Privacy and Cookie Notice

We are Tessl AI Limited.

If you have any questions about this notice, including any requests to exercise your legal rights, please contact us at privacy@tessl.io. You can read more about Sharing Usage Data here.

What happens if we update this notice?

We may update this notice at any time. If we make significant changes to this notice, such as adding a new way we use your personal data, we will notify you by updating the date of this notice and posting it on our website.

Any changes to this notice will be effective as soon as we post the updated version (or a later date if we say this at the time of posting). In all cases, your use of our website and services after the effective date of any new notice indicates your acknowledging that the new notice applies to your use of our website and services.

This notice was last updated on 2 September 2025.

Data protection legislation requires us to have a "lawful basis" to collect and use your personal data. We've identified the lawful bases we rely on for each use in bold below.

• When you create your account we will collect your username (which may be your name), company name and email address to enter into a contract with you to use our services. We may then use this personal data for the ongoing provision of our services under our contract with you, including for issuing service messages and authenticating you as a user. Our lawful basis is contract.
• When you contact us with a query we will usually collect your name, email address and (if you contact us through our social channels) social media handle, because it’s in our legitimate interest to make sure we can properly respond to your query. Our lawful basis for routine queries is legitimate interests. Where we are facilitating your rights as a data subject, our lawful basis is legal obligation.
• To send you marketing information.
  • Where you have previously expressed an interest in our services or events (and not opted-out of marketing) we may use your name and email address to send you updates because it is in our legitimate interests to promote our other products and services we think you might be interested in. Our lawful basis for this approach to marketing is legitimate interests.
  • Where you have opted in via our website or another source to receive updates on our services, for example through our waitlist, we will process your name and email address to provide you with these updates. Our lawful basis for this approach to marketing is consent.

You can withdraw your consent to / opt-out of marketing at any time by contacting us at privacy@tessl.io or, where relevant, by following the unsubscribe link in any marketing communication you receive from us.

• When you use our website and consent to our use of cookies we may collect information about how you use our website by processing your:
  • device data: such as your device's operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state or geographic area; and
  • online activity data: such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to our website, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them.

We may use your personal data contained within this information to personalise our website (including remembering your preferences as you navigate), and to better understand how to improve our website and marketing communications. More details on the information we collect and how we do this is set out in our Cookie Notice below.

Our lawful basis is consent.

• When you give us feedback we may use your name, email address and role to contact you about your feedback, and to understand who is giving us feedback. We may use any personal data contained within your feedback for the improvement and development of our services. Our lawful basis is legitimate interests.
• When you attend one of our events or a third-party event we are co-hosting (including online webinars and other events), we will usually collect your name, email address and role. We collect this personal data because it’s in our legitimate interests to promote our business and to know who is attending our events. Our lawful basis is legitimate interests.
• When you use our services, we may view:
  1. device directory data which forms part of the path for which your project is installed and is required for the services to be provided;
  2. any data, prompts, queries, documents, files, content, or information provided, entered, or submitted by you for processing into (or used in connection with) our Service (Your Input)
  3. any tiles, code packages, document specifications created by you through the Service to enable your workflow development (Your Output); or
  4. any data which we derive from your use of our services,

which may include statistical data, aggregated data, audit logs, CLI client and version used, and general system parameters like OS type or version) for: the debugging, analysis (including diagnostics), development, adaptation, training (including machine learning), modification, support and operation of our services (Operational and Development Uses). This will be technical data that informs us how you use our services. Our lawful basis for the processing of any ancillary personal data that might be contained within this data which we use for the Operational and Development Uses is legitimate interests.

For more information on this, please see Sharing Usage Data

• When you apply for a job with us we may collect your name, contact details, recruitment information (e.g. right to work documentation and references), test results, qualifications, accreditations and any additional personal data we may receive from our recruitment partners. We will use your personal data to assess your suitability for our available roles. We do this to perform our contract obligations or to take steps at your request, before entering into a contract. Where we process your right to work documentation, we will do so to comply with our legal obligations. Our lawful basis may therefore be contract or legal obligation.
• If our business is sold. We process your personal data for this purpose because we have a legitimate interest to ensure our business can be continued by the buyer. If you object to our use of your personal data in this way, the buyer of our business may not be able to provide services to you. Our lawful basis is legitimate interests.
• For compliance and protection of our interests. We may process any of your personal data listed above to:
  • comply with laws, lawful requests, and legal process, such as to respond to requests from government authorities – our lawful basis will be legal obligation;
  • protect our, your or others' rights, privacy, security, safety or property (including by making and defending legal claims and protecting the security of our services) - our lawful basis will be legitimate interests;
  • audit our internal processes for compliance with legal and contractual requirements or our internal policies - our lawful basis will be legitimate interests;
  • enforce the terms and conditions that govern our website and services - our lawful basis will be legitimate interests; and
  • prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft - our lawful basis will be legitimate interests, or legal obligation where such processing is required by law.

We do not process your personal data as part of automated decision-making and/or profiling, which produces legal or similarly significant effects. We will let you know if that changes by updating this notice

• Affiliates, business partners, suppliers and subcontractors for the performance of the contract we enter into with them or you.
• Professional advisors such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.
• Promotional events and marketing organisations. We will always tell you before (usually on the event registration form) and you will be given the chance to opt-out before we do this.
• Regulators/ Authorities/ Enforcement Agencies if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect our, our customers' and others' rights. This includes exchanging your personal data with other companies and organisations for the purposes of fraud protection.
• Prospective buyers of our business under our legitimate interest to ensure our business can be continued by the buyer.

We store your data on third party servers which are based in the United States.

Individuals in the EU, EEA, Switzerland, and the UK

When working with third parties we may need to transfer your personal data outside of the EU, EEA, Switzerland and the UK. Whenever we transfer your personal data outside of these countries, we ensure it receives additional protection as required by law. To keep this notice as short and easy to understand as possible, we haven’t set out the specific circumstances when each of these protection measures are used. You can contact us at privacy@tessl.io for more information about this.

We will only retain your personal data for as long as we need it unless we are required to keep it for longer to comply with our legal, accounting or regulatory requirements.

In some circumstances we may carefully anonymise your personal data so that it can no longer be associated with you, and we may use this anonymised information indefinitely without notifying you. We use this anonymised information to improve the way we work and our services.

You have various other rights under applicable data protection laws, including the right to:

• access your personal data (also known as a “subject access request”);
• correct incomplete or inaccurate data we hold about you;
• ask us to erase the personal data we hold about you;
• ask us to restrict our handling of your personal data;
• ask us to transfer your personal data to a third party;
• object to how we are using your personal data; and
• withdraw your consent to us handling your personal data.

You also have the right to raise a complaint with us or your local data protection regulator. In the UK, this is the Information Commissioner's Office. If you are based in the EU you can find your relevant supervisory authority here.

Please keep in mind that privacy law is complicated, and these rights will not always be available to you all of the time.

Our website may contain links to third party websites, and other online services operated by third parties. In addition, our content may be built into web pages or other online services that are not associated with us. We do not control third parties' sites, and we are not responsible for their actions. We encourage you to read the privacy notices of the other sites you use to find out how they collect and use your personal data.

Cookie Notice

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also helps us make improvements.

A cookie is a small file of letters and numbers that we store on your browser or in your device's storage. We only use (and store) non-essential cookies if you provide your consent.

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our website.