LEGAL · REVIEW REQUIRED
Privacy notice.
Status: draft for legal and operational review. This page is not a final legal notice and must not be treated as an approved statement of actual processing practices.
1. Scope and controller
Tinlyt is a web-intelligence product associated with Tinlance Limited. Before launch, the responsible legal entity, contact address, applicable jurisdiction and any processors must be confirmed and inserted into this notice.
2. Information that may be processed
Depending on enabled features, a service of this kind may process account and workspace identifiers, investigation prompts, submitted URLs, retrieval metadata, page content, run status, evidence artifacts, audit records and technical diagnostics. The actual categories must be verified against deployed data flows.
3. Purpose and legal basis
Potential purposes include providing requested research workflows, protecting the service, troubleshooting, maintaining evidence provenance and meeting applicable legal obligations. The operator must document a valid legal basis for each actual purpose before collecting personal data.
4. Source URLs and sensitive content
URLs and prompts can contain personal information, tokens or confidential search terms. The service should minimize collection, redact sensitive query components from routine logs where feasible, restrict access and apply documented retention periods.
5. Retention and deletion
Retention periods for account records, raw captures, evidence exports, logs, backups and derived artifacts are not specified here because the operational policy must be confirmed first. Before launch, publish periods, deletion workflows, backup expiry behavior and any legal exceptions.
6. Sharing and processors
Identify hosting, database, browser, telemetry, email and payment providers actually used in each environment. Document their roles, transfer locations, safeguards and applicable contractual terms. Do not infer provider use from an architectural proposal.
7. Security and international transfers
Describe only security measures that have been implemented and verified. If data crosses borders, document the relevant transfer mechanism and jurisdictional requirements after legal review.
8. Rights and contact
Before launch, provide a verified contact channel and explain how data subjects can exercise applicable rights, raise concerns or complain to a supervisory authority.
9. Changes and approval
This draft requires review by the accountable privacy/legal owner and reconciliation with live data flows. Keep this route noindex and do not treat the presence of this page as launch approval.