TektonAI

Privacy Policy

How TektonAI collects, uses, retains and discloses information on the website and in the hosted service.

Version 2026-10-19.4 · Last updated: October 19, 2026

This English version is provided for convenience. The French version prevails in case of any difference.

This Privacy Policy explains how TektonAI, a product operated by Tektonai.app ("TektonAI", "we", "us" or "our"), handles information when you use our website, our hosted service at mcp.tektonai.app, and the related APIs and support channels (collectively, the "Services").

You accept this policy by ticking the box provided before sending the price request form, and by signing in to your TektonAI account. This acceptance is separate from that of the Terms of Use. We record the version accepted, shown at the top of this page, and the date of your acceptance.

When you use TektonAI, we process and store the information described below in order to authenticate users, manage organizations, connect integrations, enforce policies, measure usage and operate the service.

For the purposes of this Privacy Policy, the business responsible for the Services is Tektonai.app, Montréal, Québec, Canada.

1. Information we collect

Account and profile information

When you sign in, we receive information about your account from our authentication provider, including your name, email address, avatar or profile photo URL, account identifier, session identifiers and information about your membership in organizations.

Workspace and service configuration

We collect and store the information needed to provide the Services, including:

  • organization and workspace names;
  • member and role information;
  • integration metadata;
  • tool catalogues, schemas, policies and related configuration;
  • secret metadata and connection settings;
  • billing plan, members and execution usage records.

Credentials, secrets and connected service data

If you connect third-party tools or APIs, you may provide API keys, OAuth tokens, secrets, endpoint URLs and related configuration. We process this information to authenticate requests and to run the integrations you have configured. We may also process content that passes through these integrations when you ask TektonAI to make a call, run code or start a workflow.

Google Workspace API data

If you connect a Google Workspace service, TektonAI uses the permissions you grant to perform the actions you request through that integration. Depending on the service and the permissions you choose, this may include viewing or modifying the following: Google Calendar calendars, events and sharing rules; Gmail messages, drafts, threads, attachments, labels and settings; Google Drive files and folders; Docs documents; Sheets spreadsheets; Slides presentations; Forms forms and their responses; contacts, profile fields, other contacts and a Workspace directory available in Contacts; Tasks; Meet spaces, participants, recordings and transcripts; Photos media created by the application or selected by the user; Search Console sites, sitemaps, indexed URLs and performance data; or any other Google content made accessible by the service you connect. For Gmail, this may include permanently deleting messages or threads, only when you explicitly request this irreversible action.

TektonAI stores OAuth credentials and connection metadata so that the integration keeps working. It processes Google Workspace content only while running the tool calls you request and passing their results to you or to the agent you have tasked with making the call. This content may appear in the resulting agent session, or in another service when you explicitly ask TektonAI to send it there.

We do not use Google Workspace API data for advertising or to train generalized artificial intelligence or machine learning models. We disclose it only to the extent necessary to provide the integration requested by the user, to operate and secure the Services, to comply with the law, or otherwise as described in this Policy with the user's consent.

TektonAI's use and transfer of information received from Google Workspace APIs complies with Google'sGoogle API Services User Data Policy, including its Limited Use requirements.

You can end TektonAI's access by removing the Google connection in TektonAI or by revoking TektonAI's access in your Google account permissions. To request deletion of your TektonAI account, stored OAuth credentials, connection metadata or other personal information, emailinfo@tektonai.app.

Information provided on the website and support communications

If you email us or otherwise contact us, we collect the information you provide in order to respond to you and improve the Services.

Usage, device and diagnostic information

We automatically collect technical information such as IP address, browser and device data, request metadata, session cookies, product interactions, operational logs, crash reports, traces and other diagnostic data needed to secure, maintain and improve the Services.

Price requests

When you fill in the price request form, we collect your name, your company's name, your email, your phone number if given, your trade, your team size, the tools you are interested in and your message. We record them in a customer profile at Stripe, our payment and billing provider, to prepare your price and, if you become a customer, your subscription. They are also emailed to our team. They are not kept on the website itself. You can ask for their deletion at any time (section 9). Before sending, you tick two separate boxes, one to accept the Terms of Use and one to accept this policy; the version of each and the date of your acceptance are recorded with your request.

