Privacy Policy

1. Scope and Roles

This Privacy Policy describes how Tauri Pro (tauri.pro) collects, uses, stores, and discloses personal data processed through its websites, applications, and cloud service (collectively, the “Service”). Tauri Pro is a strategic, project, and innovation portfolio management (SPM/PPM/IPM) platform for small and medium enterprises.

Tauri Pro acts as data controller for registration, billing, account management, and website analytics data. For portfolio and project content submitted by Customer organizations, Tauri Pro acts as data processor on behalf of the Customer, who is the data controller for that content.

2. Data Collected

Tauri Pro may collect the following categories of personal data:

• Identity and contact data, including name, work email address, and organization name.
• Authentication, role, invitation, and access-log data.
• Subscription, invoice, and transaction references processed via Stripe.
• Usage, device, support interaction, and security-event data.
• Customer content, project data, and personnel data configured by the Customer organization within the Service.

3. Purposes and Legal Bases

Personal data may be processed for the following purposes:

• Creating and managing user accounts and Customer organizations.
• Authenticating users and enforcing access controls.
• Providing, operating, securing, and improving the Service.
• Processing payments and issuing invoices.
• Delivering customer support and responding to inquiries.
• Complying with applicable legal obligations.
• Sending service-related communications and, where consented, marketing communications.

Applicable legal bases include performance of a contract (providing the Service), legitimate interests (security, fraud prevention, and product improvement), legal obligation, and consent where required by applicable law.

4. AI-Assisted Features – Important Disclaimer

4.1 No Warranty on AI Output

AI-generated content, suggestions, analyses, and recommendations are provided “as is” for informational and productivity purposes only. Tauri Pro does not warrant that AI output is accurate, complete, current, or fit for any particular purpose. AI models can produce incorrect, incomplete, or misleading results.

Tauri Pro shall not be liable for any loss, damage, or adverse consequence arising from a user’s reliance on AI-generated output. Users are solely responsible for verifying AI-generated content before acting on it. Strategic and business decisions must be made by qualified human personnel based on their own judgment.

4.2 Input Data

Any data you submit to AI features may be processed by the underlying AI model. Do not submit confidential, sensitive, or regulated data to AI features unless you have verified that doing so complies with your applicable data-handling obligations.

5. Service Availability

Tauri Pro provides the Service on a commercially reasonable basis but does not guarantee uninterrupted, error-free, or continuous availability. The Service may be temporarily unavailable due to scheduled maintenance, unscheduled outages, third-party infrastructure failures, cyber incidents, force-majeure events, or other circumstances beyond Tauri Pro’s reasonable control.

Tauri Pro shall not be liable for any loss, damage, missed opportunity, or adverse consequence arising from the Service being unavailable, inaccessible, degraded, or delayed, regardless of the cause. Users should maintain independent backups of critical data and should not rely solely on the Service for time-sensitive operations.

6. User Responsibilities

Users and Customer organizations are responsible for:

• Maintaining the confidentiality of account credentials and promptly notifying Tauri Pro of any unauthorized access.
• Ensuring that all personal data submitted to the Service has been collected and processed in compliance with applicable data protection laws, including obtaining necessary consents.
• Verifying the accuracy of AI-generated output before relying on it for any decision.
• Using the Service only for lawful purposes and in accordance with Tauri Pro’s Terms of Service and Acceptable Use Policy.
• Ensuring that employees and other authorized users within their organization comply with this Privacy Policy and applicable laws.

Tauri Pro shall not be liable for any damage, loss, or claim arising from a user’s failure to meet these responsibilities.

7. Sub-processors and Data Sharing

Personal data may be shared with vetted sub-processors providing hosting, analytics, communications, payment processing, and identity services, including Stripe and selected OAuth providers. A current sub-processor list will be published at tauri.pro/legal/subprocessors prior to service launch and updated as sub-processors change.

Customer administrators can access data and activity logs within their organization. Tauri Pro does not sell personal data to third parties.

8. Retention and Account Deletion

Tauri Pro retains personal data only as long as necessary for the purposes described in this Policy, and for as long as required by applicable legal, regulatory, security, and financial obligations.

8.1 Inactivity-Based Account Deletion

Tauri Pro does not delete organization accounts for inactivity. An account and its data are retained for as long as the organization exists, however long it goes unused. Data is deleted when the Customer asks for it to be deleted, or after the export window that follows termination, as described in the Data Retention and Deletion Rules.

Before exercising Inactive Account Deletion, Tauri Pro will send at least one advance notice to the registered administrator email address. If no response or login is received within the notice period stated in that email, deletion will proceed automatically. Deleted data cannot be recovered.

Customers who require a longer retention period should contact Tauri Pro to discuss applicable subscription terms.

8.2 Voluntary Deletion and Export

Customer administrators may request deletion of their organization’s data at any time via the account settings or by contacting Tauri Pro. Details of available data export formats and applicable export windows are described in the Data Deletion Rules.

9. Individual Rights and Choices

Depending on the user’s location and applicable law, individuals may have rights to request access to, correction of, deletion of, restriction of, or portability of their personal data, and to object to certain processing. Individuals may also have the right to lodge a complaint with a supervisory authority.

Requests relating to personal data within a Customer’s portfolio content should normally be directed to that Customer organization, as Tauri Pro processes such data on the Customer’s behalf. Requests relating to data for which Tauri Pro is controller should be directed to the contact address in Section 12.

10. International Transfers and Security

Where personal data is transferred across international borders, Tauri Pro will implement an approved transfer mechanism such as the EU Standard Contractual Clauses or an equivalent safeguard required by applicable law.

Tauri Pro applies technical and organizational security measures including encryption in transit (TLS) and at rest, role-based access controls, audit logging, regular backups, and incident response procedures. No system is completely secure; in the event of a data breach that is likely to affect your rights, Tauri Pro will notify affected parties as required by applicable law.

11. Cookies and Tracking

Tauri Pro uses cookies and similar technologies for authentication, session management, security, and analytics. Non-essential cookies, including analytics and marketing cookies, are only placed with your consent where required by applicable law. You may manage your cookie preferences through the cookie settings available on the site.

12. Contact and Supervisory Authority

For questions, requests, or complaints regarding this Privacy Policy or Tauri Pro’s data processing, contact:

Tauri Pro has not appointed a separate Data Protection Officer or EU/EEA representative unless required by applicable law. Privacy inquiries should be directed to the email address above.

The competent supervisory authority in Finland is the Office of the Data Protection Ombudsman.

13. Children’s Privacy

The Service is designed for business use and is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected such data, we will delete it promptly.

14. Third-Party Links and Integrations

The Service may contain links to third-party websites or enable integrations with third-party tools. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you connect to the Tauri Pro platform.

15. Automated Decision-Making

The Service does not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on individuals. Analytics and reporting features within the platform are tools for your organisation’s decision-making processes and do not involve automated individual-level decisions by Tauri Pro.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes at least thirty (30) days before they take effect via email or in-app notification. The “Last updated” date at the top of this policy indicates when the most recent revision was made.