Privacy.
What this portal keeps about you, why, and for how long. It is run by STEFAN TEI ENTERPRISES S.R.L. (Tiliaris). Questions go to stefan@tiliaris.io.
What we keep
| What | Whose | Why | How long |
|---|---|---|---|
| Your work email | Leaders, and team members who sign in | To sign you in and to email you | Team members: deleted after 12 months without a sign-in. If a leader removes you, your address is kept 30 days, then only in scrambled form (hashed), which keeps it from signing in again. Leaders: until 6 months after the company’s access ends |
| Your first name, if you give it | Anyone | To greet you | As long as your account |
| Name and role of the person who signs the contract | One leader | The contract | With the contract record |
| Company details (public data from ANAF) | The company | The contract and invoices | While the space exists |
| Billing email | The company | Invoices | While the space exists |
| Sign-in codes and sessions | Everyone | Signing in | Codes 10 minutes, sessions 30 days. Stored scrambled (hashed), never as written |
| The date you last signed in | Everyone | So accounts unused for 12 months can be deleted | As long as your account |
| How often each page or file is opened | Nobody: counted per company per day, not per person | Basic counts, so we know what helps | 90 days |
| Survey and pulse answers | Nobody: they are anonymous | Preparing the workshop, and showing what changed | While the space exists, shown only in groups of 3 or more |
| Questions you ask us, and our answers | The person who asks | Support | Until 6 months after the company’s access ends |
| Your photo choice | Each person | So we only photograph people who agreed | Until the photos are no longer used |
| Video consent | The person in the video | Proof that you agreed | While the video is used, then as the law requires |
| Contract acceptance | The person who signs | Proof of the agreement | As the law requires |
Some of these only start once the step they belong to is part of your plan: the contract, the survey, the photos, the video.
When access ends
Your company’s access runs until 12 months after the last piece of work in its contract, and longer if new work is agreed. After that, nobody from the company can sign in and no emails go out. Six months later we delete everyone’s account and email address. The company’s details and its invoices stay, because the law asks us to keep them. Files you downloaded stay yours.
What we never keep
- Passwords. There are none: you sign in with a code sent to your email.
- The names of the people on the training record, or the names on certificates. You type them in your browser, the PDF is made there, and the names never reach us.
- Anything from your company’s own tools. We never ask for a password here. When a build needs access, you invite stefan@tiliaris.io into the tool yourself.
Cookies
One: the sign-in cookie, which keeps you signed in on this device for 30 days. No tracking, no advertising, no analytics cookies. "Sign out everywhere" in the account menu ends every session at once.
The emails we send
Sign-in codes, invites, the weekly news, and a short note if someone tries to sign in with your address after your company’s access ended. The weekly news comes by email during your company’s first 3 months, and after that only if you choose to keep it. Every news email says why you get it and has a link that stops it in one click. You can also switch it off in your space, under Weekly news.
Who else handles it
- Hetzner hosts the portal, in the EU.
- Resend sends the emails.
- FGO issues the invoices. The legal record of an invoice stays with FGO and our accountant, so it is kept even if a space is closed.
No AI service sees your data through the portal. The weekly news is written from public sources only.
Your say
You can ask to see what we keep about you, to correct it, or to delete it, by writing to stefan@tiliaris.io. A leader at your company can remove a team member at any time, which ends their access at once. If you think we got something wrong, you can also complain to the data protection authority.