TieBuzz global privacy notice
Clear data roles. Accountable processing.
TieBuzz Solutions Private Limited in India operates StoRegister for business customers worldwide. This notice explains how TieBuzz handles website, enquiry, account and billing information—and how it processes Customer Data on a self-storage operator’s documented instructions.
TieBuzz is the India-based public-site controller or Data Fiduciary and the sole contracting and invoicing entity. For Customer Data, the customer generally decides why and how the data is used.
Start with the relationship
Four contexts. Different responsibilities.
A public website enquiry is not the same as data inside a customer account. This notice separates the relationships so individuals know who makes decisions and where to direct a request.
Website and enquiries
TieBuzz decides how it handles visits, enquiries, scheduling, security, analytics and permitted communications.
Account administration
TieBuzz manages business contacts, authorised users, India-issued invoices, support, security and legal records.
Customer Data
The customer normally decides the purposes; TieBuzz processes the data to provide the ordered StoRegister services.
Third-party systems
Access-control, payment, CRM, accounting, e-invoice and signing providers apply their own terms and privacy practices.
Complete notice
What is handled, why and by whom.
Read this notice together with any enquiry notice, Order Form, data processing addendum, cookie settings and product-specific schedule that applies to your interaction.
Who we are and what this notice covers
TieBuzz Solutions Private Limited, a company incorporated in India with its registered office at 66/1 Conven Road, Mittapudhur, Alagapuram, Salem, Tamil Nadu 636016, India (“TieBuzz”, “we”, “us” or “our”), operates this website and the StoRegister business-to-business software product. “StoRegister” is TieBuzz’s product and trade name, not a separate legal entity.
TieBuzz is the sole supplier, contracting party and invoice issuer for StoRegister subscriptions supplied worldwide, including to business customers in the European Union and EEA, United Kingdom, United States, Canada, Middle East and Asia. TieBuzz does not provide local-country contracting or invoicing through an overseas subsidiary, branch, office, establishment or agent. A website language, customer location, hosting region, local tax identifier, currency, partner or statutory privacy representative does not create a local TieBuzz entity or authorise anyone to bind TieBuzz.
This notice covers information processed through the public website, enquiries, demonstrations, account and billing administration, support, security and use of the Services. It also explains TieBuzz’s role when processing Customer Data for a customer.
It does not replace a customer’s own privacy notice to its tenants, prospects, employees or other individuals, and it does not govern an independent third-party provider’s website, hardware, application or service.
Although TieBuzz contracts with organisations, the platform may process information about people. Those individuals retain the rights available under applicable data-protection law.
Our role depends on the processing
| Context | Typical TieBuzz role | Who decides the purpose |
|---|---|---|
| Website visits, enquiries, demonstrations, permitted marketing and public-site security | Data Fiduciary or controller | TieBuzz |
| Account contacts, billing, fraud prevention, service security, compliance and business administration | Data Fiduciary or independent controller | TieBuzz for those business purposes |
| Tenant, prospect, facility, rental, invoice and other Customer Data in the ordered Services | Data Processor, processor or service provider | The customer, subject to law and the Agreement |
| Independent payment, access-control, accounting, e-invoice, signing or other provider services | Depends on the documented hand-off | The customer and provider determine their respective roles |
Data-protection labels differ by jurisdiction. “Data Fiduciary” and “Data Processor” include the corresponding concepts of controller and processor where those terms apply.
Information we may collect
Website, enquiry and commercial information
- name, work email, phone number, organisation, role, country or region and preferred language;
- products or services of interest, facility and unit counts, plan, project context and message;
- demo, meeting, proposal, Order Form, procurement and relationship records;
- marketing preference, notice acknowledgement, consent record and withdrawal details; and
- source page, referral information and campaign or event context.
Technical and usage information
- IP address, browser, device, operating system, language, approximate region and user agent;
- pages, links, forms and features used, timestamps, session and diagnostic events;
- cookie, tag, local-storage and similar identifiers where deployed; and
- security, authentication, access, support and audit logs.
Account, billing and support information
- authorised-user identity, account role, permissions, facility assignment and registered-device information;
- legal name, billing address, country, business status, place of use and tax, VAT or GST identifiers;
- subscription, India-issued invoice, invoice currency, tax treatment, payment status, transaction references and withholding certificates;
- support requests, communications, attachments, recordings where disclosed, and resolution history; and
- implementation, migration, training, configuration, acceptance and service-history records.
Customer Data
Depending on customer configuration, Customer Data may include prospect and tenant records, contact details, identity and verification fields, rental and unit information, contracts, documents, invoices, payments and transaction status, support history, access-control events, facility records, reports and application activity. The customer decides which permitted data it submits and must provide the required notices and lawful basis.
A configured payment provider may collect payment-instrument details directly. TieBuzz may receive transaction identifiers, status, amount, method, reconciliation and billing records needed for the approved workflow, rather than full payment-card details.
Where information comes from
- directly from you when you browse, enquire, register, subscribe, communicate or request support;
- from your organisation, an authorised administrator or implementation contact;
- from customers and their configured systems when TieBuzz processes Customer Data;
- from approved CRM, payment, accounting, e-invoice, signing, access-control or other integrations;
- automatically from browsers, devices, application logs, security systems and similar technologies; and
- from public professional sources, partners or events where use is lawful and reasonably expected.
If you provide information about another person, you must be authorised to do so and provide any notice required by law. Do not send special-category, sensitive, biometric, payment-card, government identity, access credential, children’s or otherwise regulated information through a public enquiry form. Customer use of such data requires a lawful, necessary and expressly documented service scope.
Why we use information
| Purpose | Examples | Typical legal basis or authority |
|---|---|---|
| Respond and form a business relationship | Enquiries, demos, proposals, due diligence and contracting | Your request; steps toward a contract; legitimate business interests; consent where required |
| Provide and administer the Services | Accounts, configuration, support, billing, migration, training and service communications | Contract; customer instructions; legitimate business interests; legal obligations |
| Operate, secure and improve | Authentication, fraud prevention, diagnostics, quality, capacity, reliability and aggregated analysis | Legitimate interests; contract; legal obligations; consent where required |
| Comply and protect | Tax, accounting, dispute, audit, legal request, rights response and enforcement | Legal obligations; legal claims; legitimate interests |
| Communicate relevant information | Product updates, events, educational material and permitted business marketing | Consent or legitimate interests, subject to local law and opt-out rights |
The lawful basis depends on the jurisdiction and context. Where consent is the basis, it may be withdrawn without affecting processing already carried out lawfully. Where we rely on legitimate interests, we consider necessity, proportionality and the individual’s reasonable expectations. For business contacts, TieBuzz generally relies on requested pre-contract steps, contract administration, legal obligations or legitimate interests; consent is used where the applicable marketing, cookie or communications law requires it. A customer remains responsible for the lawful basis for Customer Data it controls.
Customer Data and documented instructions
For Customer Data, TieBuzz processes personal data to provide, secure, support, maintain and document the ordered Services, and otherwise only on the customer’s documented instructions unless applicable law requires processing. The Agreement and data processing addendum define the subject, duration, nature, purpose, data types, individuals, security measures, subprocessors, transfers, assistance, audit and deletion obligations.
Customers are responsible for their privacy notices, lawful basis, data quality, access decisions, retention instructions, configured workflows and responses to individuals. TieBuzz will provide reasonable assistance required by the applicable data processing terms.
If an individual asks TieBuzz about data controlled by a customer, we may verify the request, inform the customer and refer the individual to that customer. We do not independently alter Customer Data unless authorised or legally required.
AI Genie and assisted features
Where enabled and authorised, AI Genie may process a user’s prompt and relevant account context to answer a question, explain a result or direct the user to a supporting Sleek Web screen. The applicable configuration, Order Form and data processing terms define availability and scope.
- Users must be authorised for the underlying records and must verify an output before acting.
- AI Genie does not replace customer decisions, professional advice, compliance review or human approval.
- We do not use Customer Data to train a generally available model unless the customer expressly agrees in writing.
- Provider, region, prompt handling, retention and security details are documented for the agreed configuration.
We may use de-identified or aggregated statistics that do not identify a person or customer to measure quality, reliability and feature performance.
When information is shared
We may disclose information only as reasonably necessary for the purposes in this notice:
- within TieBuzz’s authorised workforce on a need-to-know basis, including authorised personnel in India;
- to hosting, infrastructure, security, communications, support, analytics, CRM, scheduling and professional-service providers;
- to a customer, its authorised users and its configured integration providers;
- to payment, accounting, e-invoice, signing or access-control providers for an approved workflow;
- to advisers, auditors, insurers, financiers and prospective transaction parties under appropriate confidentiality;
- to competent authorities where legally required, or to protect rights, safety, security and integrity; and
- as otherwise directed by the customer or consented to by the relevant individual.
