Privacy policy
Last updated: July 2026. This policy explains exactly what data TyllFlow collects, why, how we protect it, and the choices you have.
Who we are & our two roles
TyllFlow is a multi-tenant business operating platform (POS, inventory, menu, CRM, HR & payroll, finance, operations). Our role depends on the data:
- For your account and business/billing data, we are the data controller.
- For the data your business enters about its own customers and employees, you are the controller and TyllFlow is the processor acting on your instructions.
- Each workspace (tenant) is logically isolated from every other.
Account & business data we collect
When you create and run a workspace we collect the information needed to identify and bill the account:
- Your name, work email, and phone number
- Business/workspace name, slug, and country
- Password (stored only as a salted hash — never in plain text)
- Role and permissions inside your workspace
- Billing details you provide for subscriptions (e.g. manual-payment references or screenshots you upload)
Data you enter into the platform
Your workspace stores the operational records you and your team create. You control this data; we process it to run the service:
- Products, menu items, recipes, inventory and stock movements
- Orders, sales, payments, invoices and financial records
- Customer records you add (names, phone, email, order history)
- Employee/HR records you add (salary components, attendance, nationality, payroll)
- Suppliers, purchase orders, and uploaded images (logos, menu photos, avatars)
Technical & usage data
To keep the service secure and give owners analytics, we automatically collect limited technical data:
- IP address — used to derive an approximate country/city for security, traffic analytics, and showing regional pricing
- Device and browser information (user-agent), pages and actions, and timestamps
- Sign-in events and audit logs of significant actions in your workspace
Cookies & local storage
We use only the storage needed to keep you signed in and remember your preferences — no third-party advertising or cross-site tracking cookies.
- Session/authentication tokens to keep you logged in
- Preferences: theme, language, currency, and layout choices
- Optional web-push subscription, stored only if you enable notifications
How we use your data
We use data strictly to operate, secure, and improve the service — never to sell it.
- Provide, authenticate, and secure your workspace
- Prevent fraud, abuse, and unauthorized access
- Give business owners analytics and regional pricing
- Process subscriptions and support requests
- Meet legal, tax, and accounting obligations
Legal bases
Where data-protection law applies, we rely on the following bases:
- Performance of our contract with you (running the service)
- Legitimate interests (security, fraud prevention, product analytics)
- Consent (e.g. enabling push notifications) — withdrawable at any time
- Legal obligation (retaining financial/tax records)
Who we share with (sub-processors)
We keep the stack lean and self-hosted. We do not sell personal data. Limited processors help us operate:
- Our own servers and self-hosted object storage/CDN host your data and media
- An IP-geolocation lookup service resolves approximate country/city from IP
- A transactional email provider delivers account emails (e.g. password resets)
- Disclosures required by law or to protect rights and safety
Storage, location & security
Your data is protected in transit and at rest with layered controls:
- Encryption in transit (TLS/HTTPS across all services)
- Passwords hashed; role-based access control on every action
- Tenant isolation so one workspace can never read another
- Audit logging and least-privilege administrative access
Data retention
We keep data only as long as needed for the purposes above:
- Active-account data is retained while your workspace is active
- Financial and tax records are kept for the period the law requires
- On account closure or a valid request, data is deleted or anonymized, subject to legal holds
Your rights & choices
You can exercise your data-protection rights at any time:
- Access, correct, export, or delete your account data
- Object to or restrict certain processing, and withdraw consent
- If you are a customer/employee of a business using TyllFlow, contact that business (the controller); we assist them as processor
- Turn push notifications on or off from your device settings
International transfers, children & changes
A few final points and how to reach us:
- Where data crosses borders, we apply appropriate safeguards
- TyllFlow is not directed at children under 16
- We post material changes to this policy on this page with a new date
- Privacy questions or data requests: contact your workspace admin or TyllFlow support
Transparent by design
Own your data, control access, and see exactly how it is used. Start your branded workspace free.
Start free trial