Privacy Policy

At Tinkerblox, we take your privacy seriously. Please read this Privacy Policy to learn how we treat your personal data. By using or accessing our website at tinkerblox.ai (the "Site") in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent to our collection, use, and handling of your information as described in this Privacy Policy.

This Privacy Policy applies to the Tinkerblox website only. It does not govern personal data processed through Tinkerblox products or services on behalf of customers, which is addressed separately in applicable service agreements.

We may update this Privacy Policy from time to time. When we do, we will post a notice on the Site or notify you by email where required. Your continued use of the Site after any changes constitutes your acceptance of the updated Policy.

What This Privacy Policy Covers

We do not sell personal data. We do not engage in cross-context behavioral advertising, data enrichment, or sharing of personal data with advertising vendors or social networks. Analytics data is used solely to understand and improve Site performance.

Categories of Sources of Personal Data

We collect personal data about you from the following sources:

1. Directly From You

• When you submit an inquiry through our contact form

• When you submit a PoC or product request

• When you apply for a role through our careers section

• When you send us an email or otherwise contact us directly

We do not collect personal data automatically through cookies, tracking pixels, analytics scripts, or any other passive collection technology.

Our Purposes for Collecting Personal Data

1. Responding to Inquiries and Providing Information

• Responding to questions, product requests, and PoC inquiries you submit

• Evaluating technical fit and business opportunities

• Providing support and follow-up communications related to your inquiry

2. Recruitment and Hiring

• Evaluating candidates for open roles at Tinkerblox

• Managing the recruitment process and communicating with applicants

• Complying with applicable employment laws

3. Meeting Legal Requirements and Enforcing Legal Terms

• Fulfilling legal obligations under applicable law or regulation

• Protecting the rights, property, or safety of Tinkerblox, our users, or the public

• Detecting, preventing, or addressing fraud, security vulnerabilities, or violations of our terms

We will not collect additional categories of personal data or use the personal data we have collected for materially different, unrelated, or incompatible purposes without providing you notice.

How We Share or Disclose Your Personal Data

We disclose personal data only to the following limited categories of parties:

Service Providers

We may engage third-party service providers who assist us in operating our Site and business — for example, email infrastructure or cloud hosting providers. These providers process data only on our behalf, under strict confidentiality obligations, and may not use your data for their own purposes.

Analytics Vendors

We use third-party analytics tools to analyze how visitors use our Site. These tools may collect and process certain usage and device data as described in the Cookies section above. Analytics data is used solely for Site performance analysis — not for advertising or cross-site tracking. Our analytics providers process data only as directed by us and under confidentiality obligations.

Legal Obligations

We may share personal data where required by applicable law, regulation, legal process, or governmental request — for example, to comply with a court order or regulatory inquiry. Where permitted by law, we will notify you before disclosing.

Business Transfers

All personal data we collect may be transferred to a third party in the event of a merger, acquisition, bankruptcy, or other transaction in which that third party assumes control of our business. We will make reasonable efforts to notify you before your information becomes subject to different privacy policies and practices.

Data That Is Not Personal Data

We may create aggregated, de-identified, or anonymized data from the personal data we collect by removing information that makes data personally identifiable. We may use and share such data for lawful business purposes, including to analyze and improve our Site, provided we will not share such data in a manner that could identify you.

Cookies and Tracking Technologies

This Site uses third-party analytics tools that use cookies — small text files placed on your device — to help us understand how visitors interact with our Site. The information generated by these cookies (including your IP address) may be transmitted to and stored by our analytics provider.

We use analytics tools solely to understand Site performance — for example, which pages are visited, how long visitors spend on the Site, and where traffic originates. We do not use analytics data for advertising, retargeting, or any purpose beyond understanding Site usage.

Our analytics providers operate under their own privacy policies and data processing agreements with us.

Types of Cookies We Use

• Performance / Analytics Cookies — cookies placed by our analytics tools that collect non-personally identifiable information about how visitors use our Site. These help us measure and improve Site performance.

We do not use essential, functional, or advertising/retargeting cookies. We do not use any cookies beyond those placed by our analytics tools.

Managing Your Cookie Preferences

You may opt out of analytics tracking at any time by:

• Using opt-out tools provided by your browser or our analytics provider

• Adjusting your browser settings to block or delete cookies, although this may affect Site functionality

Please note that the Site does not currently respond to "Do Not Track" browser signals.