TieBuzz does not sell Customer Data or use it for cross-context behavioural or targeted advertising. Public-site analytics or advertising technologies are separate from Customer Data and may constitute a “sale”, “sharing” or targeted advertising under some laws even where no money changes hands; the applicable notice, consent and opt-out rights therefore depend on the live website configuration and visitor location. A provider name on a product or partner page identifies a possible review path, not universal availability, endorsement or permission to send data.
Material subprocessors for Customer Data, notice of relevant changes and any customer objection process are governed by the data processing addendum or applicable service schedule.
Hosting regions and international transfers
The hosting model and primary account region for Customer Data follow the Order Form or hosting schedule. Regional availability is not a promise that every support, communications, security, analytics or integration activity occurs only in that region.
TieBuzz is established in India. Authorised implementation, migration, support, security, billing, administration and legal personnel may access or process information from India. Approved subprocessors may process information in other countries identified in the applicable data processing terms. A regional hosting label describes the primary account region; it does not, by itself, promise that all processing and access remain exclusively in that region.
Where required for a restricted transfer from the EEA, the parties will complete the appropriate EU Standard Contractual Clauses and annexes, transfer assessment and supplementary measures. For restricted transfers from the United Kingdom, the parties will complete the applicable UK International Data Transfer Agreement or UK Addendum and transfer-risk assessment. Other jurisdictions use the recognised contractual, adequacy, certification or consent mechanism that lawfully applies. These safeguards must be completed in the data processing addendum; this public notice does not execute them by itself.
A customer requiring a specific data-location or transfer model should document it in the Order Form and data processing terms before implementation. Any no-India-access or similar restriction must be expressly signed and technically supportable. A statutory privacy representative appointed where law requires acts only in that regulatory role and is not a contracting party, invoice issuer, subsidiary, branch, agent or local establishment of TieBuzz.
Cookies, analytics and communications
The public website may use necessary technologies for navigation, security, form state and language, and—where lawfully enabled—measurement, advertising, scheduling and live-chat technologies. These may place or read cookies, tags, local-storage values or similar identifiers and send technical usage information to the relevant provider.
The website may use Google advertising or measurement and Zoho SalesIQ live-chat technologies; those providers may receive browser, device, IP, page, interaction and identifier data and may process it outside the visitor’s country. Where law requires consent or an opt-out before a non-essential technology is used, the applicable website control must provide that choice. You may also use browser or provider advertising controls. Blocking a necessary technology may affect a requested feature.
Service messages needed to administer an account or respond to a request are not marketing. Marketing communications include an unsubscribe route or other appropriate preference method. Withdrawing marketing consent does not prevent necessary service or legal communications.
The cookie notice or settings panel should identify deployed providers, storage keys, purposes, categories, durations and transfer information. The live configuration controls which technologies are actually used.
Retention, export and deletion
We retain personal data only for as long as reasonably necessary for the stated purpose, customer instruction, Agreement, security need, dispute, legal claim, accounting or statutory requirement. Different records therefore have different periods.
| Record type | Retention approach |
|---|---|
| Customer Data | During the subscription and the agreed export or retrieval period, then deleted or returned under the Agreement and data processing terms, subject to backups and legal hold. |
| Enquiries and commercial records | For the active relationship or a reasonable follow-up period, then according to documented sales, consent, dispute and suppression requirements. |
| Contracts, invoices and tax records | For the contract and the period required by Indian corporate, GST, tax, accounting and limitation rules, plus any directly applicable cross-border tax or legal requirement. |
| Security, audit and support logs | For a proportionate diagnostic, security, evidence and continuity period, with longer retention where an incident or claim requires it. |
Backup copies are isolated, protected and removed through the normal backup lifecycle. Data subject to a lawful preservation requirement may be retained and access-restricted until that requirement ends.
Security and incident handling
TieBuzz uses administrative, technical and organisational measures designed for the nature, context and risk of the processing. Depending on the service and agreed scope, measures may include access controls, role separation, authentication, encryption in transit, logging, monitoring, vulnerability management, backups, supplier review and incident procedures.
No system or transmission is completely secure. Customers must manage authorised users, permissions, devices, credentials, integrations, exports and local operating procedures. Security measures and incident-notification obligations for Customer Data are defined in the applicable data processing and service terms.
If we confirm a personal-data breach for which notice or customer assistance is required, we will follow the applicable law and contractual procedure, provide available material information and take reasonable containment and remediation steps.
Choices, rights and grievance route
Subject to applicable law, an individual may have rights to obtain information about processing, access or correct personal data, request erasure, withdraw consent, object or restrict certain uses, obtain portability, nominate another person, and complain to an appropriate authority. The exact rights and exceptions depend on the jurisdiction and relationship.
