tesse

This Privacy Policy describes how Tesse collects, uses, and protects your information when you use our platform. It covers the personal data Tesse collects for its own purposes, mainly about the staff who use Tesse. For this data, Tesse is the organisation responsible under Singapore’s Personal Data Protection Act (PDPA).

Data about the people you support

This policy does not cover the personal data that organisations enter into Tesse about the people they support, such as profiles, notes, goals and photographs. For that data, the organisation using Tesse is responsible under the PDPA. Tesse is its data intermediary and processes the data only on the organisation’s instructions, under our Terms of Service.

If you want to access, correct or delete data an organisation holds about you or someone you care for, please contact that organisation. If you contact us instead, we will pass your request on to them. Ourdata protection pagedescribes how this data is stored and processed.

Information We Collect

We collect the following types of information:

Account Information

When you create an account, we collect your email address for authentication purposes. We use Google Sign-In as one of our authentication methods. When you sign in with Google, we only request access to your email address and do not access any other Google account data.

Usage Data

We collect information about how you use the platform, recorded by internal identifier, to improve our services.

Technical Information

We automatically collect certain technical information, including your IP address, browser type, device information, and usage patterns through cookies and analytics tools.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the platform
• Process and deliver the services you request
• Improve and develop new features
• Understand and analyze platform usage
• Communicate with you about your account and our services
• Ensure security and prevent fraud
• Comply with legal obligations

Information Sharing

We do not sell your personal information. We may share your information with third-party service providers who assist us in operating our platform, including:

• Cloud hosting and infrastructure providers
• Authentication services
• Analytics providers
• Error monitoring and email delivery providers

We require these providers to handle your information securely and only for the purposes we specify. The full list of providers, and where each one processes data, is on ourdata protection page. We may also disclose your information when required by law or to protect our rights.

Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze platform usage. You may control cookies through your browser settings, but disabling certain cookies may limit platform functionality.

Data Security

We implement appropriate technical and organizational measures designed to protect your information from unauthorized access, loss, misuse, and disclosure. However, no security system is impenetrable, and we cannot guarantee the security of our systems.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. Where we transfer personal data outside Singapore, we make sure the recipient is bound by a written contract that protects it to a standard comparable to the PDPA. Our data protection page lists the countries involved.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Accessing your personal information
• Correcting inaccurate information
• Requesting deletion of your information
• Objecting to or restricting certain processing
• Exporting your data
• Withdrawing consent

To exercise these rights, please contact us using the information provided below.

Data Retention

We retain your information for as long as your account is active or as needed to provide you services. If you request deletion of your account, we will delete or anonymize your information within 30 days, except where we are required to retain it for legal or regulatory purposes.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the platform after any changes constitutes acceptance of the updated policy.