Privacy Policy

1. Who We Are

Tillego is a career growth platform for managers and teams, operated from British Columbia, Canada.

For questions about this policy, email hello@tillego.com.

2. What We Collect

Information you give us directly

• Account information: your name, email address, password, and optional profile details when you sign up.
• Workspace content: the career ladders, competencies, assessments, notes, goals, and other content you and your team create in Tillego.
• Team member information: names, emails, roles, and levels you add for the people on your team.
• Billing information: if you purchase a paid plan, payment details are collected and stored by Stripe, our payment processor. We do not store your full card number.
• Communications: if you email us or fill out a form, we keep that correspondence.

Information collected automatically

• Usage data: pages visited, features used, and actions taken in the app, to help us understand what's working.
• Device and log data: IP address, browser, operating system, and timestamps, for security and troubleshooting.
• Cookies: small files used to keep you signed in and to measure how the product is used. See the Cookies section below.

3. How We Use Your Information

We use your information to:

• Provide and operate the Tillego service.
• Authenticate you and keep your account secure.
• Process payments and manage subscriptions.
• Communicate with you about your account, updates, and service changes.
• Improve Tillego — fix bugs, understand usage, prioritize features.
• Meet legal obligations and enforce our Terms of Service.

We do not sell your information. We do not use your workspace content to train AI models without your explicit consent.

4. Who Sees Your Information

Inside your workspace

Tillego is a collaborative product. When you add a team member, they can see the career ladder and their own assessments. Managers can see their direct reports' assessments. We do our best to make it clear in the product who can see what.

Service providers (subprocessors)

We use trusted third parties to operate Tillego. They process information only on our instructions:

• Supabase — database and authentication hosting.
• Vercel — application hosting and deployment.
• Vercel Blob — file storage.
• Stripe — payment processing.
• Email provider(s) — transactional email (account emails, password resets, etc.).

We update this list as our stack evolves. Ask us for the current list any time.

Legal reasons

We may share information if required by law, legal process, or to protect the safety, rights, or property of Tillego, our users, or others.

Business transfers

If Tillego is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you beforehand and give you choices where required by law.

5. Where Your Information Is Stored

Tillego stores information using service providers located in Canada, the United States, and other countries. By using the service, you understand that your information may be processed outside of your country.

If you are in the European Economic Area or the United Kingdom, we rely on standard contractual clauses or other lawful transfer mechanisms where applicable.

6. How Long We Keep It

We keep your information for as long as your account is active and as needed to provide the service. If you close your account, we delete or anonymize your data within a reasonable period, typically 30 to 90 days, unless we are required to keep it to comply with a legal obligation, resolve disputes, or enforce our agreements.

Billing records are kept longer when required by tax and accounting laws.

7. Your Rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete your information (subject to legal exceptions).
• Export a copy of your information in a portable format.
• Object to or restrict certain types of processing.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email hello@tillego.com. We will respond within the time required by applicable law.

Residents of California, the EEA, the UK, and other regions with specific privacy laws have the rights described above and additional rights under local law.

8. Security

We take reasonable steps to protect your information, including encryption in transit, access controls, and regular review of our practices. No system is perfectly secure, so we can't guarantee absolute security, but we treat your information like we'd want ours treated.

If we become aware of a security incident that affects your personal information, we will notify you as required by law.

9. Cookies

Tillego uses cookies to keep you signed in, remember your preferences, and understand how the product is used. You can control cookies through your browser settings. Blocking some cookies may affect how Tillego works.

10. Children

Tillego is intended for adult professionals. We do not knowingly collect information from children under 16. If you believe a child has provided us with information, please contact us so we can delete it.

11. Employee and Team Member Information

When a manager adds their team members to Tillego, the manager is responsible for having the right to share that information and for informing team members, consistent with applicable privacy and employment laws.

Tillego processes team member information on behalf of the manager or their organization. If you are a team member and want to exercise rights over your information, please reach out to your manager or organization first. You can also contact us directly.

12. Changes to This Policy

We may update this policy as the product evolves. If changes are material, we will notify you through the service or by email. The "Last updated" date at the top reflects the most recent version.

13. Contact

Questions, requests, or concerns? Email us at hello@tillego.com.