Payment and subscription information

If you subscribe to a paid plan, we and our billing providers process subscription status, selected plans, usage meters, invoices and a limited amount of payment-related metadata. Full payment card data is generally processed by our payment partners, not by TektonAI.

2. How we use information

We use the information we collect to:

  • provide, operate, secure and support the Services;
  • authenticate users and maintain sessions;
  • create and manage organizations, their members and permissions;
  • connect to third-party integrations and perform the actions requested by users;
  • store and retrieve tool catalogues, policies, secrets and workspace settings;
  • measure usage, manage subscriptions and administer billing;
  • monitor performance, debug issues, prevent abuse and investigate incidents;
  • communicate with you about the Services, updates and support requests;
  • comply with our legal obligations and enforce our agreements.

3. Legal bases for processing

Where data protection laws such as the GDPR or the UK GDPR apply, we generally process personal data because it is necessary to perform our contract with you, because we have a legitimate interest in operating and securing the Services, because we must comply with legal obligations, or because you have given your consent where consent is required.

4. Disclosure of information

We may disclose information in the following situations:

  • to service providers that help us operate the Services, including hosting, authentication, billing, logging, analytics, error monitoring and customer support providers;
  • to third-party integrations, APIs and tools, when you ask TektonAI to connect to or act on those services;
  • to your organization's administrators and your authorized teammates, in accordance with your workspace permissions;
  • in connection with a merger, financing, acquisition, reorganization or sale of assets;
  • where required by law, or to protect rights or safety, investigate misuse or enforce our terms.

Our processors and infrastructure providers include Vercel (website hosting) and OVHcloud (hosting of the Services and data, Beauharnois data centre, Québec), Stripe (payment and billing), Cloudflare (DNS), Google Workspace (receiving emails sent to info@tektonai.app), SMTP2GO (sending the price request form's emails and account emails, such as password resets, from info@tektonai.app: email address, name and link), Anthropic (Claude) and Google (the operator's internal assistant, see below). Our providers may change as the Services evolve.

Operator's internal assistant (Google Vertex AI)

The TektonAI team administers the platform with an AI assistant built into its console, powered by the Vertex AI service of Google LLC, an American company. Only TektonAI administrators have access to it; our clients do not use it. To answer a question from our team, this assistant may receive a client company's name, the name, email, role and trade of its members, invitations, billing status and service usage. It never receives passwords or connection credentials, nor the data of your tools (inventories, plans, logs).

This information is processed in Montréal, Québec: we use Google's Montréal region, where processing stays in Canada. Google does not use this data to train its models, and request caching is turned off. A request flagged for abuse may be kept by Google for up to 90 days, in the same region. On our side, the assistant keeps no conversation once the tab is closed, and our logs do not record the content of messages. Every change the assistant proposes waits for confirmation by a member of our team. We assessed this processing under Québec's Law 25 before putting it in place.

5. Cookies and similar technologies

On the tektonai.app website, we measure traffic with Vercel Web Analytics, only if you accept it in the banner shown on your first visit. This tool does not use cookies and does not track you from one site to another: it counts page views and a few actions, such as opening the price request form. Your choice is stored in your browser. You can change it at any time with the "Cookies" link at the bottom of every page.

We use cookies and similar technologies for essential functions such as authentication, session continuity and security. For example, TektonAI currently uses an HTTP-only session cookie to keep users signed in. We may also use cookies or comparable storage for preferences, security, performance or diagnostics.

6. Data retention

We retain information for as long as reasonably necessary to provide the Services, maintain your account and organization, meet our contractual commitments, resolve disputes, enforce agreements and comply with our legal obligations. Retention periods vary depending on the type of information, the sensitivity of the data and the need to keep the information for security, billing, tax, audit or backup purposes.

Some data may remain in backups or logs for a limited period after deletion. Session cookies may persist until they expire or are cleared. If you need help with a deletion, contact us using the contact details below.

The traceability records of our tools are evidence of what was done, by whom and when: the inventory activity log, with the name of the employee who made each change, and the revision history of plans, with the name of their author. They are kept for 10 years. We do not delete them on request, when an employee leaves or when an account ends. The activity log cannot be edited or erased by our tools. Every day, a copy of these records is archived in Québec, locked against deletion for 10 years. When that period ends, they are destroyed or anonymized.

