Privacy Policy - Tauru Systems LLC

WEBSITE PRIVACY POLICY

Last revised on: September 2, 2026

Tauru Systems LLC (“Company”, “Tauru” or “We”) respects your privacy and is committed to protecting it through our compliance with this policy. This policy applies to our marketing website at www.taurusystems.com, the TReS preview environment at tres.taurusystems.com, the customer-provisioned TReS environments we host at dedicated subdomains of taurusystems.com, and the software, platforms, APIs, MCP server endpoints and documentation accessible through the foregoing (collectively, the “Website”), and to our practices for collecting, using, maintaining, protecting, and disclosing information. We make the Website available globally. If you are located in the European Economic Area (“EEA”), the United Kingdom, Switzerland or Canada, or if you are a resident of California, Nevada or another U.S. state with a comprehensive privacy law, you should also read the applicable sections below.

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. This Privacy Policy describes how Tauru collects, uses, discloses, retains and protects personal information and the choices and rights that may be available to you. If you do not agree with our policies and practices, your choice is not to use our Website. This Privacy Policy may change from time to time (see “Changes to Our Privacy Policy” below). Any changes will be effective when posted unless otherwise stated or required by applicable law, and we will provide any additional notice or obtain any consent required by applicable law.

Scope of Tauru Privacy Policy

This Privacy Policy applies to all aspects of our Website as well as to information we may collect offline. This Website may link to or incorporate websites or content hosted and served by others over which we have no control, such as third-party websites, online properties, platforms, social media, or systems, which are each governed by the privacy policy and business practices of the third party. You understand and agree that Tauru is not responsible for the security, privacy, or business practices of any third party.

Tauru handles two distinct categories of information, and this Privacy Policy applies principally to the first of them:

Website Information. Information we collect in our own right — when you visit our marketing site, use the TReS preview environment, register for or administer a TReS account, contact us for support, or receive our communications. With respect to Website Information, Tauru acts as a “controller” (or, under U.S. state privacy laws, a “business”), and this Privacy Policy describes how we handle it.
Customer Data. The data, documents, ontologies, taxonomies, graphs, queries, prompts and outputs that a customer or its authorized users load into, author within, generate through, or export from that customer’s TReS environment. Each TReS environment is provisioned for a single customer and is isolated from every other customer environment. Customer Data belongs to the customer, and Tauru processes it only on the customer’s instructions, as a “processor” (or, under U.S. state privacy laws, a “service provider”). Our handling of Customer Data is governed by the applicable customer agreement and data processing addendum rather than by this Privacy Policy. If you are an employee, contractor or other authorized user of a Tauru customer and you have questions about how your personal information is handled inside your organization’s TReS environment, you should direct those questions to your organization.

The TReS preview available at tres.taurusystems.com is a demonstration environment. It does not require an account, is not provisioned to any customer, and should not be used to submit confidential information, personal information or production data. Each customer is separately provisioned with its own TReS environment at a dedicated subdomain of taurusystems.com, access to which requires an account issued and administered by that customer.

This policy applies to information we collect

On this Website and all associated Tauru software and web apps.
In email, text, and other electronic messages between you and this Website.

It does not apply to information collected by:

Us offline or through any other means, including on any other website operated by the Company or any third party; or
Any third party, including through any application or content (including advertising) that may link to or be accessible from or on the Website.

Your Information

2.1 Information We Collect About You and How We Collect It. We collect several types of information from and about users of our Website, including information:

By which you may be personally identified, such as name, business e-mail address, username, employer, job title or role, telephone number, and any other identifier by which you may be contacted online or offline, including IP addresses and cookie identifiers (collectively, “personal information”);
That is about you but individually does not identify you, such as geo location, operating system, browser preferences, input devices;
About your internet connection, the equipment you use to access our Website, and usage details; and/or
Product and usage information, such as the subscription tier associated with your organization’s environment, the features and connections you use, and volumetric measures of data stored and queries processed, as further described in Section 2.5 below.

We collect this information:

Directly from you when you provide it to us.
Automatically as you navigate through the Website. Information collected automatically may include usage details, IP addresses, and information collected through cookies and other tracking technologies.
From our service providers, including our payment processor and our cloud infrastructure providers, and from the Tauru customer that issued your account.

