Information we collect
We collect information in three ways: directly from you, automatically through your use of the Services, and from trusted third parties.
Information you provide
We collect information you give us when you create an account, configure Tyms, contact sales or support, apply for a masterclass, become a partner, or otherwise communicate with us.
- Identity and contact details such as name, email, phone number, job title, company, and country.
- Account credentials and authentication factors used to sign in to Tyms.
- Billing and payment information, including tax identifiers and billing address. Card details are processed by our payment providers and never stored on Tyms servers.
- Content you submit when configuring agents, drafting documents, uploading files, or interacting with our support team.
Information collected automatically
When you use the Services, we automatically collect technical information about your device, network, and activity. This helps us secure the platform and improve how it works.
- Device and browser information such as type, operating system, language, and screen size.
- Network information such as IP address, approximate location derived from IP, and time zone.
- Usage data such as pages visited, features used, agent actions taken, and timestamps.
- Cookies and similar technologies as described in our cookies section below.
Information from third parties
We receive information from partners and service providers, including identity providers when you sign in via single sign-on, billing providers, and analytics partners. We also receive information when an organization you belong to invites you to a Tyms workspace.
4. How we use information
We use the information we collect to operate, maintain, secure, and improve the Services, and to communicate with you.
- Provide and operate the Services, including authenticating you, executing agent actions you configure, and delivering content through channels.
- Process payments, manage subscriptions, and handle taxes and invoicing.
- Provide customer support, respond to your requests, and notify you about changes to your account.
- Send service messages and — where permitted — marketing communications about Tyms products, masterclasses, and events. You can opt out of marketing emails at any time.
- Detect, investigate, and prevent fraud, abuse, and security incidents.
- Train and improve our models and product, using aggregated, de-identified, or customer-permitted data only — we do not train foundation models on customer content without permission.
- Comply with applicable laws, regulations, court orders, and other legal obligations.
5. Legal bases for processing
Where data protection laws such as the EU GDPR or UK GDPR apply, we rely on the following legal bases to process personal information:
- Performance of a contract — to provide the Services you or your organization have signed up for.
- Legitimate interests — to operate, secure, and improve our Services, in a way that does not override your rights.
- Consent — where required, such as for certain cookies and marketing communications. You can withdraw consent at any time.
- Legal obligation — to comply with laws, regulations, and lawful requests from authorities.
7. International data transfers
Tyms operates globally. Information may be processed in countries other than the one you live in, including in the United States and the European Union. Where we transfer personal information across borders, we use safeguards required by law — such as the EU Standard Contractual Clauses — to make sure your information remains protected.
8. Data retention
We keep personal information only for as long as we need it to deliver the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete it or de-identify it.
Customer content is retained according to the terms of your subscription. When your account is deleted, we remove or anonymize associated personal information within a reasonable period, except where retention is required by law.
9. Security
We protect information using a defense-in-depth program that combines encryption in transit and at rest, strict access controls, isolated tenant data, audit logging, and continuous monitoring. We routinely test our systems and train our team on secure engineering practices.
No system is perfectly secure. If you believe your account has been compromised, please contact us immediately.
10. Your rights and choices
Depending on where you live, you may have rights over your personal information, including the rights to access, correct, delete, restrict or object to processing, and to data portability. You can also lodge a complaint with your local data protection authority.
- Access — request a copy of the personal information we hold about you.
- Correction — ask us to correct information that is inaccurate or incomplete.
- Deletion — ask us to delete personal information, subject to legal retention requirements.
- Objection and restriction — object to certain processing, including direct marketing.
- Portability — request a machine-readable copy of information you have provided to us.
- Withdraw consent — where we rely on your consent, withdraw it at any time.
12. Children
Tyms is not directed at children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to remove it.
13. AI and automated processing
Tyms uses AI agents and automated systems to deliver many of the Services. Where automated processing produces decisions that significantly affect you, we provide ways for you to request human review and to contest the outcome. You can find more detail in your customer agreement and in the in-product documentation for each feature.
14. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the Services or by email and update the “Last updated” date above. Continued use of the Services after an update means you accept the revised policy.
Contact us about privacy
If you have questions about this Privacy Policy or want to exercise your rights, please reach out to our privacy team. We will respond within the time required by law.