Privacy Policy

1. Who We Are

TinkerHive (“TinkerHive”, “we”, “us”, or “our”) is a software engineering and DevOps firm founded and operated by Teddy Abera, based in Addis Ababa, Ethiopia. We provide software development, cloud infrastructure, DevOps, AI engineering, and managed operations services to clients worldwide.

Contact: For all privacy-related inquiries, email us at privacy@tinkerhive.dev.

2. What Data We Collect

We collect only the minimum personal data necessary to respond to your enquiries and deliver our services.

2.1 Data you provide directly

When you submit our contact form or send us an email, we collect:

• Full name
• Email address
• Company name (optional)
• Project description or message content
• Budget range (if provided)

2.2 Data collected automatically

We do not run our own analytics or tracking scripts. However, our hosting provider (Vercel) and third-party font/CDN services may collect standard server log data such as IP address, browser type, referring URL, and request timestamps. This data is used solely for security and operational purposes.

2.3 Cookies

This website does not set any first-party tracking or advertising cookies. Vercel may set strictly necessary session cookies for infrastructure purposes. We do not use Google Analytics, Facebook Pixel, or any behavioural advertising technologies.

3. How We Use Your Data

We use the personal data you submit solely for:

• Responding to your enquiry or project request
• Scoping and delivering the services you have engaged us for
• Sending you project updates and invoices (only for active clients)
• Complying with our legal obligations

We do not sell, rent, or trade your personal data to any third party. We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing (GDPR)

For individuals in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal bases are:

• Legitimate interests — responding to business enquiries you have initiated
• Contract performance — processing data necessary to fulfil a service agreement
• Legal obligation — retaining financial records as required by law
• Consent — where we explicitly ask for it (e.g., a future newsletter sign-up)

5. Third-Party Processors

We use the following sub-processors. Each processes your data only as necessary to provide their service:

SCCs = Standard Contractual Clauses (EU Commission approved mechanism for international transfers).

6. Data Retention

We retain contact form submissions and email correspondence for up to 3 years from the date of last contact, or for the duration of any active engagement plus 2 years for dispute resolution purposes. Financial records (invoices, contracts) are retained for 7 years to comply with legal obligations.

After the applicable retention period, data is securely deleted or anonymised.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion (“right to be forgotten”)
• Portability — receive your data in a machine-readable format
• Restriction — request that we limit our processing of your data
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is consent-based, withdraw at any time

To exercise any of these rights, email privacy@tinkerhive.dev with the subject line “Data Rights Request”. We will respond within 30 days.

If you are in the EU/EEA and believe we have handled your data unlawfully, you have the right to lodge a complaint with your local supervisory authority (e.g., your national Data Protection Authority).

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include encrypted communications (TLS), access controls limited to authorised personnel only, and secure credential management.

No method of electronic transmission or storage is 100% secure. In the event of a data breach that risks your rights and freedoms, we will notify you and the relevant supervisory authority within the legally required timeframe.

9. Children's Privacy

Our services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 16. If you believe a child has submitted data to us, contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “Last updated” date at the top of this page will reflect the most recent revision. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

For any questions about this Privacy Policy or how we handle your data: