Revision A · Effective September 9, 2026

Privacy policy

This policy describes how Tinverse LLC handles information in its hosted Tin eQMS application at tinverse.com. Tin eQMS supports document review and AI-assisted quality work for enrolled users. Customer-operated installations have their own operators, configurations and privacy notices.

Information we receive

Google account information: your email address, email-verification status and stable Google account identifier. Where Google supplies them, we receive signed authentication-method and authentication-time information to assess account security. The sign-in flow requests the openid email scopes.
Access information: enrollment details, assigned roles, invitations, access decisions, session identifiers and related timestamps and reasons.
Review material: documents made available for review, comments, proposed edits, draft review requests, their authors or assignees, and links to exact document versions.
AI interactions: questions, recent conversation context, retrieved document excerpts, tool results and assistant responses when you use an enabled AI feature.
Operational information: request and security events, network metadata such as IP addresses, error information, and AI usage and allowance records. Support messages contain the information you choose to provide.

How we use information

We use this information to authenticate users, enforce enrollment and permissions, attribute review activity, retrieve relevant documents, provide requested AI assistance, respond to support requests, investigate security issues and operate the service. Google account access is limited to the requested sign-in permissions.

Who receives information

Authorized reviewers and administrators can access information within their assigned scope. Tinverse personnel may access information as needed for support, security and service operation. Google provides authentication and cloud hosting. Enabled remote AI features send their request content to the configured provider; the hosted Gemini integration uses Google Cloud Vertex AI.

We may disclose information when required by applicable law or to address abuse, security incidents or legal claims. The service policy prohibits selling Google user data or using it for advertising.

AI-assisted work and your choices

AI requests can include your question, recent conversation and relevant document excerpts. Personal or confidential information placed in those materials can therefore reach the configured provider. Credentials and signing keys must stay outside documents and chat. Use document navigation and fuzzy search when you want to work without a model request.

Provider processing, retention and service locations depend on the selected service and its contractual configuration. Customer-supplied AI adapters require a separate assessment and disclosure before use. This preview is intended for authorized evaluation material; patient information and production regulated records require an expressly authorized deployment and suitable agreements.

Sessions and browser storage

The application uses a secure, HTTP-only session cookie for login and request protection. Its application session lasts up to 15 minutes. The browser also remembers your sidebar preference in local storage. Chat context is held in the open page and portions may be sent with subsequent AI requests. Signing out ends the application session; your Google account session is managed separately by Google.

Storage, retention and deletion

Hosted review and access information is stored in private Google Cloud services. Storage region choices and remote AI processing can differ; international processing depends on service configuration. Access is restricted through application permissions and cloud controls.

We retain information for the review or support purpose for which it was collected and, where applicable, for security, record-integrity and legal obligations. Record type, organizational requirements and applicable obligations determine retention. Backups, object versions and required audit history can persist after active access is removed. Closing access and deleting retained records are separate requests.

To request access, correction, deletion or information about applicable retention, contact eqms-support@tinverse.com. We verify the requester's identity and authority and explain any retention requirement affecting the request. You may also manage the app's connection through your Google account settings.

Electronic signatures and future capabilities

Formal approval and electronic signing remain disabled in the hosted review application. Before enabling them, we will describe the additional identity, certificate, signature-meaning, timestamp and audit information retained by the authorized workflow and update this notice as needed.

Contact and changes

Tinverse LLC · 78 Sedgewick, Irvine, CA 92620, USA.
Privacy and support: eqms-support@tinverse.com.

Published updates will identify their revision and effective date. Material changes to data handling will be communicated through the application or an appropriate account contact before the affected use begins.