PRIVACY POLICY

Tymko Tech

Last updated: October 15, 2026

This Privacy Policy describes how Tymko Tech (“Company”, “we”, “us”, or “our”) collects, uses, and protects your personal data when you use our website (www.tymko.tech) and services. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Portuguese data protection legislation.

By using our website and providing personal information, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

Tymko Tech
Rua Dr. José António Serrano, nº 10, 4 E
2745-803 Massamá, Queluz, Portugal
NIF: 331400146
Email: hello@tymko.tech

2. Data We Collect

2.1 Data You Provide

Name, email address, phone number (via contact forms)
Company name, job title, and business details
Any information you include in messages or inquiries

2.2 Data Collected Automatically

IP address and approximate geographic location
Browser type, operating system, and device information
Pages visited, time spent, and interaction patterns
Referral source and navigation paths

2.3 Data We Do Not Collect

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or sexual orientation. We do not engage in automated decision-making or profiling.

3. Purpose of Processing

We process your personal data for the following purposes:

To respond to your inquiries and provide requested services
To deliver and manage our IT consulting services
To provide access to our products, including the Syntra platform (syntra.tymko.tech)
To send relevant communications (with your consent)
To improve our website and services
To comply with legal obligations

4. Legal Basis for Processing

We process personal data based on:

Consent — where you have given explicit consent (e.g., newsletter signup, contact form)
Contractual necessity — where processing is required to fulfill a service agreement
Legitimate interests — to improve our services and protect our business, provided your rights are not overridden
Legal obligation — where required by applicable law

5. Data Sharing and Sub-Processors

We may share your data with the following categories of service providers:

Hosting providers (for website and infrastructure)
Communication tools (for email delivery)
Payment processors (for billing, where applicable)

We do not sell your personal data to third parties. Data may be transferred outside the EU/EEA only with appropriate safeguards (Standard Contractual Clauses or adequacy decisions).

6. Data Retention

We retain personal data only for as long as necessary:

Contact form submissions — up to 24 months after last interaction
Service-related data — for the duration of the contract plus any legally required period

When data is no longer needed, it is securely deleted or anonymized.

7. Cookies

This website does not use cookies or similar technologies that store information on your device.

7a. Website Analytics

We count visits with Umami, a privacy-focused analytics tool that runs on our own server; no data goes to third-party analytics providers. Umami does not use cookies and does not store IP addresses. It records the pages visited, the referring site, the browser, operating system, device type and country, and groups requests into anonymous sessions that cannot be linked to you or followed across days. We use these aggregated statistics to improve the website, on the basis of our legitimate interest. You can block the tracker in your browser at any time without losing any function of the website.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS/SSL), secure access controls, regular security assessments, and restricted access to personal data on a need-to-know basis.

9. Your Rights Under GDPR

As a data subject, you have the following rights:

Right of access — request a copy of your personal data
Right to rectification — request correction of inaccurate data
Right to erasure — request deletion of your data (“right to be forgotten”)
Right to restriction — request limitation of processing
Right to data portability — receive your data in a machine-readable format
Right to object — object to processing based on legitimate interests or direct marketing
Right to withdraw consent — at any time, without affecting prior lawful processing
Right to lodge a complaint — with the Portuguese data protection authority (CNPD) or your local supervisory authority

To exercise any of these rights, contact us at hello@tymko.tech. We will respond within 30 days.

10. Our Products

Tymko Tech develops and operates the Syntra platform (syntra.tymko.tech) — an AI-powered project management SaaS. The Syntra platform has its own Privacy Policy, Terms of Service, and Data Processing Agreement available at syntra.tymko.tech. If you use Syntra, please refer to those documents for information specific to that service.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Significant changes will be communicated via email or a prominent notice on our website.

12. Contact Us

For any questions or requests regarding this Privacy Policy or your personal data:

Email: hello@tymko.tech
Address: Rua Dr. José António Serrano, nº 10, 4 E, 2745-803 Massamá, Queluz, Portugal
Supervisory Authority: Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt