Tilelytix

Privacy Policy

Last updated: 8 October 2026

This Privacy Policy explains how Tilelytix ("Tilelytix", "we" or "us") collects, uses, shares, retains and protects personal data when you use the Tilelytix website, application, marketplace and related services (the "Service"). It is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023 (the "DPDP Act"). By using the Service you consent to the processing described here.

Words used but not defined here have the meaning given in our Terms of Service.

1. Who is responsible

  • For your account and profile, billing, and your use of the Service, Tilelytix is the data fiduciary (the party that decides how and why the data is processed).
  • For the business data you and your team put into an Organization (transactions, notes, investors, tile settings and similar), the Organization that owns it decides how it is used, and Tilelytix processes it on that Organization's behalf. Requests about that data should go to the Organization's administrators first.

2. What we collect

Information you give us

  • Account and profile: name, email address, Tilelytix ID, password (stored only as a one-way hash), mobile number (required to create an account; we do not verify it by SMS), country, city, company, job title, time zone, and how you heard about us.
  • Organization data: organization details, team members and roles, transactions, recurring costs, investors, notes and tasks, dashboard layouts and tile settings.
  • Integration credentials: API keys or secrets you enter for tiles that connect to other services. These are encrypted before they are stored.
  • Purchases: what you bought, amounts, invoices, coupon use and, for direct UPI payments, the screenshot and transaction reference you upload. Card and bank details are handled by our payment providers; we do not store full card numbers.
  • Communications: support tickets and messages, enquiries, feedback, and the reason and comments you give if you ask to delete your account.
  • Tile creators: the tiles, code and details you submit, and your earnings ledger.

Information collected automatically

  • Usage and device data: pages and features used, sign-in times, IP address, browser and device type, and similar technical information recorded in our logs.
  • Cookies and local storage: as described in our Cookie Policy.

Information from others

  • If you sign in with Google, we receive your name, email address, profile picture and whether Google has verified your email.
  • Payment providers tell us whether a payment succeeded and give us its reference.
  • Integrations you connect send us the data the tile is built to read (for example invoices or settlements).

3. How we use it

  • To create and run your account and Organizations, and provide every feature of the Service, including calculations, tiles and integrations.
  • To process purchases, issue invoices, handle refunds and auto-renewals, and keep financial records.
  • To decide eligibility for free trials and offers, and to detect and prevent fraud, abuse, and repeated or duplicate free trials.
  • To send service messages you cannot opt out of (sign-in codes, security notices, invitations, receipts, plan and payment notices, support replies, and notices about your account or these policies).
  • To send optional messages such as tile updates, reminders, suggestions, and news and offers about Tilelytix, which you can switch off at any time from Email preferences or the unsubscribe link in each email.
  • To provide support, investigate problems, and secure, maintain and improve the Service, including by creating aggregated or de-identified statistics.
  • To comply with law, respond to lawful requests, and establish, exercise or defend legal claims.

4. Who we share it with

We do not sell your personal data. We share it only as follows:

  • Service providers who process it for us under contract: cloud hosting and databases (for example Vercel and Neon), email delivery (our own mail relay and Resend), payment providers (for example Razorpay and Paytm), and Google (for Google sign-in). Our fonts and code libraries are served from our own site.
  • Your Organizations: the administrators and members of an Organization you belong to can see your name, Tilelytix ID, member ID, role and your activity in that Organization.
  • Tiles and integrations you choose: a tile receives the data covered by the capabilities you approved, and an integration sends requests to the service you configured it for.
  • Legal and safety: where required by law, court order or a lawful request of a government authority, or to protect the rights, property or safety of Tilelytix, our users or the public.
  • Business transfers: to a successor in a merger, acquisition, financing or sale of all or part of our business, subject to this Policy.

Some providers store or process data outside India. Where they do, we take reasonable steps to ensure the data is protected as described in this Policy and as permitted by law.

