PRIVACY POLICY – t.my
Last updated: December 3, 2025
This Privacy Policy describes how t.my (“we”, “us”, “our”) collects, uses, stores, and protects information when you use our website, services, applications, and links (collectively, the “Service”).
If you do not agree with this Privacy Policy, please do not use t.my.
1. WHAT INFORMATION DO WE COLLECT?
Information you provide to us
You may voluntarily provide information when you:
- Create an account
- Contact support
- Subscribe to updates or paid plans
- Create or manage short links
This may include:
- Name or alias
- Email address
- Account login credentials (encrypted)
- Preferences and settings
- Payment-related metadata (if applicable – processed via third-party provider)
We do NOT intentionally collect sensitive personal information such as ethnic origin, health data, or religious beliefs.
Payment Data
If payment is required, processing is handled by a secure third-party processor (e.g., Stripe, Paddle, or similar). We do not store your card details.
Automatically collected data
When you use t.my links or visit the site, we may collect technical information such as:
- IP address (hashed/anonymised where possible)
- Browser type
- Operating system
- Referrer URL
- Device type (mobile/desktop)
- Country or region (approximate)
- Date and time of access
- Link ID accessed
This data is used purely for analytics, security, and platform functionality.
2. HOW DO WE USE YOUR INFORMATION?
We use your information to:
- Provide and maintain our Service
- Generate link analytics
- Prevent fraud, abuse, and automated attacks
- Improve functionality and performance
- Notify you of important changes
- Support technical requests
- Ensure legal compliance
- Run optional features (e.g. AI, Link Lottery, Conditional Redirects)
We do not sell your personal data.
3. LEGAL BASIS FOR PROCESSING
Depending on your location, we process data under one or more of the following legal bases:
- ✅ Your consent
- ✅ Performing a contract (providing the Service)
- ✅ Our legitimate business interest
- ✅ Legal obligations
- ✅ Protection of users and systems
This covers GDPR, UK GDPR, Australian Privacy Act 1988, and US state privacy laws.
4. WHEN DO WE SHARE INFORMATION?
We may share limited data with trusted service providers only when necessary to operate t.my, including:
- Hosting & Infrastructure: Cloudflare, Supabase
- Analytics: Internal systems, PostHog, optional Google Analytics
- AI Processing: Cloudflare AI, custom models
- Payments: Stripe, Paddle (if used)
- Security: Anti-bot / abuse tools
All providers are required to follow strict data protection standards.
We may also share data if required by law, subpoena, or court order.
5. COOKIES & TRACKING TECHNOLOGIES
t.my may use:
- Cookies
- Web beacons / pixels
- Local storage
These may be used for:
- Preferences
- Security
- Analytics
- Fraud detection
You can disable cookies in your browser. Some features may stop working properly.
We currently do not respond to Do-Not-Track (DNT) signals, as there is no standard enforcement mechanism worldwide.
6. AI & AUTOMATED FEATURES
Some t.my features use AI or automated decision systems (for example: transformation, prediction, or creative functions).
These systems may process text or metadata. They do not make legal decisions, and you should not rely on them for legal, financial, or medical advice.
We do not share personal identities with AI services.
7. SOCIAL LOGINS (IF ENABLED)
If you choose to log in using Google / GitHub / etc, we only receive:
- Name
- Public profile picture (if available)
We do not receive your social media password.
Their separate policies apply to their own use of your data.
8. DATA STORAGE AND INTERNATIONAL TRANSFERS
t.my uses global infrastructure. Your data may be processed in:
- Australia
- European Union
- United States
- Other data center locations
We use internationally approved safeguards such as Standard Contractual Clauses (SCCs) when required.
9. DATA RETENTION
We retain data only as long as necessary:
- Account data: While active
- Analytics data: Aggregated or anonymized
- Support records: Up to 24 months
- Legal/Compliance: As required
Once no longer required, data is deleted or anonymized.
10. SECURITY MEASURES
We protect your data using:
- Encryption
- Role-based access
- Secure APIs
- Tokenization
- Firewall and bot mitigation
- Access logging
- KV isolation
However, no system is 100% secure. You use the Service at your own risk.
11. CHILDREN'S PRIVACY
t.my is not intended for users under 18. If you believe a child has provided information, contact us and we will remove it.
12. YOUR PRIVACY RIGHTS
Depending on your location, you may have the right to:
- Access your data
- Correct inaccurate data
- Request deletion
- Request export
- Restrict processing
- Opt out of marketing
- Withdraw consent
You can request this by contacting: tmy.platform@gmail.com
13. UNITED STATES PRIVACY RIGHTS
If you live in a U.S. state with privacy laws (e.g. California, Virginia, Colorado, etc.) you may also have rights to:
- Know what data is held
- Know how it’s used
- Opt-out of targeted advertising
- Request deletion or correction
We honor verified requests.
14. AUSTRALIA & NEW ZEALAND
We comply with:
- ✅ Australia Privacy Act 1988
- ✅ Australian Privacy Principles (APPs)
- ✅ New Zealand Privacy Act 2020
You may request access or correction at any time.
If unsatisfied, you may contact the OAIC (Australia) or NZ Privacy Commissioner.
15. UPDATES TO THIS POLICY
We may update this policy from time to time. Latest version will always be posted at: https://t.my/privacy
16. CONTACT INFORMATION
For privacy matters, contact:
t.my
📧 tmy.platform@gmail.com
📍 New South Wales, Australia