Tegy Privacy Notice

1Scope and privacy roles

Tegy handles information in two principal roles:

• Tegy's business operations. Tegy determines why and how it handles website data, business contact and account information, Usage Data, security data, support communications, and subscription information for purposes such as providing, securing, improving, and marketing the Service. This Notice covers that processing.
• Processing for customers. A business customer may submit personal information in prompts, documents, messages, files, integrations, or other Customer Content. For that information, the customer generally determines the purpose and means of processing and Tegy processes it on the customer's behalf. The customer is responsible for its own notices, rights, permissions, instructions, and legal compliance. The Tegy Data Processing Addendum governs that processing where applicable.

If your information appears in Customer Content submitted by a Tegy customer, contact that customer first. Tegy will assist the customer as described in the DPA.

This Notice does not govern a third-party website, integration, AI provider, or service that maintains its own privacy terms, except to explain when Tegy discloses information to that party.

2Information we collect

Depending on how you interact with the Service, we may collect the following categories.

3How we use information

We may use personal information to:

• create, authenticate, administer, and support accounts and workspaces;
• provide prompts, outputs, integrations, API and MCP functionality, files, collaboration, and other Service features;
• route customer requests to AI and infrastructure providers;
• process transactions, subscriptions, entitlements, renewals, refunds, taxes, and billing support;
• provide support, investigate customer-reported problems, and communicate about the Service;
• personalize configuration, remember preferences, and recommend relevant features or workflows;
• meter usage and enforce plan, credit, rate, storage, and other limits;
• monitor reliability, performance, quality, errors, and adoption;
• analyze, test, research, improve, develop, and benchmark the Service and new features;
• protect accounts, detect and prevent fraud, abuse, malware, and security incidents, and enforce our agreements;
• maintain business, accounting, tax, audit, transaction, consent, and contract records;
• send product, research, event, and marketing communications, subject to applicable opt-out rights;
• comply with law, legal process, and lawful government requests;
• establish, exercise, or defend legal claims and protect Tegy, customers, users, and others; and
• evaluate or complete a financing, reorganization, merger, acquisition, sale, transfer, bankruptcy, or similar transaction.

We may combine information collected through the Service where the uses are compatible with this Notice and applicable law.

4AI processing and model training

When you use an AI feature, we may transmit Customer Content and related instructions to an AI routing provider and, through it, to underlying model and infrastructure providers to perform the requested inference. The routing provider engages those underlying providers under its own terms, and they may process data in the United States or other locations.

Tegy does not use Customer Content to train shared or general-purpose AI models unless the customer affirmatively opts in to a clearly described program. We require or configure inference providers not to use Customer Content for that training. We may use Usage Data, deidentified aggregate metrics, Feedback intentionally provided to Tegy, and evaluation or training data Tegy otherwise has the right to use to improve and develop the Service.

AI tools, web search, MCP servers, integrations, or external actions a customer enables may be operated by third parties with their own data practices. The customer controls whether to enable them and is responsible for reviewing those practices.

5How we disclose information

We may disclose personal information to the following categories of recipients for the purposes described above.

6Sale, sharing, and targeted advertising

Tegy does not sell personal information for money or other valuable consideration as “sell” is defined under applicable U.S. state privacy laws. Tegy also does not share personal information for cross-context behavioral advertising or process it for targeted advertising as those terms are defined under applicable U.S. state privacy laws. We do not use Customer Content for third-party advertising.

If Tegy later introduces a practice that constitutes sale, sharing, or targeted advertising under applicable law, we will update this Notice and provide required choices before applying that practice.

7Cookies, browser controls, and Do Not Track

You can control many cookies through browser settings. Blocking cookies may prevent authentication or other Service functions. Where Tegy provides an in-product or website preference control, you can use it to manage the covered technologies.

Because there is no uniform industry standard for browser “Do Not Track” signals, the Service does not currently respond to them. We process legally recognized opt-out preference signals, such as Global Privacy Control, where required and relevant to a practice in which Tegy engages. Because Tegy does not currently sell or share personal information or process it for targeted advertising, such a signal does not change those practices.

Analytics, security, and infrastructure providers may collect information about activity over time on the Service. Tegy does not authorize them to use Service information to build profiles for unrelated third-party advertising.

8Data retention

We retain information for as long as reasonably necessary for the purposes described in this Notice, including to provide the Service, maintain an active customer relationship, understand and improve the product, protect security, comply with law and accounting obligations, resolve disputes, collect fees, and enforce agreements.

Retention depends on the information and context:

• Customer Content is generally retained while needed to provide the Service and then deleted under customer controls, the Terms, the DPA, and our backup cycle.
• Account and identifiable Usage Data may be retained while an account is active and for a reasonable period afterward for product analysis, security, support, contract, and business records.
• Short-lived operational data, such as session replay and routine diagnostic logs, is retained for shorter periods under internal schedules.
• Transaction, tax, accounting, consent, acceptance, security, abuse, and legal records may be retained for applicable recordkeeping or limitation periods.
• Information subject to a litigation, investigation, security, fraud, or legal hold may be retained until the matter is resolved.
• Suppression records may be retained to honor communication opt-outs.
• Properly deidentified and aggregated information may be retained indefinitely.

When retention ends, we delete, deidentify, or securely dispose of the information consistent with our systems and backup cycles.

9Security

We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure. Safeguards include access restrictions, confidentiality obligations, transmission security, infrastructure and vendor controls, logging, backup protections, and incident response appropriate to the Service and information.

No transmission or storage system is completely secure. You are responsible for protecting credentials, using available security controls, managing workspace access, and promptly notifying security@tegy.io if you suspect compromise.

10Your privacy choices and rights

11Children

The Service is for business users who are at least 18, and Tegy does not knowingly allow a person under 18 to create an account. The Service is not directed to children, and we do not knowingly collect personal information from a child through a child-directed service. If you believe a minor created an account or that information about a child was submitted in violation of this Notice or the AUP, contact privacy@tegy.io.

12Where information is processed

Tegy is based in the United States. Tegy and its service providers may process information in the United States and other countries where they operate. Tegy does not offer a specific data-residency location or international transfer terms unless Tegy agrees to them in writing with a customer.

13Changes to this Notice

We may update this Notice to reflect changes in the Service, practices, entity, or law. The Last Updated date identifies the current version. We will provide additional notice of a material change where required, such as by email, in-product notice, or a prominent website notice.

We will not rely solely on a retroactive change to use previously collected Customer Content for shared or general-purpose model training where the prior notice or agreement prohibited that use.

14Business transfers and provider changes

Information may transfer to an affiliate, financing party, acquirer, or successor in connection with a financing, reorganization, conversion, merger, acquisition, sale, bankruptcy, or transfer of the Tegy business. A successor may process information consistently with this Notice and applicable agreements. If the responsible provider or practices materially change, we will update this Notice and provide additional notice where required.

15Contact

Privacy requests and questions: privacy@tegy.io Security reports: security@tegy.io

MGMJ Innovation Group LLC, current provider of Tegy 7901 4th St N, Suite 300 St. Petersburg, Florida 33702