Privacy.

Who is collecting what

tyso is a one-person studio in Canberra, Australia. There is no data team, no appetite for collecting more than the work needs, and no on-selling of anything I do collect. A few third-party tools do run on the site: the list, and what each is for, is below.

What gets collected

If you email me, I keep the email: your address, your name if you give it, and whatever you wrote.

If you use the free audit on the studio page, I receive what you type into it: your trade and where you work, your answers to its questions, and your contact email. That is a lead enquiry, and it is treated as one.

Like every website, the server keeps routine technical logs for a short time. The site also runs some measurement and advertising tools, and enquiries are saved so I can follow up. The next two sections spell out exactly what and why.

Analytics, ads and how you are measured

To see what is working, the site runs a few measurement tools. Vercel Web Analytics counts page views and where visitors arrive from, with no cookies and no personal profiles. Microsoft Clarity records anonymised sessions and builds click and scroll heatmaps, so I can tell which parts of a page land and which get skipped; it masks the text you type into forms by default, so the words in the audit console or a contact field are not captured in a replay. PostHog logs product events, like which forms get started and whether an audit finishes, so I can smooth out the rough edges. None of these three is used for advertising.

The site also carries the Meta pixel, from Facebook. This one is used for advertising: it notes page views and when an enquiry, booking or audit is completed, then reports back so I can measure whether my Facebook and Instagram ads are working and show follow-up ads to people who have already visited the site. It sets a cookie to do that, and it does not receive the details you type into a form.

So I can tell which ad or link is actually bringing people in, the site keeps a small first-party note in your own browser recording the source that first sent you here; it holds no personal details, it is only read back to credit that source if you get in touch, and it is never shared.

If you would rather not be measured or retargeted, a browser with Do Not Track or a content blocker switched on keeps you out of the analytics and the pixel, and you can switch off ad personalisation inside your Facebook and Instagram settings.

What it gets used for

To reply to you, to run the audit you asked for, and to do the work if we end up working together. When you send an enquiry, booking or audit, those details, your name, email and business, land in my inbox and are saved in a CRM I run on Supabase, so I can reply and keep track of the conversation. It is my own system, and they go nowhere beyond it.

Your details are never sold, rented or traded. No mailing list exists, so you cannot be added to one.

The audit and AI

The audit console may pass what you type to OpenAI's API to generate its read. Treat the form like a postcard: business details are fine, but keep passwords and anything sensitive out of it.

Tyso Receipts

Tyso Receipts is the receipt scanner in the toolbox. If you use it, your receipt images and the details read from them are stored privately against your account, and only you can see them. Storage is on Supabase, in the Sydney region (ap-southeast-2).

To read a receipt, its image is processed by Anthropic's Claude. Under Anthropic's API policy that image is not used to train models. Payments, if you go Pro, run through Stripe, so your card details never touch tyso.io.

You can export your receipts to a spreadsheet at any time. Deleting your account is a full purge: your account, every receipt, and every image go for good. A receipt you delete on its own sits in a bin for 30 days first, then it is gone too. Keeping records for five years is the ATO's ask of you, not something we do on your behalf: we hold your data only while your account exists.

Seeing or deleting your details

Email me and ask. I will tell you what I hold about you, correct it, or delete it. There is exactly one place to look, so this does not take long.

Changes and questions

If how this works changes, this page changes with it. Questions go to the same place everything else does: