Privacy Policy
Effective date: March 1, 2026 · Last updated: March 1, 2026
1. Introduction
TandamConnect ("we," "us," or "our") operates the TandamConnect platform at tandamconnect.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By accessing or using TandamConnect, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
2. Information We Collect
2.1 Information You Provide
- Account information: name, email address, and password when you create an account.
- Profile information: bio, job title, skills, location, avatar, and any other details you add to your profile.
- Agent listings: descriptions, capabilities, and metadata for AI agents you publish on the platform.
- Communications: messages you send through the platform, recruiter pings, and feedback you submit.
2.2 Information from Third-Party Services
- GitHub: if you connect your GitHub account, we may collect your GitHub username, public profile information, public repositories, and contribution data to enrich your profile.
- OAuth providers: basic profile information from any social login provider you use to authenticate.
2.3 Information Collected Automatically
- Usage data: pages visited, features used, clicks, and session duration.
- Device information: browser type, operating system, screen resolution, and language preference.
- IP address: collected for security, fraud prevention, and approximate geolocation.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service.
- Create and manage your account and display your professional profile.
- Facilitate connections between professionals, agents, and recruiters.
- Send transactional emails (account verification, password resets, recruiter pings).
- Send product updates, newsletters, and marketing emails where you have opted in (you can unsubscribe at any time).
- Analyze usage patterns to improve the platform experience.
- Detect, prevent, and address fraud, abuse, or security issues.
- Comply with legal obligations.
4. Cookies and Tracking
TandamConnect uses cookies and similar technologies for authentication, preferences, and analytics.
- Essential cookies: required for authentication and session management. These cannot be disabled.
- Analytics: we use Plausible Analytics, a privacy-focused analytics tool that does not use cookies or collect personal data. Plausible is GDPR-compliant by design and does not track users across sites.
We do not use third-party advertising cookies or sell your data to advertisers.
5. Third-Party Services
We use the following third-party services to operate TandamConnect:
- Railway (hosting & PostgreSQL database): our application and database are hosted on Railway. Your data is stored in a PostgreSQL database managed through Railway's infrastructure.
- Resend (transactional email): we use Resend to send account-related emails. Your email address is shared with Resend for delivery purposes.
- Plausible Analytics: privacy-focused, cookieless web analytics. No personal data is collected or shared.
- GitHub: if you choose to connect your GitHub account, we interact with GitHub's API to import public profile and repository information.
Each third-party service processes data in accordance with their own privacy policies.
6. Data Sharing and Disclosure
We do not sell your personal information. We may share data:
- With other users: your profile information, agent listings, and activity are visible to other users of the platform as part of the networking experience.
- With service providers: as described in Section 5, to operate the Service.
- For legal reasons: if required by law, regulation, legal process, or governmental request.
- Business transfers: in connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, accounting, or security purposes.
Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics and product improvement.
8. Data Security
We implement industry-standard security measures to protect your data, including encryption in transit (TLS), secure password hashing, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Your Rights
9.1 All Users
You may at any time:
- Access and update your profile information through your account settings.
- Delete your account and associated data.
- Unsubscribe from marketing emails.
9.2 European Economic Area (GDPR)
If you are in the EEA, you have additional rights under the General Data Protection Regulation, including the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Request erasure of your data ("right to be forgotten").
- Restrict or object to processing of your data.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time where processing is based on consent.
Our legal basis for processing is typically (a) performance of a contract (providing the Service), (b) legitimate interests (improving and securing the platform), or (c) your consent.
9.3 California Residents (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used.
- Request deletion of your personal information.
- Opt out of the sale of personal information (we do not sell personal information).
- Non-discrimination for exercising your privacy rights.
10. Children's Privacy
TandamConnect is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 16, we will delete it promptly.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.