5. How long we keep it

  • We keep your account and Organization data for as long as your account or the Organization is active.
  • When a plan ends and is not renewed, the Organization's data is kept for the retention period shown in the Service (currently ninety (90) days) and may then be deleted.
  • Invoices are shown in your Account Center while the plan they are for is running and for six (6) months after that (other invoices: six (6) months after they are issued). We keep our own copies for as long as tax and accounting laws require.
  • If you have no Organization, have never bought anything and have not signed in for a long period (never less than ninety (90) days), we may delete your account after emailing you at least fourteen (14) days before. Signing in keeps it.
  • Password reset links expire after thirty (30) minutes and are stored only as a one-way hash.
  • Backups are kept for a limited period and are overwritten in the ordinary course.

After you delete your account

When your account is deleted we remove your sign-in details (so the account can no longer be used), your profile, your notifications, your private notes and your dashboard settings, and we delete Organizations that only you used. Organizations that other people use keep the data that belongs to them, including notes and records you added there.

We keep the following after an account is deleted:

  • Your name, email address, phone number, Tilelytix ID, company, job title, location, sign-up date and last activity date, the reason and comments you gave for deleting, and a summary of your purchase history (the "Retained Record"). The Retained Record is stored encrypted and is accessible only to authorised Tilelytix staff.
  • One-way identifiers derived from your email address and phone number, used to recognise you if you sign up again, including to determine free trial eligibility.
  • Orders, payments, invoices, refunds and related records, for as long as required by tax, accounting and other applicable laws.
  • Support tickets (with your contact details removed), audit records and logs, as needed for security, fraud prevention and dispute resolution.

If you sign up again. When a new account is created with the same email address and phone number as a deleted one, we treat it as the same person: we remove the Retained Record and link the new account to the old one. If only one of them matches, authorised staff may see that the two accounts could belong to the same person. The free trial rule above still applies.

We keep the Retained Record to: prevent fraud and abuse of the Service, including repeated free trials; meet our legal, tax and accounting obligations; resolve disputes and enforce our agreements; and contact you from time to time about Tilelytix products, services and offers, unless you have opted out. You can opt out of such messages at any time using the unsubscribe link in any of them or by writing to tilelytixsupport@gmail.com, and you can ask us to erase your Retained Record as described in section 7; we will do so except for information we must keep by law or that we need to prevent the abuse described above.

6. How we protect it

  • Data is sent over encrypted connections (HTTPS/TLS).
  • Passwords are stored as one-way hashes. Sensitive fields, including transaction notes, notes, audit details, support messages, integration credentials and the Retained Record, are encrypted at rest with AES-256-GCM.
  • Access is restricted to authorised personnel who need it, and administrative actions are logged.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs, we will act and notify as required by law.

7. Your rights and choices

Subject to applicable law, including the DPDP Act, you may:

  • access a summary of the personal data we hold about you and how it is processed;
  • correct or update inaccurate or incomplete data (most of it directly in your Account Center);
  • ask us to erase personal data that is no longer necessary, or withdraw consent you have given, subject to the retention described in section 5 (withdrawing consent does not affect processing before it, and may mean we cannot provide the Service);
  • switch off optional emails in Email preferences or with any unsubscribe link;
  • nominate another person to exercise your rights in the event of your death or incapacity; and
  • raise a grievance with our Grievance Officer and, if it is not resolved, with the Data Protection Board of India.

To exercise these rights, write to tilelytixsupport@gmail.com from the email address on your account. We may need to verify your identity before acting.

8. Children

The Service is meant for businesses and is not directed at anyone under 18. We do not knowingly collect personal data of children. If you believe a child has given us personal data, contact us and we will delete it.

9. Changes to this Policy

We may update this Policy from time to time. The date at the top shows when it last changed. For a material change we will notify you by email or in the Service before it takes effect. Continuing to use the Service after that means you accept the updated Policy.

10. Contact and Grievance Officer

Grievance Officer: Kaveesh Krishna Pandey
Email: tilelytixsupport@gmail.com
Address: available on request by email

General privacy questions: tilelytixsupport@gmail.com. We will acknowledge a complaint within forty-eight (48) hours and try to resolve it within one (1) month.