Privacy policy

Last updated: [OWNER: date this text goes live]

This page explains what personal data the tajo.io website collects, why, who receives it, how long we keep it, and what you can ask of us. It covers this website: visiting it, the newsletter, the contact form and the site chat. [OWNER: say which agreement covers data that businesses connect to Tajo, or remove this sentence]

Who is responsible

Tajo is the data controller for this website. Legal name, registered address and registration number: [OWNER: company name, registered address, registration number]. For anything on this page, write to [email protected].

What we collect, and why

When you visit

Nothing is measured until you answer the cookie question. If you press Yes, Tajo, Google Analytics and Brevo count your visits with the cookies described in our cookie policy. Tajo's own record of each page view holds the page address, its language, the previous page if it was on tajo.io, a random browser id, the kind of device and the country. We delete it after 180 days. The legal basis is your consent, which you can withdraw at any time with "Cookie settings" at the bottom of every page.

Like every website, our server also writes a technical log of requests, with your IP address, the page requested and your browser's description. We keep it 14 days to run and secure the site. Our forms use your IP address to limit how often they can be sent; those counters expire on their own. The legal basis is our legitimate interest in keeping the site working and safe.

When you sign up for the newsletter

We collect your first name, your email address, the topic you chose, the page and language you signed up from, and, if you accepted cookies, the random browser id. We send you an email with a confirmation link that works for 24 hours. Until you confirm, you are not subscribed and we do not add you to our Brevo contacts.

When you confirm, we record your consent with the time and the page, add you to our newsletter list in Brevo, and, if you accepted cookies, link this browser's earlier visits to your subscription. The legal basis is your consent. We keep your subscription until you unsubscribe or ask us to delete it; we keep the record of your consent or refusal after that, as proof of your choice.

When you write to us

The contact form sends us your name, your email address and your message. We keep the message so we can answer it and refer back to it, and we add your name and email to our contacts in Tajo and in Brevo, without subscribing you to anything. We do not link your website visits to your message. The legal basis is our legitimate interest in answering you. We keep messages for [OWNER: how long support messages are kept].

When you use the site chat

The chat answers on Tajo's own server; your question is not sent to an outside AI provider. We keep what you typed, up to 200 characters, to improve the answers. Before saving, we remove email addresses, phone numbers and long numbers, and we never save your IP address or a session id with it. We delete it after 180 days. The legal basis is our legitimate interest in improving the chat. Please do not type personal details into the chat.

Who receives your data

We do not sell personal data. These companies process it for us:

  • Brevo: sends our emails, including the confirmation email, holds our newsletter list and contacts, and, after you accept cookies, records the pages you view.
  • Google (Google Analytics): visit statistics, only after you accept cookies.
  • Cloudflare: delivers this website and protects it from attacks.
  • Tajo's own server: holds the newsletter signups, contact messages, visit records, chat log and server logs. [OWNER: hosting company and country of the server]

Some of these companies may process data outside the European Economic Area. [OWNER: the safeguards that apply to each, for example standard contractual clauses]

Your rights

You can ask us to:

  • show you the personal data we hold about you and give you a copy;
  • correct it;
  • delete it;
  • limit what we do with it, or stop using it where we rely on our legitimate interest;
  • send it to you in a format another service can read.

Write to [email protected]. When we delete your details, we delete your contact record, your website visits and any signup you did not confirm. We keep your support messages and the record of your consent or refusal, so that an unsubscribe keeps working; tell us if you want the messages deleted too, and we will deal with that request.

You can withdraw consent at any time: for cookies, with "Cookie settings" at the bottom of every page; for the newsletter, by writing to us. Withdrawing does not affect what was done before.

If you think we have not handled your data properly, you can complain to the data protection authority where you live or work.

Children

This website is meant for businesses. We do not knowingly collect data from children.

Changes to this policy

When what we collect or who receives it changes, we update this page and the date at the top.

This page as Markdown: privacy.md

Loading Markdown…