Privacy Policy

Respecting privacy is important to us, and we strive to ensure a high level of protection in all personal data processing. Within the EU/EEA, the General Data Protection Regulation (GDPR) came into effect in May 2018. Therefore, we have developed this policy to help you understand how we collect, communicate, disclose, and make use of personal information. The following outlines our privacy policy.

User data is securely stored in Europe. The core infrastructure of Tiny Chat is hosted in Paris, France. User data is stored within our core infrastructure. We do not transfer user data outside the EU.

The core infrastructure is hosted at Scaleway, registered with the Paris Trade and Companies Register under number 433 115 904 RCS Paris, with its registered office at 8 rue de la Ville l'Evêque, 75008 Paris, France.

1. Definition of Terms Used

The Site refers to the Tiny Chat website at https://tiny-chat.com, where our users can create an account, subscribe, and use Tiny Chat's services.

The Client refers to the Tiny Chat chat client (the chat bubble) that takes the form of a JavaScript script that our users install on their own site to display the Tiny Chat chat bubble.

2. Collection and Processing of Personal Data

The term "personal data" refers to any information relating to an identified or identifiable natural person. This includes, for example, the name, image, personal identification number, contact details, contest entries, selections made, behavior, or IP address. Processing of personal data refers to any action we, or a third party engaged by us, take with personal data, such as collection, recording, and storage.

Personal data can only be processed for specific and explicitly stated purposes and cannot be processed subsequently for purposes beyond those stated. At Tiny Chat, we process personal data for the purpose of providing the Features. Personal data may also be used for marketing and tracking purposes, as well as for our sales and product development to improve our products and services.

Finally, personal data is also processed for statistical purposes to understand how users use the Site and our Features, as well as to display content.

Tiny Chat ensures a high level of security in the protection of personal data and has implemented appropriate techniques and security measures to protect personal data from unauthorized access, alteration, disclosure, or destruction.

3. Confidentiality Protection

Here's what we implement to protect the confidentiality of data:

Prior to or at the time of collecting personal information, we will identify the purposes for which the information is being collected.

We will collect and use personal information solely for the purpose of fulfilling the stated objectives and those compatible with them, unless we obtain the consent of the individual concerned or as required by law.

We collect visitor data through the Tiny Chat client on websites anonymously and not directly linked to any identifiable user, whether personal identity or network information.

We will retain personal information only for the time necessary to fulfill these objectives.

We will collect personal information by lawful and fair means and, where appropriate, with the knowledge or consent of the individual concerned.

Personal data must be relevant to the purposes for which it is used and, to the extent necessary, must be accurate, complete, and up-to-date.

We will protect personal information by reasonable security safeguards against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification.

We will make readily available to customers information about our policies and practices relating to the management of personal information.

4. GDPR Policy

Tiny Chat strictly adheres to the GDPR regulation, which aims to protect user data and provide them with the right to modify or delete their data and consent to data collection.

Any user affected by the processing of their personal data can exercise the following rights, in accordance with European Regulation 2016/679 and the Data Protection Act (Law 78-17 of January 6, 1978):

Right of access, rectification, and erasure of data (respectively provided by articles 15, 16, and 17 of the GDPR);

Right to data portability (article 20 of the GDPR);

Right to restriction (article 18 of the GDPR) and objection to data processing (article 21 of the GDPR);

Right not to be subject to a decision based solely on automated processing;

Right to determine the fate of data after death;

Right to lodge a complaint with the competent supervisory authority (article 77 of the GDPR).

To exercise your rights, please send your request to Trisolaris Technologies at 6 rue d’Entraigues, Tours, 37000, or via email at data@tiny-chat.com.

To fulfill the request, the data controller may ask the user to provide certain information such as their name, email address, and account number, personal space, or subscriber number.

Please visit the CNIL website for more information on your rights.

5. Restrictions on Disclosure of Personal Data

We may designate external partners to perform tasks on our behalf, such as providing IT services or assisting with marketing, press release management, data analysis, or statistics. The execution of these services means that our partners may have access to personal data. Companies processing personal data on our behalf must always sign an agreement with us to ensure a high level of protection for this data, even with our partners. Tiny Chat may also disclose personal data to third parties, such as public authorities, if it concerns criminal investigations or if we are otherwise required to disclose such data by law or by a decision of public authorities. Tiny Chat will not disclose personal data beyond what is described in this section.

6. Data Collected on the Site

Identity: first name, last name, email, profile picture when creating your account via our partner Auth0.

Payment: payment information collected by our partner Stripe.

Browsing data collected by our partners Hotjar.

Data from your Slack account when integrating your Tiny Chat account with your Slack space: team name, account name, profile picture associated with your account.

7. Data Collected by the Client

The content of messages sent by the Client passes through our servers but is stored on the Slack space of our users. Tiny Chat's server only retains the metadata associated with the message, such as the message sending time and the IP address of the sender (see below).

The Client, which operates on our users' websites, uses cookies. The cookies are only used in accordance with the following elements:

These cookies are necessary for the functionality of the Client; they are required to restore the chat session and user messages of the Client when navigating between website pages and/or returning to the website after a few days.

The default expiration period for cookies is 6 months, which is renewed if and when the user returns to the website and loads the Client.

Cookies are linked to a single session for a user. If the session contains messages, it is permanent (unless deleted by a website agent); otherwise, the session is temporary and is destroyed 30 minutes after the last access to the website.

Cookies are not used for tracking purposes. They are only used to link a user to a server that stores browsing session data, which is then used for messaging purposes in the event that the user or a website agent initiates a conversation.

The user's IP address is stored on a server that is linked to the cookie storing the browsing session data. If the user leaves the site without using the messaging features of the Client, the session (and thus the IP address) will be automatically deleted from Tiny Chat's servers when the session expires (i.e., 30 minutes after the last access, as mentioned above).

The user's IP address is retained indefinitely if they have initiated a chat session with a website on Tiny Chat. We are legally obliged by French law to record these IPs in the event of a legal request (for a minimum period of one year). However, we retain these IP addresses for a longer period because we need to aggregate them to protect our Client against botnets and frequent spam attacks. The Tiny Chat service could not meet the expectations of our users without the statistics on these collected IPs.

The Site may sometimes contain links to external sites or services that we do not control. Anyone following a link to an external website is encouraged to review the privacy and cookie policies that apply to that particular website. We are committed to conducting our activities in accordance with these principles to ensure the confidentiality of personal information is protected and maintained.

8. Privacy Policy Modification Conditions

Tiny Chat reserves the right to modify this Policy at any time to ensure compliance with applicable law for the site's users.

Any changes made shall not affect purchases made prior to the modification, which remain subject to the Policy in effect at the time of purchase and as accepted by the user during the purchase confirmation.

Users are encouraged to review this Policy each time they use our services, without formal notification being necessary.

This policy, published on June 5, 2023, was last updated on June 5, 2023.