Privacy Policy

1. Who we are

TangentX LLC is a technology services company registered in Wyoming, United States, serving clients everywhere. We provide website development, custom software, automation systems, and related technology services to businesses.

2. What information we collect and why

• Name, email address, phone number: collected via contact and inquiry forms to respond to your enquiry
• Company name and job role: to understand your business context
• Website usage data: via Vercel Web Analytics, which is cookieless and reports aggregated visitor statistics without identifying individual visitors. It runs only if you accept analytics in our cookie banner.
• Your cookie and analytics preference: stored in your browser so we don’t ask on every visit (see our Cookie Policy)
• Payment information: if you pay an invoice by card, it is processed entirely by Stripe Inc. We never see, handle, or store your card details
• IP address: for security and fraud prevention, and as part of the consent record for our forms
• Consent records: when you submit our contact form we record the time, your IP address, the version of our Terms you agreed to, and whether you opted in to marketing email
• Newsletter email address: only when you explicitly opt in

3. How we use your information

• To respond to enquiries and deliver contracted services
• To send service-related updates relevant to your active project or account
• To send our newsletter, The Operator (only with your explicit prior consent)
• To improve our website based on aggregated, non-identifying usage data
• To process payments through Stripe
• We do not sell your data to any third party, ever
• We do not share your data with advertisers

4. Who we share your information with

• Vercel Inc: website hosting and cookieless website analytics
• Resend (our email service provider): delivery of form notifications to our team, and newsletter delivery to subscribers only
• Stripe Inc: payment processing only, where you pay an invoice through Stripe
• No other third parties receive your personal data

5. Your rights

Under applicable privacy law, including GDPR (EU/UK), CCPA (California), and PIPEDA (Canada), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Withdraw consent for marketing communications at any time
• Receive a portable copy of your data
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email hello@tangentxtech.comwith subject line “Privacy Request”. We will respond within 30 days.

6. Data retention

• Contact enquiry data, including the associated consent record: 3 years from last contact
• Active client project data: 7 years (legal and tax record requirements)
• Newsletter subscriber data: Until unsubscribed, then deleted within 90 days
• Website analytics data: held by Vercel in aggregated form only; it does not identify individual visitors
• Payment transaction records: 7 years (IRS and financial record requirements)

7. Cookies

See our full Cookie Policy at tangentxtech.com/cookie-policy.

8. Data security

All data transmitted to and from tangentxtech.com is encrypted using TLS/HTTPS. We do not store payment card data. Access to client project data is restricted to team members who require it to deliver your engagement. We maintain reasonable and appropriate technical and organisational security measures.

9. Data location

Our primary data infrastructure is hosted in North America. We do not transfer personal data outside of North America without appropriate safeguards in place.

10. Healthcare data notice

If you are a healthcare provider and engage TangentX to build systems through which Protected Health Information (PHI) may flow, please disclose this before work begins.

Whether TangentX qualifies as a HIPAA Business Associate depends on whether PHI is created, received, maintained, or transmitted through the systems we build for you. As a practical rule:

• If the system we build for you will handle, store, or transmit patient data in any form, a BAA is required before work begins.
• If the system is a general business website, marketing page, or non-clinical tool with no patient data flowing through it, a BAA is likely not required.

It is the healthcare client’s sole responsibility to make this determination with their compliance officer or legal counsel before engaging TangentX. TangentX will execute a BAA for any engagement where one is legally required.

Failure to disclose that PHI will flow through a system TangentX builds for you releases TangentX from liability for any resulting HIPAA violation.

We do not provide legal or compliance advice. Please consult a qualified compliance attorney regarding your obligations.

11. Children

Our services are intended for business use by adults aged 18 and over. We do not knowingly collect personal data from individuals under 18.

12. Changes to this policy

We will notify active clients and newsletter subscribers by email if we make material changes to this Privacy Policy. Continued use of our website or services after notice constitutes acceptance of the updated policy.

13. Contact

For all privacy enquiries: hello@tangentxtech.com

TangentX LLC | 30 N Gould St Ste N | Sheridan, WY 82801 | United States