Privacy Policy

We treat your data like mission-critical IP.

This Privacy Policy explains what we collect, how we use it, and the choices you have. We keep things simple: we’re not an ad network. We build software. We only collect what’s needed to talk to you, deliver services, and keep the platform secure.

Last updated: October 26, 2025

1. Information We Collect

What data we collect — and why

We collect information directly from you, automatically from your device when you use our site, and (in rare cases) from third-party services you explicitly connect.

Contact & Identity Info

Name, email address, company name, phone number, role/title — typically provided when you fill out our contact form, request a call, or email us directly.

Project & Inquiry Details

The problem you're trying to solve, context about your infrastructure, product requirements, and any details you voluntarily include in messages to us.

Technical Metadata

Basic usage data such as IP address, browser type, device type, timestamps, and general interaction patterns (e.g. which sections are viewed). We use this for security and to improve site performance.

Cookies & Analytics

We may use privacy-respecting analytics and/or cookies to understand traffic and detect abuse. We do not sell this data or use it for ad retargeting.

2. How We Use Your Information

We use data to deliver value, not to profile you

We use the information we collect to do exactly what you asked us to do: understand your needs, scope solutions, communicate securely, and operate our business.

  • To respond to your inquiry and communicate about potential work.
  • To evaluate technical requirements for a potential engagement.
  • To operate, secure, and improve our site and services.
  • To comply with legal/regulatory obligations.
3. How We Share Information

We don’t sell your personal data. Period.

We only share information when it’s required to operate or protect the business, and never to brokers or ad marketers.

  • Service providers strictly acting on our behalf (e.g. secure email / hosting / error monitoring).
  • Legal and compliance purposes if required by applicable law, regulation, subpoena, or to protect our rights.
  • Business transfers, in the event of a merger, acquisition, financing, or sale of assets — only if appropriate safeguards are in place.

We may also disclose anonymized or aggregated insights (performance stats, usage patterns, etc.) that do not identify you or your company.

4. Security & Confidential Projects

We take security and confidentiality extremely seriously

We work with sensitive workloads (finance, healthcare, internal automation). We treat your information like production code.

We apply technical, administrative, and organizational measures designed to protect your information against unauthorized access, misuse, alteration, or loss. This includes restricted access, encrypted channels, and environment isolation for client-specific data.

However — no system on the internet can guarantee 100% security. By sharing information with us, you understand that transmitting data online always carries risk. For extremely sensitive data (e.g. regulated PHI, proprietary trading logic, etc.), we usually execute under a custom MSA / NDA and may set up isolated infrastructure.

If you believe data you’ve shared with us has been exposed or accessed without permission, contact us immediately at contact@thalenor.com.

5. Your Rights & Choices

You stay in control

Depending on your region, you may have legal data rights. Even if your jurisdiction doesn’t require it, we’ll try to honor reasonable requests.

  • Access – You can ask what information we have about you.
  • Correction – You can request that we update or correct inaccurate information.
  • Deletion – You can request that we delete certain personal information, subject to legal/operational retention limits.
  • Opt-out – You can ask us to stop certain forms of communication (like outreach emails).

To make a request, email contact@thalenor.com and tell us who you are, what you’re asking for, and how we can confirm identity.

6. Data Retention

How long we keep your information

We keep personal info only as long as we need it for the reasons described above, unless a longer retention period is required by law or contract.

For inbound project conversations that don’t move forward, we may keep a record of the inquiry so that we have context if you reach out again later.

For signed clients, retention and data handling can also be governed by a Master Services Agreement (MSA), Statement of Work (SOW), or NDA between us and you. If there’s a conflict between that agreement and this Privacy Policy, the signed agreement wins.

7. International Data Transfers

We are remote-first and global

Our team operates across multiple regions. Depending on where you’re located, your data may be transferred to and processed in a different country.

By interacting with us, you consent to this transfer. We only work with service providers who commit to reasonable privacy and security standards.

8. Children’s Privacy

We don’t target children

Our services are intended for businesses and professionals. We do not knowingly collect personal information from children under 16.

If you believe a child under 16 has provided us information, please contact us and we’ll delete it.

9. Changes to This Privacy Policy

If we change this policy

We may update this Privacy Policy from time to time. When we do, we’ll update the “Last updated” date at the top of this page.

If we ever make a change that significantly affects how we use or share your personal information, we’ll make a reasonable effort to let you know (for example, via website notice or direct email if you’re in an active conversation with us).

10. Contact Us

Questions, requests, concerns

We're serious about privacy. If you have a question about how we handle data — especially if you’re in a regulated industry — talk to us.