Privacy policy

1. Who we are

www.tecnov8.com is operated by Tecnovate Limited, trading as tecnov8 (“we”, “us”). Tecnovate Limited is registered in England and Wales, company number 17178355, with its registered office at Parker House, 44 Stafford Road, Wallington SM6 9AA, United Kingdom.

We are the data controller for personal data collected through this website. Contact us about anything in this policy at privacy@tecnov8.com.

2. Data we collect

Contact and callback forms: name, work email, company, phone number, preferred call time, project stage, and your message, provided by you when you enquire.

Qualifiers and questionnaires: your answers about your application and stack (for example which AI tool built it, roles, APIs, databases, connectors), your communication-style preference, and the email address you ask the results to be sent to.

ask tecno (chat and voice): the messages you type or speak to our assistant, which are processed by the AI providers listed in section 5 to generate replies. Do not share secrets (such as API keys or passwords) in chat.

Purchases: when you buy through Stripe we receive your name, email, billing country, and what you bought. Your card details go directly to Stripe, they never touch our servers.

Client portal: if you hold a portal account, your sign-in is handled by Clerk, our identity provider, your email address, the organisation you belong to, and any sign-in method you choose (Microsoft, Google, or a one-time code). Older accounts may still hold a password we store only as a one-way hash.

Delivery and support: when we assess, build or support your software, we hold what the engagement needs. Your journey and its updates, files we deliver to you, support tickets, and any access you grant us. Where you connect a code repository, we receive read-only access and a list of the repositories you chose; we never receive your GitHub password. During an assessment we take one snapshot of the repositories you granted, at a single commit, and hold it in a private repository in our own GitHub organisation so that automated code review can read it; the findings become evidence in your report, and the snapshot is deleted when the report is signed, or thirty days after the engagement ends, whichever is sooner.

Messaging: if you contact the support desk by WhatsApp, your message reaches us through Meta and our desk provider, Zoho. Phone calls to the desk are handled by our telephony provider.

Technical logs: our hosting provider records standard server logs (IP address, user agent, requested pages) for security and reliability.

We do not run advertising trackers, we do not profile you, and we do not sell personal data.

3. How we use it and why we may

To respond to your enquiry, send you the assessment quote or report you asked for, and manage our business relationship (legitimate interests, and steps prior to entering a contract).

To take payment, deliver services you have bought, and keep proper business records (performance of a contract; legal obligation for accounting records).

To operate and secure the website, checkout, and client portal (legitimate interests; contractual necessity for portal users).

To meet legal and regulatory obligations where they apply to us.

We do not use your data for automated decisions with legal or similarly significant effects.

4. AI features

Where AI assists our services, the ask-tecno assistant, and machine-speed scanning within assessments, a named person remains responsible for the output: an assessor signs every score, and tecno hands off to a human for anything it cannot or should not decide.

Conversation content sent to tecno is used to answer you and to route your enquiry. It is processed by our AI providers under commercial terms and is not used by us to train AI models.

5. Who we share it with

Service providers acting under contract, each processing data only on our instructions: Vercel (website and application hosting, London region), Neon (database, London region), Cloudflare R2 (file delivery, Western Europe), Clerk (client portal sign-in and organisation directory), Stripe (payments), Resend (email delivery), Zoho (support desk and ticketing, including WhatsApp conversations), Meta (WhatsApp message transport, where you choose that channel), Microsoft 365 (our email and calendars), Cal.com (call bookings), Pipedrive (our sales records), Xero (invoicing and accounting), GitHub (read-only access to repositories you connect, the app that grants it, and the private snapshot we hold during an assessment), CodeRabbit (automated code review of assessment snapshots), Anthropic (the ask tecno assistant), ElevenLabs (voice for ask tecno), Sentry (error reporting) and UptimeRobot (uptime monitoring).

Professional advisers (accountants, insurers, lawyers) where necessary, and authorities where the law requires it.

We do not sell or rent personal data. A current subprocessor list is available on request.

6. International transfers

Some providers process data outside the UK/EEA (for example in the United States). Where they do, we rely on the UK International Data Transfer Agreement/Addendum, EU Standard Contractual Clauses, or an adequacy decision, as applicable.

7. Retention

Records of purchases, invoices and the documents you accepted at checkout are kept for six years after the end of the financial year they fall in, because tax law requires it.

Assessment reports, delivery records and support tickets are kept for the life of your engagement and for six years afterwards, so that we can answer questions about work we signed.

Repository snapshots taken for an assessment are deleted when the report is signed, or thirty days after the engagement ends, whichever is sooner. The automated review findings are kept with the report.

Enquiry, qualifier and chat data is kept while we are corresponding with you and reviewed at 24 months. We are introducing scheduled deletion so this happens automatically; until it is live, we delete this data when you ask us to, or when we review the account.

You can ask us to delete your personal data at any time, and we complete it within 30 days unless the law requires us to keep it (for example accounting records). Email privacy@tecnov8.com.

8. Your rights (UK GDPR / EU GDPR)

You may request access, correction, deletion, restriction, or portability of your personal data, and you may object to processing based on legitimate interests. Email privacy@tecnov8.com. We respond within one month.

You may complain to the Information Commissioner's Office (ico.org.uk) or, in the EU, your local supervisory authority.

9. California residents (CCPA/CPRA)

You have the right to know, delete, and correct personal information we hold, and to non-discrimination for exercising these rights. We do not sell or share personal information as defined by the CCPA. Submit requests to privacy@tecnov8.com.

10. Cookies

This site sets only strictly necessary cookies: cookies set by Clerk to keep you signed in to the client portal, a session cookie for older portal accounts, a basket cookie if you add products to one, and a temporary access cookie while the site is in private review. Because none of them require consent under UK PECR, there is no cookie banner.

Stripe sets its own cookies on its checkout pages, governed by Stripe's privacy policy. We set no advertising, analytics, or cross-site tracking cookies.

11. Changes

We will post any changes to this policy on this page and update the date below. Material changes affecting portal users or subscribers will be notified by email.