The data of our tools is kept for up to 10 years, then destroyed: the inventory history (movements, closed rental contracts, slips, counts, imports and log), plans, their files and verification references, and their archives. Current part records and stock remain as long as your company uses them. Backup copies are kept for 30 days. Once its 10 years have passed, a document checked through its QR code answers "unknown reference".

7. Security

We apply reasonable administrative, technical and organizational safeguards designed to protect information against unauthorized access, loss, misuse and alteration. These measures include access controls, secret management processes, encryption in transit and monitoring. No method of transmission or storage is completely secure; we therefore cannot guarantee absolute security.

8. Where your data is hosted

Your data is hosted in Québec. The hosted service at mcp.tektonai.app, accounts, organizations, credentials, files produced by our tools, databases and their backups are stored on servers located in a data centre in Beauharnois, Québec.

We keep your data in Québec, or route it through Québec, whenever that costs nothing more. We use a service located outside Québec only when it saves us money, and we say so below. Only the following are processed outside the Beauharnois data centre:

  • hosting of the tektonai.app website, provided by Vercel;
  • connections to mcp.tektonai.app passing through Cloudflare's network, which protects the service and encrypts its traffic;
  • website audience measurement (Vercel Web Analytics), only if you accept it, and some monitoring tools;
  • subscription payments and price request profiles, at Stripe;
  • email: receiving messages sent to info@tektonai.app, through Google Workspace, and sending the price request form's emails and account emails, such as password resets, through SMTP2GO;
  • your conversations with your AI assistant: what you write to Claude is processed by Anthropic under its own terms, and the same applies to any other assistant you choose to connect. This processing depends on the assistant you choose. TektonAI receives only what your assistant passes to our tools.
  • administration information sent to our team's internal assistant, processed by Google in Montréal, Québec (see section 4).

For these items, information may be processed elsewhere in Canada or abroad. Where required by law, including Québec's Act respecting the protection of personal information in the private sector, we assess these disclosures and put appropriate safeguards in place.

9. Your rights (Québec and Canada)

We handle personal information in accordance with Québec's Act respecting the protection of personal information in the private sector (as amended by Québec's Law 25) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). You may at any time:

  • request access to the personal information we hold about you;
  • have it corrected if it is inaccurate, incomplete or equivocal;
  • withdraw your consent to a use or disclosure, subject to the law;
  • obtain the information you provided to us in a structured, commonly used technological format (portability);
  • ask us to stop disseminating a piece of information or providing access to it through a hyperlink;
  • find out whether a decision about you was made exclusively through automated processing.

To exercise these rights or request the deletion of your account, write to the person in charge of the protection of personal information (section 10). We reply in writing within 30 days of receiving the request. You can also manage some information directly in the product, such as organizations, members and integrations.

A deletion request does not apply to the traceability records kept for 10 years (section 6): your name stays in them until the end of that period.

We do not sell personal information and we do not use it for targeted advertising. The website's audience measurement tools are off by default and turn on only with your consent (section 5).

The Services are intended for businesses and are not directed at persons under 14. If you believe a minor has provided us with personal information, contact us so that we can delete it.

10. Person in charge of the protection of personal information

The role of person in charge of the protection of personal information is held by TektonAI's management, namely the person with the highest authority in the business. You can reach this person atinfo@tektonai.app, with the subject line "Personal information".

If a confidentiality incident presents a risk of serious injury, we promptly notify the Commission d'accès à l'information du Québec (CAI), the Office of the Privacy Commissioner of Canada (OPC) and the persons concerned, as required by law. We keep a register of these incidents.

If you are not satisfied with our response, you may file a complaint with theCommission d'accès à l'information du Québec or theOffice of the Privacy Commissioner of Canada.

11. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version on this page and change the "last updated" date shown above. If you continue to use the Services after an update takes effect, the updated policy will apply going forward.

12. Contact information

Questions or requests about this Privacy Policy may be sent to Tektonai.app atinfo@tektonai.app.

Tektonai.app
Montréal, Québec, Canada

Request a price

Make your list. We will reply with a price for your company.

1 What I want
2 What I am looking for

A job you would like to hand to an AI tool. One line per need.

    3 Who I am

    We use this information only to answer you and prepare your price. We record it in a customer profile at Stripe, our billing provider, and email it to our team. See our privacy policy.