Privacy Policy
Last updated: October 2025
At TIBR, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your information when you use our platform, website, and related services (collectively, the “Service”).
1. Information We Collect
We collect the following types of information when you use the Service:
- Account Information: Your name, email address, and billing details.
- Usage Data: Log files, IP address, browser type, device information, and interactions with the platform.
- Content Data: Information you upload or create through the Service (e.g., project data, quote templates, estimates).
2. How We Use Information
We use your information to:
- Provide, operate, and improve the Service.
- Process payments and manage subscriptions.
- Respond to your inquiries and provide support.
- Send service updates and communications (including marketing, if you’ve opted in).
- Ensure platform security, detect fraud, and enforce our Terms of Service.
2A. Legal Basis for Processing (EU/UK Users)
If you are located in the European Union, United Kingdom, or other similar jurisdictions, we process your personal data under the following legal bases:
- Contractual necessity – to provide and operate the Service.
- Legitimate interests – to improve the platform, prevent fraud, and maintain security.
- Consent – for marketing communications or optional features.
- Legal obligation – when required by applicable laws or court orders.
3. Sharing & Disclosure
We do not sell your personal data to third parties.
We may share information with trusted third-party service providers that help us operate the Service. These providers are bound by confidentiality and data protection agreements and only process your data as necessary. For example:
- Cloud hosting – Amazon Web Services (AWS)
- Payment processing – Stripe, PayPal
- Email communications – Mailgun, SendGrid
- Analytics – Google Analytics (if used)
We may also disclose your information:
- To comply with legal obligations, law enforcement, or government requests;
- To protect our rights, users, or the public from harm or fraud.
4. Data Storage & Security
- All data is hosted on Amazon Web Services (AWS) in secure data centers.
- We use encryption in transit (TLS 1.2+) and at rest (AES-256) to protect your data.
- Access to systems is restricted through role-based access controls and monitored for suspicious activity.
- Regular backups and disaster recovery procedures are in place.
5. International Data Transfers
If you are located outside of Canada, your information may be transferred to and processed in countries that may not offer the same level of data protection. Where applicable (e.g., EU/UK), we use lawful safeguards such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Other appropriate mechanisms under applicable privacy laws.
6. Your Rights
Depending on your jurisdiction, you may have rights including the ability to:
- Access or request a copy of your personal data.
- Correct or update inaccurate information.
- Delete your data or restrict its processing.
- Object to certain uses (such as marketing).
- Request data portability.
- Withdraw consent at any time (where consent was the legal basis).
To exercise your rights, please contact us at privacy@tibr.ai.
7. Data Retention
We retain your data:
- For as long as your account remains active;
- As necessary to provide the Service and fulfill contractual obligations;
- To comply with legal, regulatory, and tax requirements.
You may request deletion of your account and associated data by contacting us.
8. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or via email. The current version will always be available at tibr.ai/privacy. Continued use of the Service after changes take effect constitutes your acceptance of the updated policy.
9. Cookies and Tracking Technologies
We may use cookies or similar technologies to:
- Maintain session state and login functionality;
- Analyze traffic and usage patterns (e.g., via Google Analytics);
- Improve user experience and troubleshoot technical issues.
You can manage or block cookies via your browser settings. Where required by law, you will be prompted to consent to non-essential cookies.
10. Children’s Privacy
The Service is not intended for use by children under the age of 13 (or under 16 in jurisdictions where that is the minimum age for data consent). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at privacy@tibr.ai.
11. Contact
If you have questions or concerns about this Privacy Policy or how we handle your data, you may contact us at:
Email: privacy@tibr.ai