2.2 Information you provide. The information we collect on or through our Website may include:

Information that you provide by filling in forms on our Website. This includes information provided at the time of registering to use or creating an account on our Website or requesting further services. We may also ask you for information when you report a problem with our Website. Accounts for provisioned TReS environments are created, assigned to roles, and administered by the customer that licenses the environment. Authentication is provided through Amazon Cognito; passwords are stored by that service in encrypted form and Tauru personnel do not have access to them.
Records and copies of your correspondence (including email addresses), if you contact us.
Your responses to surveys that we might ask you to complete for research purposes.
Any other information, content or documents you upload to the Website.

Tauru offers paid subscriptions. Payment-card information is collected and processed by a third-party payment processor, such as Stripe or a similar provider, and is held on that processor’s systems in accordance with its own terms and privacy notice. Tauru does not receive or store full payment-card numbers. We may receive and retain billing contact details, subscription tier, transaction records, and limited payment-method information (such as card type and last four digits) made available by the processor.

2.3 Information We Collect Through Automatic Data Collection Technologies. As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

Details of your visits to our Website, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website.
Information about your computer and internet connection, including your IP address, operating system, and browser type.

We also may use these technologies to collect information about your online activities over time and across third-party websites or online services, but we do not currently use targeting cookies or third-party advertising networks on the Website. Where required by law, Tauru will provide an appropriate mechanism to obtain consent for, or permit choices regarding, non-essential cookies and similar technologies.

The information we collect automatically may include personal information, but we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Website and to deliver a better and more personalized service, including by enabling us to:

Estimate our Website usage statistics and usage patterns.
Store information about your preferences, allowing us to customize our Website according to your individual interests.
Improve the services we provide to our users.
Recognize you when you return to our Website.

We use cookies and similar technologies (collectively, “Cookies”) for this automatic data collection. We classify Cookies in the following four categories:

Essential Cookies. Essential Cookies are necessary for the Website to function and cannot be switched off without affecting your ability to use the Website. They are usually only set in response to specific actions you take on the Website, such as retaining search results where you use an internal search function or setting your Cookies preferences. Essential Cookies seldom collect and use any personal information, though they may contain an ID code which allows the Website to distinguish you as an individual visitor from all other visitors on the Website at the same time. Essential Cookies are typically session Cookies and only retain data for the duration of your visit to the Website. We use essential Cookies as we believe it is in both our and your legitimate interests to enable the Website to work properly.

Functional Cookies. We use functional Cookies to understand how the Website is used and to customize and enhance the Internet experience of users. When you revisit the Website, we may recognize you by a functional Cookie and customize your experience. For example, once you have completed the registration process, a functional Cookie will be used to avoid you having to register again. The retention period of functional Cookies varies from the duration of your visit to the Website up to two years, depending on the purpose of the Cookie.

Performance Cookies. We use performance Cookies to collect and track information such as demographic information, domain names, computer type, browser types, screen resolution, and other statistical data involving the use of the Website. We use performance Cookies to help us understand who uses the Website and to improve and market it, as well as our other services. We also use performance Cookies in connection with Website pages and email messages in certain formats to track the actions of Website users and email recipients, to determine the success of marketing campaigns and to compile statistics about Website usage and response rates.

Targeting Cookies. Tauru does not serve advertisements to users of the Website and does not use third-party advertising networks on the Website. Targeting Cookies are not currently used on the Website.

Where Cookies are not strictly necessary for operation of the Website, we will obtain consent before placing them on your device where required by applicable law and will provide the preference controls required by applicable law. You may also be able to control Cookies through your browser settings.

We may collect certain information automatically, including information that may be considered personal information under applicable law, such as IP addresses, device identifiers, cookie identifiers, usage data, and similar technical information. We may maintain this information separately or associate it with other personal information we collect or receive.

2.4 Third-Party Use of Cookies and Other Tracking Technologies. Some content on the Website may be served by third-party service providers (such as analytics tools) that may use cookies or similar tracking technologies in connection with the provision of their services. We require all such third-party service providers to meet our security standards through contractual obligations, including Data Processing Addendums where required. We do not control these third parties’ tracking technologies. For information about how you can opt out of non-essential tracking, see “Choices About How We Use and Disclose Your Information” below.

2.5 Usage Data, Logs, and Query Log Segregation. We generate operational and diagnostic logs in connection with hosting and supporting TReS environments. These logs may include account identifiers, timestamps, IP addresses, session and error information, feature usage, and volumetric measures used to administer fair-use caps and metered usage. We separate our log streams so that the substance of queries and prompts submitted within a customer environment, and the responses returned, are written to logs that are not accessible to Tauru support personnel unless the customer expressly grants access for a specific support or professional-services engagement. We use the logs available to us to operate, secure, troubleshoot and improve the Website, to administer billing, and to comply with applicable law.

