Privacy Policy

Tilebox, Inc. values your privacy and is dedicated to safeguarding it. This Privacy Policy outlines the information we collect through our website (tilebox.com) and associated services provided by Tilebox, Inc. Browsing the website does not grant consent to optional analytics; you choose whether to allow PostHog analytics through the cookie banner, video consent controls, or Cookie settings.

Contact information

For any inquiries or concerns regarding our privacy practices, please contact our Data Protection Officer at privacy@tilebox.com or through the following address:

Tilebox, Inc.
1111B S Governors Ave Suite 6076
Dover, DE 19904

Information we collect

We may collect the following information from you:

  • Name

  • Role

  • Email address

  • IP addresses

  • Payment details

  • Company or organization name

We obtain information through forms, account and payment services, and server-side processing. The marketing contact form collects your name, email address, and message. Cloudflare processes these fields to deliver your message by email to contact@tilebox.com; your email address is used as the reply-to address. Cloudflare Turnstile processes a verification token, your IP address, and browser/security information for abuse prevention. We do not include contact form contents or verification tokens in website analytics.

If you subscribe to product updates, your email address and mailing-list selection are sent to Loops to manage the subscription and send updates. You can unsubscribe using the link in those messages. If you follow our discovery-call link, booking takes place on Vimcal under its privacy practices.

If you allow website analytics, PostHog collects page activity to help us understand how the website is used and improve it. This includes public page content, page URLs and referring pages with campaign information, browser/device information, and cookie/local-storage identifiers that recognize visits. Input values are masked, and form contents are excluded from analytics. URLs and referrers can contain personal information; avoid including sensitive information in URLs.

Legal basis for processing personal data

Tilebox, Inc. processes personal data to fulfill contractual obligations and to pursue legitimate business interests such as responding to enquiries and maintaining a secure service, subject to applicable law. Optional website analytics are based on your consent, as are requested marketing subscriptions. You can withdraw analytics consent in Cookie settings or unsubscribe from marketing messages. Withholding analytics consent does not prevent you from browsing the website or contacting us.

Purpose of Collection

We collect your personal information for the following purposes:

  • To deliver and enhance our services

  • To communicate with you

  • To enforce our policies

  • To conduct research and development

  • To use for sales, marketing and promotional purposes, with your explicit consent

Data security

We prioritize the security of your personal information and have implemented appropriate measures to protect it, including:

  • Encrypting personal information during transmission

  • Using specialized providers for processing personal information

  • Validating contact requests and applying security challenges and rate limits

  • Masking input values and excluding forms from website analytics

International data transfers

Service providers may process personal data outside your country. Processing locations depend on the service and its configuration. Contact privacy@tilebox.com for information about the providers and international transfers relevant to your use of Tilebox.

Children's privacy

Tilebox, Inc. is committed to protecting the privacy of children. Our services are not designed for or directed towards individuals under the age of 13 or the applicable age of consent in specific jurisdictions. We do not knowingly collect, process, or store personal information from children below the age of consent. If we become aware that we have inadvertently collected personal information from a child under the age of consent, we will take appropriate steps to promptly remove such information from our records.

Your choices and rights

You have the right to access, rectify, and object to the processing of your personal information. If you object to the processing of your personal information, please note that we may not be able to provide our services to you, as your personal information is required for authentication and payment purposes.

Rights of EU and California users

Users in the European Union (subject to GDPR) and California (subject to CCPA) have specific rights concerning their personal data, including:

  • Access, rectification, and erasure of personal data

  • Data portability

  • Objection to or restriction of data processing

  • Withdrawal of consent, if applicable

  • Complaints with a supervisory authority

To exercise these rights, contact our Data Protection Officer at privacy@tilebox.com.

Opt-Out options

Users can opt-out of receiving marketing communications through the "unsubscribe" link in those communications. Website analytics are off until you allow them through the cookie banner, video consent controls, or Cookie settings. Withdrawing consent disables PostHog analytics, removes its active identity cookie and local storage, and reloads this page and other open Tilebox website tabs running analytics to unload PostHog. Save unfinished work first. Your denied preference and the opt-out marker remain stored. Withdrawal does not retract data already received by the provider; contact us to exercise your data rights.

Embedded videos require a separate permission and an explicit choice to load each viewer. Blocking external media removes loaded video players but does not delete third-party cookies or retract requests already made. These website settings do not control the Tilebox console, documentation, payment services, or external websites. See our Cookie Policy.

The Sentinel-2 mosaic map loads automatically as you scroll near it, independently of the external-media and analytics settings. It connects your browser directly to Mapbox and Ellipsis map services, which receive connection and browser information under their own privacy practices.

Data retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected or to comply with legal, regulatory, or contractual obligations. When your personal data is no longer necessary, we will securely delete or anonymize it.

Data breach notification

In the event of a data breach, we will notify affected parties via email as soon as reasonably practicable after discovering the breach, in accordance with applicable laws and regulations.

Third-party services

We may use the following third-party services to collect, process, or store your personal information:

  • Stripe — payments: https://stripe.com

  • Clerk — account authentication: https://clerk.dev

  • Google Cloud — cloud services: https://cloud.google.com/

  • Amazon Web Services — cloud services: https://aws.amazon.com

  • PostHog — optional website analytics: Privacy Policy

  • Cloudflare — website delivery, contact-form security, and email delivery: Privacy Policy

  • Loops — newsletter subscriptions: Privacy Policy

  • YouTube — videos you choose to load: Privacy Policy

  • Vimcal — external discovery-call booking: https://www.vimcal.com

Changes to this Privacy Policy

We reserve the right to change or modify portions of this Privacy Policy at our sole discretion to align with our practices or legal requirements. If we do so, we will post the changes on this page and indicate the date these terms were last revised. Changes will become effective no earlier than fourteen (14) days after they are posted, with exceptions for new functions of the website or services or changes made for legal reasons, which will be effective immediately. Your continued use of the website or services after the date any such changes become effective constitutes your acceptance of the updated Privacy Policy.

Last modified: September 14, 2026