Privacy Policy for Techiewisp

Last Updated: November 4, 2025

Preamble

Welcome to Techiewisp. This Privacy Policy (“Policy”) describes how Tilelabs, represented by Founder and CEO Tonny Staunsbrink (“Company,” “We,” “Us,” or “Our”), a Danish company with its registered office at Ibæk Strandvej 28A, 7100 Vejle, Denmark, CVR number: 27685137, collects, uses, shares, and protects Your personal data when You access or use Our website, services, and AI Agentic System (collectively, the “Service”).

This Policy applies to all users (“You,” “User,” or “Customer”) of the Service, including those in the United States and Europe. By accessing or using the Service, You agree to the practices described in this Policy. If You do not agree, You must not access or use the Service. This Policy is incorporated into Our Terms of Use, and terms defined there (e.g., “Account,” “Customer Data,” “Service”) have the same meanings here unless otherwise specified.

We reserve the right to update this Policy at any time to reflect changes in Our practices or legal requirements. We will notify You of material changes via email or through the Service, providing at least 30 days’ notice where required by law (e.g., under GDPR). Your continued use of the Service after changes constitutes acceptance.

1. Interpretation and Definitions

1.1 Interpretation

Words with initial capitalization have meanings defined below or in Our Terms of Use. These definitions apply whether in singular or plural form.

1.2 Definitions

Personal Data: Any information relating to an identified or identifiable natural person, as defined under applicable laws (e.g., GDPR or CCPA).
Processing: Any operation performed on Personal Data, such as collection, storage, use, or deletion.
Data Controller: The entity that determines the purposes and means of Processing Personal Data (in some cases, Us; in others, You).
Data Processor: The entity that Processes Personal Data on behalf of a Data Controller (e.g., Us when Processing Your Customer Data).
Third Party: Any entity other than You, Us, or Our Affiliates, such as service providers or Google.
AI Agentic system: As described in Our Terms.

2. Information We Collect

We collect Personal Data and other information to provide and improve the Service. The types of information We collect include:

Account and Registration Data: When You create an Account, payment information (e.g. credit card information and payment details) is collected by Our third party payment provider, Stripe. We have access to Your name, email address and profile picture through Google as the identity provider once You have authenticated with Google.
Customer Data: Data You input or provide through the Service, such as domain information for Google Analytics configuration. This may include Personal Data if it relates to individuals (e.g., IP addresses, name and email).
Usage Data: Automatically collected information about Your interactions with the Service, including browser type, device information, pages visited, and timestamps. We use cookies for this purpose (see Section 3 for details).
Communication Data: Information from emails, support chats, or other interactions with Us, such as Your contact details and message content.
Payment Data: Billing information processed securely by third-party payment processor Stripe (e.g., credit card details).

Data in chats: Techiewisp is based on AI/LLM tech and allows for open conversation. Any data in these conversations will be processed by Google Gemini. Conversations have a memory window of up to 1000 text messages, which will be stored securely while in use for functionality purposes. As messages roll out of the window they will be permanently deleted.

All data is encrypted at rest and when in flight.

We do not collect sensitive Personal Data (e.g., racial or ethnic origin, health data) unless you voluntarily provide it. We advise against doing so.

3. How We Use Your Information

We use the information We collect for the following purposes:

To Provide the Service: Including automating Google Analytics configurations, managing Your Account, processing payments, and integrating with third-party APIs (e.g., Google’s).
To Improve the Service: Analyzing anonymized or aggregated data to enhance functionality, train AI models, and develop new features. We anonymize data where possible to remove identifiable information.
To Communicate: Sending service-related notifications, updates, or responses to Your inquiries. We may also send marketing communications if You opt-in (You can opt-out at any time).
For Security and Compliance: Detecting fraud, preventing unauthorized access, and ensuring compliance with laws, including export controls and privacy regulations.
For Billing and Administration: Processing subscriptions, invoices, and taxes (e.g., adding VAT for EU customers per the EU VAT Directive).
Cookies and Tracking: We use functional cookies for Service functionality and analytics cookies (e.g., via Google Analytics) to understand usage patterns on Our landing site.

All Processing is based on legal grounds such as Your consent, contract necessity (e.g., to fulfill the Service), Our legitimate interests (e.g., security), or legal obligations.

