Tahini

Privacy Policy for Tahini

Last Updated: Feb 26, 2025

Tahini Technologies, Inc. ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application ("Tahini"). By using the App, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Personal Information

We collect personal data only with your explicit consent, including:
• Name and email address (provided when creating an account).
• Verified product purchase details, extracted from confirmation emails after user authorization.

1.2 Non-Personal Information

We collect aggregated, anonymized data that does not identify individual users, such as:
• App usage statistics
• General user preferences

1.3 Email Data Processing & Purchase Verification

The App requests read-only access to your email inbox after your explicit consent.
• We use automated filtering to detect purchase confirmation emails by subject line only.
• If a subject matches a known purchase pattern, our system extracts only essential metadata (e.g., product name, merchant, date).
• Full email bodies, addresses, and payment information are never stored.
• No human reviews email content, and no logs of email data are kept beyond necessary metadata.

2. How We Use Your Information

We use collected data to:
✅ Verify & Display Purchases: Add verified product purchases to your profile with an affiliate link.
✅ Enhance User Experience: Personalize recommendations and improve App functionality.
✅ Prevent Fraud & Ensure Compliance: Detect and prevent misuse while complying with GDPR & CCPA.
✅ Communicate with You: Send updates, security alerts, and important notices.

3. User Consent & Data Control

We comply with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) by:
• Using a Consent Management Platform (CMP) to allow users to approve, decline, or withdraw data permissions at any time.
• Allowing users to delete their data and revoke email access instantly via the App settings.
• Providing full transparency on what data is collected and how it is used.

4. Data Sharing & Third-Party Providers

We do not sell personal data and only share limited information when necessary:

4.1 Affiliate Link Processing

Purchase metadata (e.g., product name, merchant, date) is shared with affiliate platforms to generate monetized links.

4.2 Service Providers

We use third-party service providers for infrastructure, analytics, and email processing. These providers must adhere to strict confidentiality agreements and cannot use your data beyond their service obligations.

4.3 Legal & Compliance Requirements

We may disclose information if required by law, to comply with legal processes, or to protect the rights, safety, and security of our users.

5. Data Security & Retention

We implement industry-standard security measures to protect user data, including:
• Encryption in Transit & At Rest: Data is encrypted during transfers (AWS Cloud, storage, APIs).
• Data Minimization: Only essential purchase metadata is stored—no email bodies, payment details, or full message logs.
• Access Controls: Strict authentication methods to prevent unauthorized access.

We retain user data only as long as necessary for its intended purpose, unless a longer retention period is required by law.

6. Data Minimization & Scope Limitation

Inbox scanning is strictly limited to detecting product purchases. No unnecessary email content is stored or accessed. We do not collect financial details, contact lists, or unrelated emails.

7. Your Rights Under GDPR & CCPA

You have the right to:
✔ Access, correct, or delete your personal data at any point.
✔ Withdraw consent and revoke email permissions at any time.
✔ Request a copy of your stored data.
✔ Limit or object to data processing.

California residents have additional rights, including the right to:
• Opt-out of data selling (we do not sell data).
• Receive disclosures about what data is collected and how it's used.

To exercise these rights, visit the Privacy Settings in the App or email us at info@tahini.app.

8. International Data Transfers

Your data may be stored and processed outside your country of residence. By using the App, you consent to cross-border data transfers under applicable privacy laws.

9. Changes to This Privacy Policy

We may update this Privacy Policy as needed. Significant changes will be communicated through in-app notifications or emails.

10. Contact Us

For any privacy-related inquiries, you can contact us at: 📧 info@tahini.app