Privacy policy
Last updated: 4 November 2026
This site, tiomsu.com, is the landing page for Tiomsu, a workspace for audit firms. This policy explains what personal data we handle when you visit it or request an invite, and what your rights are. We keep it short because we do very little.
Who is responsible
Prograils Sp. z o.o., Sczanieckiej 9a/9, 60-215 Poznań, Poland (“Tiomsu”, “we”) is the controller of your personal data. Contact: privacy@tiomsu.com.
What we collect, and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Work email, firm name and (optionally) your role, plus the time of your request, when you submit the invite form | To reply to your request, show you the product and run the private beta with you | Your consent, given by ticking the box on the form (Art. 6(1)(a)). You can withdraw it at any time. |
| Technical data: IP address and browser signals, processed by Cloudflare Turnstile when the form is shown and submitted | To tell humans from bots and keep the form free of spam | Our legitimate interest in protecting the site (Art. 6(1)(f)) |
| Standard server logs kept by Cloudflare (IP address, request time, page requested) | To deliver the site securely and fix problems | Our legitimate interest in running the site securely (Art. 6(1)(f)) |
We do not use analytics, advertising or tracking cookies, and this site sets no cookies. Fonts are served from this site, not from a third party. We do not sell your data, and we do not make automated decisions about you.
Who receives your data
- Cloudflare, Inc. hosts the site, runs the form handler and provides Turnstile. It may process data in the United States; transfers rely on the EU–US Data Privacy Framework and/or standard contractual clauses.
- Mailjet (Mailjet SAS, France) sends us a notification email when you submit the form and stores your details in our contact list.
Both act as our processors. We do not share your data with anyone else, except where the law requires it.
How long we keep it
If we start working together, we keep your details for as long as the relationship lasts. If we don't, we delete your request within 12 months. You can ask us to delete it earlier at any time.
Your rights
You can ask us for access to your data, to correct it, to delete it, to restrict or object to its processing, or to receive it in a portable format. You can withdraw your consent at any time, which does not affect what we did before. To use any of these rights, write to privacy@tiomsu.com. You also have the right to complain to your local data protection authority; in Poland this is the President of the Personal Data Protection Office (UODO), uodo.gov.pl.
Changes
If we change this policy, we will update the date above.