PRIVACY POLICY

Document: TC-COM-PRIVACY Version: 1.0 Effective date: June 18, 2026 Site: https://tinycio.com

This Privacy Policy explains how TinyCIO Inc. collects, uses, and shares personal information, and describes the rights of residents of California (CCPA/CPRA) and the EEA/UK (GDPR). It applies to https://tinycio.com and the Customer Portal.

1. Who we are

TinyCIO Inc., a Wyoming corporation, 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, USA. Privacy contact: we@tinycio.com.

2. Information we collect

• You provide: name, email, phone, messaging handle (Telegram), company and role, tax ID where applicable, billing details, and the content of your messages.
• Collected automatically: IP address, cookies, device and browser data, pages and actions, date and time of access.
• Payment data: processed only as needed for billing; card data is handled by our payment processor, not stored by us.

We do not knowingly collect information from children under 18.

3. How and why we use information

To register and operate the Customer Portal; provide and support the Services; communicate with you; bill and keep records; ensure security and prevent fraud; comply with law; improve the Site; and—with your consent where required—send marketing communications. Legal bases (for EEA/UK users): performance of a contract, legitimate interests, consent, and legal obligations.

4. How we share information

We do not sell your personal information. We share it with service providers/processors (payment, hosting/cloud infrastructure, accounting) under confidentiality, with authorities where required by law, and in connection with a merger or sale of assets. International transfers are made with appropriate safeguards.

5. Your California privacy rights (CCPA/CPRA)

California residents have the rights to know/access, delete, correct, and opt out of the sale or sharing of personal information, and to non-discrimination for exercising these rights. We do not sell or share personal information as defined by the CCPA/CPRA. To exercise your rights, contact we@tinycio.com; we will verify your request as required by law. You may use an authorized agent.

6. Your EEA/UK rights (GDPR)

If you are in the EEA or UK, you have the rights of access, rectification, erasure, restriction, portability, and objection, and to withdraw consent and lodge a complaint with a supervisory authority. The controller is TinyCIO Inc.; contact we@tinycio.com.

7. Retention and security

We keep personal information as long as needed for the purposes above and as required by law, then delete or anonymize it. We apply appropriate technical and organizational measures (access controls, encryption, backups, logging).

8. Cookies

The Site uses cookies and similar technologies as described in the Cookie Policy (TC-COM-COOKIES).

9. Changes

We may update this Policy; the current, dated version is posted on the Site.

Legal notice. Template covering CCPA/CPRA and GDPR baselines. If you target California or the EEA at scale, have counsel confirm rights-request workflows and any "Do Not Sell/Share" link requirements. Not legal advice.