4. Sharing Your Information

We do not sell Your Personal Data and We do not share Your Personal Data with anyone except the listed data processors. We share information as follows:

With Service Providers. We share Your data with third-party service providers to support Our operations. These parties are bound by confidentiality and data protection agreements. Our complete list of data processors for service purposes are:
Google Cloud (We share: name, email and a technical configuration).
Google Analytics (We share: technical API configuration)
Google Tag Manager (We share: technical API configuration)
Cloudflare (We share: emails for newsletter/updates subscribers)
Stripe (Payment processing; payment information is handled directly by Stripe).
For Legal Reasons: If required by law, subpoena, or government request, or to protect Our rights, safety, or property.
In Business Transfers: If We merge, acquire, or sell assets, Your data may be transferred, subject to confidentiality.
With Your Consent: For any other purpose You approve.

We only use Your anonymized or aggregated data internally to continuously develop Our Agentic AI System and thus improve Our Services.

5. Data Security

We implement appropriate technical and organizational measures to protect Your data, including encryption, access controls, firewalls, and regular security audits. However, no system is completely secure, and We cannot guarantee absolute protection. You are responsible for securing Your Account credentials.

In the event of a data breach, We will notify You and relevant authorities as required by law (e.g., within 72 hours under GDPR).

6. International Data Transfers

The Service is hosted in US data centers (e.g., via Google Cloud), but data may eventually be transferred internationally (e.g., hosted in the APAC and EU). For transfers to non-adequate countries, We use EU Standard Contractual Clauses (SCCs), binding corporate rules, or other approved mechanisms to ensure protection.

We primarily rely on the EU-U.S. Data Privacy Framework (DPF), the Swiss-U.S. DPF, and the UK Extension to the EU-U.S. DPF for transfers involving Our certified providers: Google Cloud (for hosting), Cloudflare (for security and CDN services), and Stripe (for payment processing). These providers have self-certified compliance with DPF Principles, including notice, choice, accountability for onward transfers, security, data integrity, access, and enforcement (including recourse). You can view their certifications at https://www.dataprivacyframework.gov/.

If DPF reliance is not applicable (e.g., for non-covered data flows), We use SCCs supplemented by a Transfer Impact Assessment (TIA) to address risks like third-country access. EU/EEA/UK users may request a Data Processing Agreement (DPA) incorporating SCCs.

We comply with applicable US privacy laws, such as the California Consumer Privacy Act (CCPA) for California residents, including rights to know, delete, and opt-out of sales (though We do not sell data).

7. Your Rights

Depending on Your location and applicable laws, You have rights regarding Your Personal Data:

Access: Request a copy of Your data.
Rectification: Correct inaccurate data.
Deletion: Request erasure of Personal Data under Our control (subject to legal retention requirements).
Objection/Restriction: Object to Processing or request restrictions.
Portability: Receive Your data in a structured format.
Withdraw Consent: Where Processing is consent-based.

For GDPR purposes, We act as a Data Processor for Customer Data You control; contact Us to assist with data subject requests. For CCPA, California residents can submit requests without discrimination.

To exercise rights, email [email protected]. We respond within 30 days (extendable under GDPR).

We retain data as needed for the Service, legal obligations, or disputes (e.g., billing records for 7 years). Upon termination, We delete data after 30 days (or longer if required by law).

7.1 Specific rights for EU/EEA/UK Users

For users in the EU/EEA/UK, We comply with the General Data Protection Regulation (GDPR). As a data processor, We process personal data on Your behalf to provide the Service, acting under Your instructions as the data controller. In certain cases (e.g., processing billing information for Our business purposes), We may act as a data controller, as detailed in Our Privacy Policy.

Our key GDPR commitments include:

Processing personal data only as necessary to provide the Service and in accordance with Your documented instructions.
Implementing appropriate technical and organizational measures to ensure data security.
Assisting You with data subject requests (e.g., access, deletion) and notifying You of data breaches as required by GDPR.
Ensuring any sub-processors (e.g., Google Cloud) comply with GDPR through appropriate agreements.

For customers in the EU/EEA/UK whose personal data We process, We provide a Data Processing Agreement (DPA) incorporating EU Standard Contractual Clauses (SCCs) to ensure compliance with GDPR Article 28. You may request a DPA by contacting Us at [email protected]. The DPA governs Our processing of Your personal data and includes safeguards for international data transfers (e.g., to the US via Our hosting provider, Google Cloud), in accordance with the EU-U.S. Data Privacy Framework (DPF), Swiss-U.S. DPF, UK Extension to the EU-U.S. DPF, and/or SCCs as applicable.

