Privacy Policy

1. Introduction

Tecfydata Inc. ("we", "us", or "our") operates Tecfy ERP. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA). This policy is subject to and should be read together with our Terms of Service.

2. Information We Collect

We may collect:

• Account information: Name, email address, company name, password (hashed), and timezone
• Business data: Data you enter into Tecfy ERP (customers, invoices, inventory, etc.)
• Usage data: Logs, IP address, browser type, and access patterns
• Payment information: Processed by our payment provider; we do not store full card details
• Banking and financial data (via Plaid): If you choose to connect a bank account, we collect bank account details, account balances, and transaction history through our integration with Plaid Inc. This data is stored in your dedicated tenant database and is used solely to provide accounting and reconciliation features within the Service.

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Service
• Process transactions and send related communications
• Send verification codes, security alerts, and support messages
• Improve the Service and develop new features
• Comply with legal obligations and enforce our terms

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service providers: Hosting, payment processing, email delivery, and analytics (under strict agreements). We are not responsible for the privacy practices or security breaches of third-party service providers.
• Legal requirements: When required by law or to protect our rights

5. Data Storage and Security

Your data is stored on servers in Canada where possible. We use reasonable efforts to implement industry-standard security measures including encryption in transit and at rest, access controls, and security assessments. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6. Data Retention

We retain your account and business data for as long as your account is active. After account termination, we may retain data for a limited period as required by law or for legitimate business purposes. You may request deletion of your data.

7. Your Rights

Under Canadian privacy law, you have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your data
• Withdraw consent where applicable
• Lodge a complaint with a privacy commissioner

To exercise these rights, contact us at [email protected].

8. Cookies, Tracking, and Analytics

We use essential cookies for authentication and session management. We also use third-party analytics tools to understand how visitors use our website and to improve our Service.

Google Analytics (GA4) and Google Tag Manager

Our website uses Google Analytics 4 (GA4) and Google Tag Manager (GTM), services provided by Google LLC. These tools collect information about your visit, including:

• Pages visited and time spent on each page
• Referring website or search engine
• Browser type, operating system, and device type
• General geographic location (country/city level, derived from IP address)
• Interactions such as button clicks and form submissions

This data is collected using cookies and similar tracking technologies and is transmitted to Google servers, which may be located in the United States or other countries. Google may use this data in accordance with its own Privacy Policy. We have enabled IP anonymization so that only a truncated IP address is sent to Google.

We use this analytics data solely to improve the performance and usability of our website. We do not use it to identify you personally.

Your opt-out options

• Install the Google Analytics Opt-out Browser Add-on
• Adjust your browser's cookie settings to block third-party cookies
• Enable "Do Not Track" in your browser (note: not all services honour this signal)

9. Plaid Integration and Banking Data

Tecfy ERP offers an optional integration with Plaid Inc. ("Plaid") that allows you to connect your business bank accounts for automated transaction import and reconciliation. This integration is entirely optional and only activated when you explicitly authorize it.

What data is collected

• Bank account name, type, and institution
• Account numbers (masked) and routing information
• Account balances (current and available)
• Transaction history (date, amount, merchant name, category)

This financial data is retrieved via Plaid's API and stored exclusively in your tenant's private database. It is not shared with other tenants or used for any purpose other than providing the features you have requested within your Tecfy ERP account.

Plaid's role

Plaid acts as an intermediary between Tecfy ERP and your financial institution. By connecting a bank account you also agree to Plaid's End User Privacy Policy. Tecfydata Inc. is not responsible for Plaid's data handling practices.

Deleting your banking data

You may request permanent deletion of all banking and transaction data we have collected through the Plaid integration at any time by contacting us at [email protected]. We will remove the data from your tenant database within 30 days and, where technically supported, submit a deletion request to Plaid on your behalf. Disconnecting the integration from within Tecfy ERP will stop any further data collection immediately.

10. Children's Privacy

Our Service is not directed to individuals under 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time at our sole discretion. We will notify you of material changes via email or through the Service. Continued use after such notice constitutes acceptance. The "Last updated" date at the top indicates when changes were last made.

12. Limitation of Liability

To the maximum extent permitted by law, Tecfydata Inc. shall not be liable for any damages arising from unauthorized access to, loss of, or disclosure of your personal information, including due to security breaches, third-party actions, or circumstances beyond our reasonable control. Our liability is further limited as set forth in our Terms of Service.

13. Contact Us

For privacy-related questions or requests, contact us at [email protected]. Tecfydata Inc. is responsible for your personal information under this policy.