2.6 Large Language Model Processing. TReS is designed to enable a large language model to work with data in a customer’s environment. A model may be made available in one of two ways: (a) Tauru provisions a model for the customer’s environment, hosted through a model-serving framework (currently Ollama) on infrastructure dedicated to that environment; or (b) the customer connects a third-party model of its own choosing using an address and access token that the customer supplies. Where a customer connects its own model, information that the customer or its users submit to that model leaves the TReS environment and is handled by that model provider under the provider’s own terms and privacy policy; Tauru does not control and is not responsible for that provider’s practices. Tauru does not use Customer Data, prompts or model outputs to train, fine-tune or improve any model made available to any other customer, and does not share Customer Data across customer environments.

2.7 Administrator Visibility Within a Customer Environment. TReS does not include chat, messaging or other user-to-user features, and customer environments are isolated from one another. Within a single customer environment, however, users designated by the customer as administrators are able to view the questions submitted to the model by other users of that environment and the answers returned. If you use TReS through an account issued by your employer or another organization, that organization can see your interactions with the model in its environment. Any use, retention or monitoring of that information by the customer is the customer’s responsibility and is governed by the customer’s own policies.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

To present our Website and its contents to you.
To provide you with information, products, or services that you request from us.
To fulfill any other purpose for which you provide it.
To provide you with notices about your account, including expiration and renewal notices.
To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
To notify you about changes to our Website or any products or services we offer or provide though it.
To use data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.
To contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt-out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send or by contacting us.
To contact you with respect to items, products or services that are germane to the products and services that the Company might provide you.
To allow you to participate in interactive features on our Website.
In any other way we may describe when you provide the information.
For any other purpose with your consent.

We may use your email contact information to contact you about Tauru products or services that may be of interest to you. We do not currently use personal information for third-party cross-marketing programs. You may opt out of marketing communications by following the unsubscribe instructions in our emails, adjusting your in-app notification settings, or by contacting us at privacy@taurusystems.com.

We do not currently sell personal information or share personal information for cross-context behavioral advertising as those terms are defined under applicable U.S. state privacy laws. Tauru may create, license, sell, or otherwise commercialize de-identified, anonymized, aggregated, or statistical data that does not identify any individual or specific customer. If Tauru changes its practices so that it sells personal information or shares personal information for targeted advertising within the meaning of applicable law, Tauru will update this Privacy Policy and provide any opt-out rights required by law before doing so.

Retention and Transfer of Information

4.1 Retention of Your Personal Information and Data. The Company will retain your personal information and data only for as long as is necessary for the purposes set out in this privacy policy. We will retain and use your personal information and data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

The Company will also retain your usage data for internal analysis purposes. Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our platform, or we are legally obligated to retain this data for longer time periods.

Following expiration or termination of a customer’s subscription, we will make that customer’s environment available for a limited period specified in the applicable customer agreement (and, absent a specified period, for thirty (30) days) so that the customer may export its Customer Data. After that period we will delete the Customer Data in the ordinary course, subject to routine backup cycles and to any retention required by applicable law.

4.2 Transfer of your Personal Data. Your personal information may be processed at the Company’s operating offices and in other places where Tauru or its service providers operate. As a result, personal information may be transferred to and maintained in jurisdictions whose data-protection laws differ from those where you are located. We will use legally recognized transfer mechanisms and safeguards where required by applicable law, as further described in Section 4.3.

The Company will take all steps reasonably necessary to ensure that your personal information and data is treated securely and in accordance with this privacy policy and no transfer of your personal information and data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

4.3 International Users. Tauru is based in the United States and hosts the Website on Amazon Web Services infrastructure. We make TReS available globally, and information may be processed in the United States and in other jurisdictions in which Tauru, its affiliates, its service providers or its customers operate. Those jurisdictions may have data protection laws that differ from the laws where you are located. Where a customer requires that its environment be provisioned in a particular cloud region, that requirement should be addressed in the applicable customer agreement or order form.

Where required for transfers of personal information from the EEA, UK, or Switzerland to the United States or other jurisdictions that have not been deemed adequate, Tauru will rely on appropriate transfer mechanisms, such as the Standard Contractual Clauses, the UK International Data Transfer Addendum, or other legally recognized safeguards.

