Tegy Privacy Policy

1Personal Information We Collect

Depending on how you interact with the Service, we may collect:

• Account and profile information: name, business email address, authentication and account identifiers, organization or workspace, role, team membership, permissions, preferences, and profile information.
• Customer Content: prompts, instructions, messages, notes, files, documents, presentations, spreadsheets, datasets, call transcripts, Slack or other collaboration content, audio or voice notes, images, workspace context or memory, feedback, and other information you submit to the Service, together with outputs generated from that content.
• API and MCP information: API keys or token identifiers, authentication information, connected application or client information, request and response content, endpoint and model selections, timestamps, token and usage counts, latency, error information, IP address, and other request metadata.
• Integration information: information and content received from services you choose to connect, along with connection status, permissions, account identifiers, and authorization tokens or similar credentials needed to maintain the connection.
• Subscription and billing information: selected plan, seats, usage, subscription status, transaction identifiers, billing contact information, country, tax information, invoices, refunds, and limited payment-method information received from Polar. Polar acts as merchant of record and collects and processes full payment details under its own privacy policy. Tegy does not receive full payment-card numbers.
• Communications and support: information you provide when you request access, open a demo, contact support, report a problem, participate in research, or otherwise communicate with us.
• Website and device information: IP address, browser and device type, operating system, language, approximate location derived from IP address, referring page, pages viewed, dates and times, cookie identifiers, and campaign or referral parameters.
• Product analytics: login and session activity, feature use, workflow progress, clicks, navigation, performance, model and token usage, error and diagnostic events, and similar information about how the Service is used. Product analytics may be associated with an account or workspace.
• Session replay: recordings that reproduce how a user navigates and interacts with the interface. We use masking and exclusion controls designed to limit capture of text inputs and Customer Content, but session replay may capture rendered interface elements and interaction information.
• Information from other sources: information from workspace administrators, teammates, referral sources, service providers, connected integrations, and publicly available business sources.

Unless we separately agree in writing, do not submit protected health information, payment-card data, government identification numbers, biometric identifiers, or other regulated or highly sensitive personal information to the Service. Tegy does not use audio or voice notes to create biometric templates or identify a person by voice.

2How We Use Personal Information

We may use personal information to:

• Provide, operate, authenticate, maintain, and secure the Service.
• Process Customer Content, maintain workspace context or memory, and generate requested analyses, recommendations, and outputs.
• Provide and administer accounts, workspaces, team access, API and MCP access, integrations, subscriptions, usage limits, and billing.
• Respond to access requests, deliver demos, provide support, and communicate about the Service.
• Monitor performance, debug errors, prevent abuse, enforce limits, and protect the security and integrity of the Service.
• Analyze feature adoption, workflow completion, reliability, model performance, cost, and other usage patterns to develop and improve Tegy.
• Create and use aggregated or deidentified statistics that do not reasonably identify an individual or customer.
• Send product announcements, resources, or marketing communications when you have opted in or when otherwise permitted by law.
• Comply with law, enforce agreements, and establish, exercise, or defend legal claims.

3Customer Content, AI Processing, and Product Improvement

For purposes of this Privacy Policy, "Customer Content" means the substantive prompts, files, data, messages, workspace context, API or MCP payloads, and other content submitted to or generated through the Service.

Tegy uses Customer Content to provide the Service requested by you or your organization. Customer Content may be transmitted to OpenRouter and to underlying AI model providers selected through OpenRouter so that those providers can process the request and return an output.

Tegy does not use Customer Content to train shared or general-purpose AI models, and we do not authorize OpenRouter or underlying AI model providers to use Customer Content for that purpose. We configure provider and routing settings consistent with this commitment. AI providers may process and temporarily retain information as necessary to provide, secure, and monitor their services, subject to their applicable terms and data controls.

We may use product analytics, operational metadata, and aggregated or deidentified information to evaluate and improve Tegy. This may include feature usage, workflow completion, performance, latency, error rates, token usage, cost, and user feedback. Product analytics are not used to train shared AI models.

Authorized Tegy personnel and contractors may access Customer Content only when reasonably necessary to provide support requested by a user, maintain or secure the Service, investigate abuse or an incident, comply with law, or as otherwise directed or permitted by the customer. Access is limited to personnel with a business need and appropriate confidentiality obligations.

If you expressly submit content as feedback, participate in product research, or otherwise give us permission to use specific material for product development, we may use that material for the stated purpose. We will not publicly identify you or your organization without permission.

4How We Disclose Personal Information

We may disclose personal information to:

• Infrastructure and service providers that support hosting, compute, databases, file storage, content delivery, authentication, security, communications, customer support, and related operations.
• AI service providers, including OpenRouter and the underlying AI model providers used to process a request.
• Analytics providers, including Google Analytics for the public website and PostHog for product analytics and session replay, subject to our configuration and applicable consent requirements.
• Billing and transaction providers. Polar acts as merchant of record for Tegy subscriptions and processes purchases, renewals, taxes, refunds, and payment information under its own terms and privacy policy.
• Workspace administrators and authorized team members, who may be able to manage accounts, view membership and usage, control integrations, and access Customer Content within the workspace.
• Third-party services and integrations at your or your organization's direction, including applications that connect to Tegy through an API or MCP connection.
• Professional advisers, regulators, law enforcement, courts, or other parties when reasonably necessary to comply with law, protect rights or safety, investigate misuse, or handle a legal claim.
• Affiliates, investors, lenders, buyers, or successors in connection with a financing, merger, acquisition, reorganization, transfer to a Tegy subsidiary, sale of assets, or similar transaction, subject to appropriate safeguards.
• Other parties with your direction or consent.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use Customer Content for third-party advertising.