We also comply with applicable US privacy laws (e.g., the California Consumer Privacy Act (CCPA) for California residents). As the data controller, You are responsible for ensuring Your use of the Service complies with applicable laws, including obtaining necessary consents and maintaining a lawful basis for processing personal data. We will assist You in meeting these obligations as required by GDPR.

7.2 California-Specific Privacy Rights (CCPA/CPRA)

If You are a California resident and the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, “CCPA/CPRA”) applies to Your Personal Data, this section provides additional details about Your rights and Our practices. We comply with CCPA/CPRA where applicable, including recent 2025 regulations on automated decision-making, risk assessments, and cybersecurity.

Your Rights: In addition to the general rights outlined in Section 7, You have the right to:
- Know the categories of Personal Data We collect, disclose, or sell/share (if any), and the purposes for which it is used.
- Delete Your Personal Data under Our control (subject to exceptions, e.g., for legal retention).
- Correct inaccurate Personal Data.
- Opt-out of the sale or sharing of Your Personal Data (note: We do not sell or share Personal Data as defined under CCPA/CPRA, but You may submit opt-out requests for confirmation).
- Limit the use and disclosure of sensitive Personal Data (e.g., precise geolocation, if applicable).
- Opt-out of automated decision-making technology (ADMT) that produces legal or similarly significant effects (Our AI Agentic System automates configurations but does not make such decisions; contact Us for details).
- Non-discrimination for exercising Your rights (e.g., no denial of Service or price changes).
Exercising Your Rights: Submit requests via email to [email protected]. Include “CCPA Request” in the subject line and provide sufficient information to verify Your identity (e.g., email associated with Your Account). We respond within 45 days (extendable by 45 days if needed). Authorized agents may submit on Your behalf with proof of authorization. We may deny requests if unverifiable or exempt.
Our Practices: We conduct data processing risk assessments as required and implement cybersecurity measures aligned with CCPA/CPRA audits (effective 2027 where applicable). Categories of Personal Data We collect are described in Section 2; We disclose data only as outlined in Section 4 (e.g., to service providers under contracts). In the past 12 months, We have not sold or shared Personal Data.
Shine the Light Law: If applicable, California residents may request information about disclosures to third parties for direct marketing (We do not make such disclosures).

For questions, contact [email protected]. This section supplements but does not replace other parts of this Policy.

8. Children’s Privacy

The Service is not intended for individuals under 18. We do not knowingly collect Personal Data from children. If We learn of such a collection, We will delete it.

9. Changes to this Policy

See the Preamble for details on updates.

10. Contact Information

For questions or requests, email [email protected] or write to Our registered office.

By using Techiewisp, You acknowledge You have read and agree to this Policy.

11. Compliance with the EU AI Act

The Service includes an AI Agentic System as described in Section 1.2 Definitions. We comply with the Regulation (EU) 2024/1689 of the European Parliament and of the Council on artificial intelligence (the “EU AI Act”), where applicable.

Risk Classification: Based on Our assessment, the AI Agentic System provided through the Service is classified as limited-risk under the EU AI Act, as it automates Google Analytics configurations without involving prohibited practices, high-risk applications (e.g., biometrics or critical infrastructure), or general-purpose AI models.
Our Obligations: We ensure the AI Agentic System is developed and deployed in a manner that promotes safety, transparency, and accountability. For any limited-risk aspects, We disclose that outputs (e.g., configurations) are AI-generated. We do not use the Service for prohibited AI practices.
Your Obligations: You agree to use the Service in compliance with the EU AI Act and any applicable national implementations. If You are a deployer of the AI Agentic System (e.g., integrating it into Your systems), You are responsible for conducting any required risk assessments, ensuring transparency to Your end-users, and reporting serious incidents to relevant authorities.
Updates: We may update the Service or this Privacy Policy to reflect changes in the EU AI Act or related guidance. Material changes will be notified as per the Preamble.

This section does not limit Our disclaimers or Your indemnification obligations as set forth in Our Terms of Use as linked in Our Preamble. For questions on AI compliance, contact [email protected].