- If the information is in a self-storage operator’s StoRegister account, contact that operator first. The operator normally controls the record and can verify the relationship and request.
- For public website, enquiry, account-administration or TieBuzz-controlled information, email [email protected].
- Describe the relationship, requested action and relevant account or communication. Do not send unnecessary identity documents by ordinary email.
We may ask for proportionate verification, clarify the scope, preserve information required by law, refuse a request where an exception applies, or route it to the responsible customer. We will explain the outcome and available escalation route required by law.
Privacy and grievance contact
Start with the organisation that decides how the record is used.
TieBuzz privacy enquiries for StoRegister: [email protected]
Registered office: 66/1 Conven Road, Mittapudhur, Alagapuram, Salem, Tamil Nadu - 636016, India.
Children
TieBuzz’s StoRegister public website and business Services are not directed to children and are not intended for personal or household use. Customers must not configure the Services to process children’s personal data unless the use is lawful, necessary, disclosed to TieBuzz and expressly covered by the Agreement. If you believe a child has submitted information directly to TieBuzz without appropriate authorisation, contact us.
Changes to this notice
We may update this notice to reflect a change in law, product, processing, provider or operating practice. The current version will show its effective and last-updated dates. Where a change materially affects an existing customer relationship or requires consent, we will provide the notice or choice required by law or the Agreement.
Historical copies may be requested from the privacy contact. A translation is provided for convenience only after appropriate legal review; the governing language and precedence for a customer relationship follow the Agreement to the extent permitted by law.
Contact us
For privacy questions, choices, grievances or rights requests, write to [email protected] or to the registered-office address below. Contract and service questions may be sent to [email protected].
TieBuzz Solutions Private Limited
Operator of the StoRegister product
66/1 Conven Road, Mittapudhur, Alagapuram
Salem, Tamil Nadu - 636016
India
TieBuzz has no overseas contracting or invoicing office. If applicable law requires a privacy representative in a particular jurisdiction, that representative’s identity and contact details will be published or supplied separately after appointment. A privacy representative cannot accept commercial orders, issue invoices or bind TieBuzz unless TieBuzz expressly authorises it in writing.
Privacy questions
Direct answers before you share data.
These summaries aid navigation. The complete notice and applicable customer agreement govern.
Who controls personal data stored by a StoRegister customer?
The customer generally decides why and how tenant, prospect, employee and facility personal data is used. TieBuzz Solutions Private Limited, operating the StoRegister product, processes that Customer Data on the customer’s documented instructions under the Agreement and applicable data processing terms.
Does TieBuzz sell or use Customer Data for targeted advertising?
TieBuzz does not sell Customer Data or use it for cross-context behavioural advertising. Public-site analytics or advertising technologies are separate from Customer Data and are governed by this notice and any applicable consent, opt-out and website-control requirements.
Where is StoRegister data hosted?
The primary hosting region and model for a customer account follow the applicable Order Form or hosting schedule. TieBuzz is established in India, and authorised support, implementation, security, billing and administration access from India may occur. Approved subprocessors may process data in other disclosed countries under the applicable DPA and transfer safeguards.
How long does StoRegister retain personal data?
Retention depends on the purpose, contract, legal requirement and customer instruction. Customer Data is retained and deleted under the Agreement and data processing terms; website and business records are retained only for documented operational, security, financial or legal needs.
How can a person exercise privacy rights?
A tenant, prospect or employee whose data is held in a customer account should normally contact that customer first. Website visitors and account contacts may write to [email protected]. TieBuzz may need to verify identity and route a request to the responsible customer.
How does AI Genie use account data?
When enabled, AI Genie uses the prompt and relevant authorised account context needed to provide the requested assistance inside Sleek Web. The applicable configuration and data processing terms govern the service, and users must verify outputs before acting.
Is StoRegister a separate legal entity or local-country privacy office?
No. StoRegister is a product and trade name of TieBuzz Solutions Private Limited in India. TieBuzz is the public-site controller or Data Fiduciary and the sole contracting and invoicing entity. Any statutory privacy representative appointed where law requires acts only in that regulatory role.
How are transfers from the EEA, United Kingdom and other regions handled?
The applicable data processing addendum identifies roles, locations, subprocessors and transfer safeguards. Where required, transfers to TieBuzz in India use the relevant EU Standard Contractual Clauses, UK IDTA or UK Addendum, or another recognised mechanism, with completed details and supplementary measures.
Privacy contact
Need to understand a data route?
Tell us whether the question concerns the public website, your organisation’s account or data controlled by a self-storage operator. That context helps us route the request correctly.