Enterprise Data Privacy Policy

1. Purpose & Scope

Tessuary operates as a data controller for commercial intake inquiries and a data processor for enterprise tenant deployments. This policy governs data collected on our public web surfaces (https://tessuary.com) and in our automated intake pipeline.

2. Data Minimization & Salted Anonymization

We adhere strictly to data minimization principles under GDPR Article 5. Client IP addresses are never persisted in plaintext; they are hashed immediately in memory using SHA-256 with a private rotating salt. We collect no Protected Health Information (PHI), financial account numbers, or national identification numbers.

3. Retention Window & Right to Erasure (GDPR Art. 17)

Commercial inquiry records are retained for a maximum of 24 months for evaluation and compliance replayability. Data subjects may request complete erasure by emailing privacy@tessuary.com. Upon request, personal identifiers are permanently scrubbed from active tables and a cryptographic tombstone record is appended to the audit ledger.

4. Customer Source Code Sovereignty

In all enterprise deployments (Tessuary Enclave and Tessuary Sovereign), customer source code, ASTs, and repository contents remain entirely within the customer security perimeter. No customer code is ever used to train foundation models or retained by Tessuary.

5. Third-Party Processors

Details submitted through the briefing request form are shared with the processors below and with no others. This list is the same list the consent text on the form enumerates; both are generated from one versioned registry entry, so they cannot disagree.

• Business-data provider. Company-level information, such as headcount band and industry, is verified against a commercial business-data source. Only company identifiers are sent. Lawful basis: consent, and legitimate interest in assessing an enterprise enquiry.
• Customer relationship management system. The request is recorded so it can be progressed and answered. Lawful basis: consent, and legitimate interest in responding to an enquiry we were asked to respond to.
• Internal notification tooling. A message is sent to the evaluation team so a qualified enquiry is picked up promptly. Lawful basis: legitimate interest.

We do not sell your data and we do not use it for advertising. Analytics and marketing cookies are governed separately by the cookie banner, and declining them has no effect on whether you can submit the form or on how your enquiry is handled.

6. Withdrawing Consent

You may withdraw consent at any time. Send the email address you submitted to privacy@tessuary.com, or POST it to /api/consent/withdraw. We record the withdrawal against the exact consent version you agreed to, append it to the immutable audit trail, and link it to the erasure workflow. We complete erasure within 30 days.

Cookie preferences are separate and can be changed at any time from the cookie preferences control on any page. Withdrawing consent to be contacted does not delete the evidence that consent was given and then withdrawn: that record is what makes the withdrawal itself auditable.

7. Current Consent Text

consent-v2.0.0 · SHA-256 adf1deeae8cb626de1e2d3dc98e4ea2022a7da10281d59c7a60aaf8767a0959d

I confirm I am submitting on behalf of my organisation and consent to Tessuary processing these details to evaluate and respond to my request. Company-level information may be verified with a business-data provider, my request will be recorded in our customer relationship management system, and an internal notification may be sent to our evaluation team. We will not sell your data and will not use it for advertising.

This is the exact wording presented on the briefing request form, reproduced from the same registry entry the server persists with every submission. Correcting it creates a new version; an existing version is never edited.