5Customer and Tegy Privacy Roles

When a customer or workspace submits personal information contained in Customer Content and determines why and how that information will be processed, the customer generally acts as the controller or business and Tegy acts as its processor or service provider. The customer is responsible for providing any required notices, obtaining necessary permissions, responding to requests from individuals, and ensuring that its instructions comply with law.

Tegy generally acts as the controller or business for account administration, direct communications, billing records we maintain, security, public website data, and product analytics used for our own business purposes.

If your information was submitted to Tegy by one of our customers, direct your privacy request to that customer. We will provide reasonable assistance as required by our agreement and applicable law. A data processing addendum may be made available for eligible business customers.

6Legal Bases Where Required

Where applicable law requires a legal basis, we process personal information as necessary to enter into or perform a contract; for our legitimate interests in providing, securing, supporting, and improving Tegy and managing business relationships; with your consent; or to comply with legal obligations.

You may withdraw consent at any time, but withdrawal does not affect processing already completed. Where we rely on legitimate interests, we consider the nature of the information, the expected benefit, and the potential effect on individuals.

7Cookies, Analytics, and Session Replay

The Service uses cookies and similar technologies for authentication, security, preferences, performance, analytics, and referral measurement. Essential technologies may be required for the Service to function.

The public Tegy website uses Google Analytics and related website analytics. The Tegy application uses PostHog for product analytics and session replay. Cloudflare provides security, content-delivery, and performance services. These providers may collect device, network, usage, and interaction information subject to their own privacy terms and our configurations.

Session replay may capture interface interactions, clicks, navigation, and rendered interface elements. We use masking and exclusion controls designed to reduce the collection of Customer Content and sensitive fields. Authorized personnel may review recordings to diagnose usability, performance, reliability, or support issues. Session replay is not used to train shared AI models.

Where required, we obtain consent before using nonessential analytics or session-replay technologies. You can manage cookies through your browser or a consent-management tool where available. Blocking some technologies may affect Service functionality.

We do not currently use the Service for interest-based advertising. Because there is no uniform industry standard for browser-based Do Not Track signals, the Service does not currently respond to them. We honor legally recognized opt-out preference signals, such as Global Privacy Control, where required by applicable law.

8API, MCP, and Third-Party Integrations

When you use Tegy through an API, MCP client, or connected application, we may process the authentication information, Customer Content, usage information, and technical metadata needed to complete, secure, measure, and bill for the request.

A third-party client or integration may separately receive or process information sent to or returned by Tegy. Those third parties maintain their own terms and privacy practices, and Tegy does not control their independent processing. Review the permissions and privacy terms before enabling an integration or using a third-party client.

You or your workspace administrator may be able to disconnect an integration or revoke an API key or token. Disconnection does not require a third party to delete information it previously received. Contact that third party directly regarding its retention practices.

9Data Retention and Deletion

We retain Customer Content for as long as needed to provide the Service, maintain the applicable account or workspace, and follow customer instructions. Users or workspace administrators may be able to delete content through the Service or request deletion by contacting us. Closing an account does not necessarily delete information controlled by another workspace administrator.

We retain account, usage, API and MCP metadata, security logs, communications, and support information for as long as reasonably necessary for the purposes described in this Privacy Policy. Billing, transaction, tax, and legal records may be retained for longer periods required by law or legitimate business needs.

Deleted information may remain temporarily in backups, disaster-recovery systems, security records, or legal holds before being overwritten or removed through normal cycles. We may retain aggregated or deidentified information that does not reasonably identify an individual or customer.

10Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information and Customer Content. These measures may include access controls, authentication, encryption in transit, logging, monitoring, vendor review, and personnel confidentiality obligations, as appropriate to the Service.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for protecting account credentials, API keys, MCP credentials, and connected-service tokens and for promptly notifying us if you suspect compromise or unauthorized use.

11International Data Transfers

Tegy is currently provided from the United States. We and our service providers may process personal information in the United States and other countries, which may have different data-protection laws than your location.

Where required, we use appropriate safeguards for international transfers, such as contractual protections or approved transfer mechanisms. The availability of particular AI providers or processing locations may depend on the model, plan, and configuration selected for a request.

12Your Privacy Rights and Choices

Depending on where you live and the context in which Tegy processes your information, you may have the right to request access to, correction of, deletion of, or a copy of your personal information; to object to or restrict certain processing; to withdraw consent; or to appeal a decision regarding a privacy request.

To submit a request regarding information Tegy controls, email privacy@tegy.io. We may need to verify your identity and authority before completing a request. If your information is controlled by a Tegy customer, we may direct you to that customer. Rights are not absolute, and applicable law may permit or require us to retain certain information. We will not discriminate against you for exercising an applicable privacy right.

You can opt out of marketing emails through the unsubscribe link or by contacting us. You may still receive transactional, billing, account, security, or service messages. You can manage nonessential cookies through the available consent tool or browser settings.

If European Economic Area or United Kingdom data-protection law applies, you may also have the right to complain to your local supervisory authority.

13Children's Privacy

The Service is intended for business users who are at least 18 years old and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact privacy@tegy.io.

14Third-Party Sites and Services

The Service may link to third-party websites or services, including RocketMinds, Polar checkout, AI model providers, and integrations. This Privacy Policy does not govern a third party's independent practices. Review the applicable privacy policy before providing information to another service.

15Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on the Tegy website and revise the Last Updated date. If a change is material, including a change to the entity responsible for Tegy, we may provide additional notice through the Service, by email, or through another appropriate method.

16Contact Us

For questions, concerns, or privacy requests, contact:

MGMJ Innovation Group LLC d/b/a Tegy

Email: privacy@tegy.io