Privacy policy

Account data: your name, email address, and authentication details when you or your organization creates an account.

Customer data your organization enters or imports: contacts, leads, opportunities, quotes, invoices, notes, uploaded documents, and any custom fields your industry pack defines. This is your organization's data, not ours.

Usage data: sign-in activity, audit events tied to record changes, and metered usage of any connected third-party channel (email, WhatsApp, voice), recorded so costs are never presented as free when they are not.

To operate the product: authenticate you, enforce that each organization only ever sees its own data, and run the features you actually use, such as lead routing, quote generation, and document storage.

To keep the product working: automated backups, retention cleanup of operational logs, and fraud/abuse prevention (rate limiting on public forms and bulk imports).

We do not sell customer data, and we do not use your organization's customer records to train any model or to advertise to you.

Supabase hosts the database, authentication, and file storage. Data at rest is encrypted; row-level security enforces that one organization can never read another's records.

Optional connected channels (currently email, via Resend, when configured) process only what is needed to deliver that specific message. Nothing is sent through a channel your organization has not enabled.

OpenRouter processes the company name and website submitted to the AI outreach agent (/marketing) to generate research and a draft email. Your organization's own customer data is never sent to OpenRouter.

No third-party advertising or analytics trackers run on this product.

The public AI outreach agent at /marketing accepts a company name and website you type in, sends it to OpenRouter (a third-party AI routing service) to research the company and draft a cold email, and shows you the result. Taysier does not store what you research or the email that gets generated.

We keep only enough to enforce fair use of this feature: a hashed IP address for anonymous visitors, or your account id if you are signed in, and a timestamp. Nothing else about your lookup is retained.

A session cookie keeps you signed in. A locale cookie remembers your English/Arabic preference. An active-organization cookie remembers which workspace you last used. None of these are used for advertising, and none are shared with third parties.

Your organization's customer records are retained until your organization deletes them or closes its account. Operational logs with no long-term purpose, such as rate-limit counters and delivery logs, are purged automatically on a short schedule.

You can export your organization's data as CSV at any time from Settings, and delete individual records at any time. Closing a workspace removes its data per your organization's own retention choices.

Every table is protected by row-level security scoped to your organization, not just application-level checks. Sensitive credentials (such as webhook signing secrets) are stored encrypted, never in plaintext. Multi-factor authentication is available for every account. Document downloads are served through short-lived signed links rather than public URLs.

You can access, correct, export, or delete the data in your account or your organization's workspace at any time through the product itself. If you need help beyond what the product exposes directly, contact us using the details below.

Taysier is a business tool and is not directed at, or knowingly used by, anyone under 18.

If this policy changes materially, we will update the date at the top of this page.

Questions about this policy can be sent to [privacy contact to be added before launch].