To the extent the GDPR, UK GDPR or Swiss data-protection law applies to Tauru’s processing of Website Information, Tauru will process that personal information in accordance with applicable requirements. Where required, transfers from the EEA to the United States will be made using the Standard Contractual Clauses adopted pursuant to European Commission Decision 2021/914, with the UK International Data Transfer Addendum or other legally recognized safeguards used as applicable. Customers may request Tauru’s standard Data Processing Addendum by emailing privacy@taurusystems.com, and Tauru will enter into a DPA where required by applicable law.

4.4 Legal Bases and Rights for EEA, UK and Swiss Users. Where applicable, Tauru relies on one or more lawful bases to process Website Information, including performance of a contract or steps requested before entering a contract, compliance with legal obligations, Tauru’s legitimate interests in operating, securing and improving the Website and communicating with business users, and consent where applicable law requires consent (for example, for certain non-essential cookies or marketing communications).

Subject to applicable law and exceptions, individuals in the EEA, United Kingdom and Switzerland may have rights to access, correct or delete personal information, restrict or object to processing, receive portable data, and withdraw consent where processing is based on consent. You may exercise applicable rights by contacting privacy@taurusystems.com. You may also have the right to lodge a complaint with the data-protection authority in the country or region where you live or work.

If you are located in Canada, we handle personal information in accordance with PIPEDA and applicable provincial privacy legislation to the extent those laws apply. Subject to applicable exceptions, you may request access to or correction of your personal information, withdraw consent where processing is based on consent, or raise a privacy complaint by contacting privacy@taurusystems.com.

Security of your Personal Data

We have implemented administrative, technical, and physical safeguards designed to protect personal information from accidental loss and unauthorized access, use, alteration, and disclosure. These safeguards may include access controls, authentication measures, encryption in transit and/or at rest, backup procedures, monitoring, incident-response processes, and vendor-security controls, as appropriate for the nature of the information and the services provided. Any specific security commitments for enterprise customers should be set forth in the applicable customer agreement or security documentation.

TReS runs on Amazon Web Services and relies on services including AWS Fargate, Amazon Cognito, Amazon DynamoDB and Amazon Route 53. Security of a TReS environment is shared. Tauru is responsible for the security of the platform and the infrastructure we manage. The customer is responsible for what it places in its environment, for its user pool and role assignments (Administrator, PowerUser and User), and for the credentials and access tokens it issues or connects.

Tauru does not maintain a user account inside a customer’s TReS environment unless the customer creates one for us. We do retain super-administrator capability to perform administrative functions remotely (for example provisioning, recovery, and adding or removing users) that do not require access to Customer Data. Where a customer engages Tauru to perform professional services, access to that customer’s data will be granted by the customer and will be limited to the scope and duration of the engagement.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

The security of your personal information and data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information and data, we cannot guarantee its absolute security. Any natural or legal person who processes the data on behalf of the Company may have access to your personal information or data. Third-party vendors collect, store, use, process and transfer information about your activity on our platform in accordance with their privacy policies. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website. In the event of a data breach affecting your personal information, we will notify affected users in accordance with applicable law and our internal incident response procedures.

Disclosure of Your Information

6.1 Information We May Disclose. Tauru may disclose aggregated information about our users, and information that does not identify any individual, without restriction. We may disclose personal information that we collect or you provide as described in this Privacy Policy:

To our subsidiaries and affiliates.
To contractors, service providers, and other third parties we use to support our business and who may be bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the Company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by the Company about our Website users is among the assets transferred.
To fulfill the purpose for which you provide it.
For any other purpose disclosed by us when you provide the information.
With your consent.

We may also disclose your personal information:

To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
To enforce or apply our Terms of Use which can be found at www.taurusystems.com/terms and other agreements, including for billing and collection purposes.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others.

6.2 Choices About How We Use and Disclose Your Information. We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

Tracking Technologies. You can set your browser to refuse all or some browser cookies or to alert you when cookies are being sent. Where legally required, you may also manage non-essential cookies through the Website cookie-preference center or other controls made available on the Website. If you disable or refuse cookies, some parts of the Website may be inaccessible or may not function properly.
Third-Party Advertising. Tauru does not currently disclose personal information to unaffiliated third parties for their own third-party advertising or cross-marketing purposes. If that practice changes, Tauru will update this Privacy Policy and provide any required opt-out mechanism before doing so.
Promotional Offers from the Company. If you do not wish to have your email address or other contact information used by Tauru to promote our products or services, you may opt out by following the unsubscribe instructions in our emails or by sending your request to privacy@taurusystems.com.
Cookie Preferences. Where required by applicable law, we will obtain your consent before placing non-essential Cookies on your device and will make a cookie-preference control available on the Website. Where required by applicable U.S. state law, we will honor a recognized universal opt-out preference signal transmitted by your browser.

