Privacy Policy - Tiny Systems

1. Introduction

Tiny Systems Limited ("Company", "we", "us"), registered in England and Wales, operates the Tiny Systems platform. This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Tiny Systems Limited is the data controller for the personal data we process. You can contact us at hello@tinysystems.io for any data protection enquiries.

3. Information We Collect

Account Information

When you register, we collect:

Full name
Username
Email address

Usage Data

We collect anonymized usage analytics using GoatCounter, a privacy-friendly analytics service that does not use cookies or track personal data. This includes:

Pages visited
Referral source
Browser and device type
Country (derived from anonymized IP)

Workflow Data

Your workflows, configurations, and related data are stored to provide the Service. This data is processed on your connected Kubernetes clusters and on our platform infrastructure as necessary to deliver the Service.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

Contract performance — to provide the Service you signed up for
Legitimate interests — to improve the Service, prevent fraud, and ensure security
Legal obligation — to comply with applicable laws

5. How We Use Your Information

To provide and maintain the Service
To authenticate your identity and manage your account
To send essential service communications (account verification, security alerts)
To respond to your support requests
To improve the Service based on aggregated, anonymized usage patterns

6. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies. Our analytics provider (GoatCounter) does not use cookies.

7. Data Sharing

We do not sell your personal data. We may share data with:

Infrastructure providers — to host and deliver the Service (e.g., cloud hosting providers)
Legal authorities — when required by law or to protect our rights

We do not share your workflow data or configurations with third parties.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Anonymized analytics data may be retained indefinitely.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), secure authentication, and access controls. However, no method of transmission over the internet is 100% secure.

10. International Transfers

Your data may be processed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK data protection law.

11. Your Rights

Under UK GDPR, you have the right to:

Access — request a copy of your personal data
Rectification — correct inaccurate personal data
Erasure — request deletion of your personal data
Restriction — restrict processing of your personal data
Portability — receive your data in a structured, machine-readable format
Object — object to processing based on legitimate interests

To exercise any of these rights, contact us at hello@tinysystems.io. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

12. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

14. Contact

For any questions about this Privacy Policy or our data practices, contact us at hello@tinysystems.io.