Data Security

We seek to protect your personal data from unauthorized access, use, and disclosure using appropriate administrative, technical, and organizational security measures based on the type of data and how we process it. These measures include:

• Access controls limiting who within Tinkerblox can access submitted data

• Encrypted data transmission via HTTPS

• Secure storage practices consistent with industry standards

Although we work to protect your data, please be aware that no method of transmitting data over the internet or storing data is completely secure. In the event of a data breach affecting your personal data, we will notify you as required by applicable law.

Data Retention

We retain personal data about you for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law. When establishing retention periods, we consider:

• The nature and sensitivity of the data

• The purpose for which it was collected

• Whether an ongoing business relationship exists

• Applicable legal or regulatory requirements

In practice:

• Contact and inquiry submissions are retained for no longer than 24 months from last contact, unless an ongoing business relationship warrants longer retention

• Careers submissions are retained for a reasonable period following the close of a recruitment process, consistent with applicable employment laws

• Where no ongoing relationship exists, data is deleted or anonymized on a regular basis

To request deletion of your data, contact us at privacy@tinkerblox.ai. We will process your request promptly and confirm when complete. We may further retain information in anonymous or aggregated form where that information does not identify you personally.

Personal Data of Children

Our Site is directed exclusively to business and professional audiences. We do not knowingly collect or solicit personal data from individuals under the age of 18. If you are under 18, please do not submit any personal data through this Site.

If we learn that we have collected personal data from a person under 18, we will delete it as quickly as possible. If you believe a child under 18 may have provided personal data to us, please contact us at privacy@tinkerblox.ai.

U.S. State Resident Rights

If you are a U.S. resident, you may have the following rights with respect to your personal data, depending on the laws applicable in your state. We will respond to valid requests within 45 days of receipt, or within the timeline required by applicable law.

Access / Confirmation

You may have the right to request confirmation of whether we are processing your personal data, and to access the specific personal data we hold about you.

Correction

You may have the right to correct inaccuracies in your personal data, to the extent appropriate given the nature of the data and our purposes for processing it.

Deletion

You may have the right to request that we delete personal data we have collected about you. Certain exceptions may apply — for example, where retention is required to comply with a legal obligation or resolve a dispute.

Portability

You may have the right to request a copy of your personal data in a machine-readable format that allows you to transmit the data without hindrance, to the extent technically feasible.

Opt-Out of Sale

We do not sell personal data. We do not engage in cross-context behavioral advertising or share personal data with third parties in a manner that constitutes a sale under any applicable U.S. state privacy law. Analytics data is used solely for Site performance measurement and does not constitute a sale of personal data.

No Discrimination

You have the right not to receive discriminatory treatment for exercising any of your privacy rights. We will not deny you access to our Site, charge different prices, or provide a lower quality of service because you exercised any right described in this section.

California Residents — Additional Rights (CCPA/CPRA)

If you are a California resident, you have the additional rights described above, as well as the right to:

• Know the categories and specific pieces of personal data we have collected about you over the past 12 months

• Know the categories of sources from which that data was collected

• Know the business or commercial purpose for collecting that data

• Know the categories of third parties with whom we have disclosed that data

• Lodge a complaint with the California Attorney General if your appeal is denied

California's Shine the Light law (Civil Code § 1798.83) permits California residents to request information about our disclosure of personal data to third parties for direct marketing purposes. We do not disclose personal data to third parties for their direct marketing purposes.

Exercising Your Rights

To exercise any of the rights described above, please contact us at:

• Email: privacy@tinkerblox.ai

• Website: www.tinkerblox.ai/contact

You may also authorize an agent to make a request on your behalf. We may require proof of authorization and verification of your identity. We will respond to valid requests within 45 days or as otherwise required by applicable law.

Third-Party Links and Services

Our Site may contain links to third-party websites, including LinkedIn and partner or customer sites. This Privacy Policy does not apply to those sites. Tinkerblox is not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you access. Links to third-party services do not constitute an endorsement of their privacy or security practices.

Changes to This Privacy Policy

We keep this Privacy Policy under regular review and may make changes to it from time to time to reflect changes in our practices, technology, or applicable law. Changes will be posted on the Site and this Privacy Policy will be updated with a new effective date. Material changes will be communicated prominently on the Site or by email where required.

If you use the Site after any changes to this Privacy Policy have been posted, that means you agree to all of the changes. Use of information we collect is subject to the Privacy Policy in effect at the time such information is collected.

Contact Information

If you have any questions or comments about this Privacy Policy, the ways in which we collect and use your personal data, or your choices and rights regarding such collection and use, please contact us at privacy@tinkerblox.ai