Privacy policy

Tillerpath helps a company find paid software seats nobody is using, and handles requests and approvals for new software. This page explains, in plain language, what data Tillerpath reads, why, and how it is protected. “Tillerpath”, “we” and “us” mean the operator of tillerpath.com. “Customer” means the company that sets up a Tillerpath workspace.

What we use the data for

We use data only to run Tillerpath for the customer: to show which paid software seats are used and which are not, and to handle software requests and approvals for the customer’s company. We do not sell data. We do not use it for advertising. We do not use it to build profiles for anyone other than the customer.

Where the data comes from

Tillerpath only reads a source after an administrator at the customer connects it. Every source is optional except sign-in.

Google sign-in. Your name and email address, so we know who you are and which workspace you belong to.
Google Workspace (admin, read-only). If an administrator connects Google Workspace, we request these read-only scopes: admin.directory.user.readonly (the list of people in the company), admin.directory.customer.readonly (basic company account details), admin.reports.usage.readonly (app usage reports) and admin.reports.audit.readonly (sign-in events to third-party apps, used to see which apps people actually use). We never request access to anyone’s Gmail messages, Drive files or calendar content through these scopes.
Optional Google actions. If an administrator chooses, Tillerpath can send workspace invitations from their Gmail account (gmail.send, sending only) and manage Google Workspace licenses they approve (apps.licensing).
Slack. The member list (names and email addresses) and the messages people send directly to the Tillerpath Slack app or mention it in, so people can ask for software in Slack.
Time Doctor. App and website usage time per person, used to find software seats that are not being used.
BambooHR. Employee directory details such as name, email and employment status, used to match seats to current employees.
Brex. Software spending and card transactions, used to find what the company pays for.
OpenAI admin usage. Usage data from the customer’s OpenAI organization, used to see who uses paid OpenAI seats.
Browser extension (optional). If a person installs it, the extension records only which app was used, the kind of event and the hour or day. It never collects page addresses, page titles, what you type, passwords or cookies. The extension shows everything it sends.

AI processing

Some text is processed by Google’s Gemini API: the text of a software request, to understand what is being asked for, and an app’s name and web address, to research its pricing. We do not send other members’ personal data, usage data or company directory data to the model. We send only what each task needs.

Google API Services User Data Policy

Tillerpath’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and security

Data is stored in a Postgres database hosted by Neon. The app is hosted on Vercel.
All traffic to and from Tillerpath is encrypted in transit with HTTPS/TLS.
OAuth tokens and connection credentials for connected services are encrypted at rest with AES-256-GCM before they are stored.
Only the customer’s own administrators and reviewers can see the customer’s workspace data.

Retention and deletion

We keep a customer’s data for as long as its workspace is active. An administrator can disconnect any source at any time, and Tillerpath stops reading from it. To delete a workspace or any personal data, email me@liammartin.com. We delete the requested data, including stored tokens, within 30 days, except where the law requires us to keep it. Backups roll off on their normal schedule after that.

Sharing

We share data only with the service providers that run Tillerpath (Neon, Vercel and Google for the AI processing above), only to run the service, or when the law requires it.

Contact

Questions or requests: me@liammartin.com.