Privacy Policy

This policy explains what personal data TNY(“we”, “us”) collects when you use our link-shortening and dynamic QR service at tny.co.in, why we collect it, and the rights you have over it. We are the data controller for that personal data. If you have any questions, contact us at privacy@tny.co.in.

1. Data we collect

• Account data: your email address and a securely hashed version of your password (we never store your password in readable form).
• Subscription data: your plan and the customer/subscription identifiers returned by our payment provider. We do not see or store your card number — payments are handled entirely by Lemon Squeezy (see §4).
• Link & QR data: the short links, destination URLs, titles, and branded domains you create.
• Scan/click analytics:when someone follows one of your links, we record the time, an approximate country (derived from the network, not stored as an IP address), a coarse device type (“mobile” or “desktop”), and the referring website.We do not store visitors’ IP addresses or full user-agent strings, and we do not set tracking cookies on visitors.

2. How we use your data & lawful bases

• To provide the service — create accounts, resolve your links, and show you analytics (lawful basis: performance of a contract).
• To verify your email and keep your account secure (lawful basis: legitimate interests and legal obligation).
• To process payments and manage subscriptions (lawful basis: performance of a contract).
• To produce aggregate scan analytics, collected with data minimisation in mind (lawful basis: legitimate interests in offering link analytics; we balance this against visitor privacy by not storing IP addresses or setting cookies).

3. Cookies

We use a single, strictly necessary cookie (tny_session) to keep you signed in. It is set only after you log in, is restricted to our site, and cannot be read by JavaScript. Because it is essential to a service you have requested, it does not require consent. We do not use advertising or third-party tracking cookies.

4. Service providers (processors)

We share data with a small number of providers strictly to run the service:

• Lemon Squeezy — payment processing and subscription management, acting as Merchant of Record. They receive your billing details directly.
• Resend — sends transactional emails (such as your verification email). Receives your email address.
• Our hosting & content-delivery provider — runs the application and routes requests.

We do not sell your personal data or share it for advertising.

5. International transfers

Some of the providers above are located outside your country, including in the United States. Where data is transferred internationally, it is protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. How long we keep data

We keep your account and link data for as long as your account is active. When you delete your account, your account record, links, branded domains, and the associated scan analytics are permanently removed. Email-verification tokens expire within 24 hours, and login sessions expire after 30 days.

7. Your rights

If you are in the EEA or UK, you have the right to access, correct, export, restrict, or object to the processing of your personal data, and to erase it. You can exercise the main rights yourself from your dashboard:

• Access & portability: use Download my data to get a machine-readable copy of your data.
• Erasure: use Delete account to permanently remove your account and data.
• For correction, objection, or any other request, email us at privacy@tny.co.in.

You also have the right to lodge a complaint with your local data protection authority.

8. Security

Passwords are hashed with bcrypt, sessions are stored server-side and can be revoked, and session cookies are HTTP-only and sent only over HTTPS in production.

9. Children

The service is not directed to children under 16, and we do not knowingly collect their personal data.

10. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above.