California residents may have additional personal information rights and choices. Please see “Your California Privacy Rights” below for more information.

Nevada residents who wish to exercise their sale opt-out rights under Nevada Revised Statutes Chapter 603A may submit a request to this designated address: privacy@taurusystems.com. However, please know we do not currently sell data triggering that statute’s opt-out requirements.

State Privacy Rights

If you are a resident of a U.S. state with an applicable comprehensive privacy law, you may have certain rights in relation to the personal information we collect from you, subject to applicable thresholds, exemptions, verification requirements, and limitations. These rights are not absolute, and we may decline a request where permitted by law. Depending on your state of residence and our legal obligations, these rights may include:

Right to know whether or not we are processing your personal data;
Right to access your personal data;
Right to correct inaccuracies in your personal data;
Right to request the deletion of your personal data;
Right to obtain a copy of the personal data you previously shared with us;
Right to non-discrimination for exercising your rights; and
Right to opt out of the processing of your personal data if it is used for targeted advertising (or sharing as defined under California’s privacy law), the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

Depending on the state you live in, you may also have the following rights:

Right to access the categories of personal data being processed (as permitted by applicable law, including the privacy law in Minnesota);
Right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in California, Delaware, and Maryland);
Right to obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in Minnesota and Oregon);
Right to review, understand, question, and correct how personal data has been profiled (as permitted by applicable law, including the privacy law in Minnesota);
Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including the privacy law in California); and
Right to opt out of the collection of sensitive data and personal data collected through the operation of a voice or facial recognition feature (as permitted by applicable law, including the privacy law in Florida).

To exercise any rights available to you under applicable law, please contact us at: privacy@taurusystems.com. We may need to verify your identity and authority before fulfilling your request.

California residents may have additional rights under the California Consumer Privacy Act, as amended, to the extent it applies to Tauru and the information at issue. Those rights may include the right to know/access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and not be discriminated against for exercising privacy rights. To submit a request, contact us at: privacy@taurusystems.com.

Children and Use by Minors

The Website is intended for business use by adults 18 years of age or older acting on behalf of an organization. It is not directed to, designed for, or intended for use by children, and it is not offered to consumers. Consistent with the Children’s Online Privacy Protection Act (“COPPA”), we do not knowingly collect personal information from children under 13. Accounts within a provisioned TReS environment are issued and administered by the Tauru customer that licenses that environment, and each customer is responsible for ensuring that the users it enrolls are adults and are authorized to use the environment. The Website does not currently apply an age gate. If we learn that we have inadvertently collected personal information from a child under 13, we will take steps to delete it promptly. If you believe that we have collected personal information from a child, please contact us at privacy@taurusystems.com.

Sensitive Personal Data Restriction

Tauru does not request sensitive personal data as Website Information except where specifically necessary and permitted by law. Please do not submit sensitive personal data through the marketing site, preview environment, support channels or other Tauru-controlled forms unless we specifically request it. Customer Data is governed separately by the applicable customer agreement and DPA; customers are responsible for determining what personal data they place in their TReS environment and for providing any required notices and obtaining any required permissions from their users and data subjects.

In addition, customers must not load into a TReS environment any (a) protected health information subject to the Health Insurance Portability and Accountability Act, unless Tauru has first executed a business associate agreement with the customer; (b) cardholder data subject to the Payment Card Industry Data Security Standard; (c) technical data or technology subject to the International Traffic in Arms Regulations or otherwise controlled for export beyond EAR99; or (d) classified national-security information.

Changes to Our Privacy Policy

It is our policy to post any changes we make to our Privacy Policy on this page with a notice that the Privacy Policy has been updated on the Website home page. If we make material changes to how we treat our users’ personal information, we will notify you by email to the primary email address specified in your account and/or through a notice on the Website home page. The date the Privacy Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and this privacy policy to check for any changes.

Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact us at:

Tauru Systems LLC

9 Union Square

Southbury, CT 06488

Email:info@taurusystems.com