Tilebox, Inc. values your privacy and is dedicated to safeguarding it. This Privacy Policy outlines the information we collect through our website (tilebox.com) and associated services provided by Tilebox, Inc. By utilizing our website or services, you agree to the collection, use, and disclosure of your personal data as described in this Privacy Policy.

Contact information

For any inquiries or concerns regarding our privacy practices, please contact our Data Protection Officer at [email protected] or through the following address:

Tilebox, Inc.
1111B S Governors Ave Suite 6076
Dover, DE 19904

Information we collect

We may collect the following information from you:

• Name

• Role

• Email address

• IP addresses

• Payment details

• Company or organization name

We obtain this information through various methods, such as forms or server-side logs.

Legal basis for processing personal data

Tilebox, Inc. processes your personal data primarily to fulfill our contractual obligations, ensuring that we can effectively deliver and maintain the services agreed upon in the respective contracts. Additionally, we process personal data to pursue our legitimate business interests, which include improving our services, enhancing user experience, and maintaining a secure platform, in compliance with applicable laws and regulations.

Purpose of Collection

We collect your personal information for the following purposes:

• To deliver and enhance our services

• To communicate with you

• To enforce our policies

• To conduct research and development

• To use for sales, marketing and promotional purposes, with your explicit consent

Data security

We prioritize the security of your personal information and have implemented appropriate measures to protect it, including:

• Utilizing http-only cookies

• Avoiding third-party cookies

• Encrypting your personal information during transmission

• Employing specialized third-party providers for storing and processing your personal information

International data transfers

Personal data, such as names and email addresses, are stored within the EU or by our GDPR and CCPA-compliant cloud providers. All our service providers adhere to the GDPR and CCPA regulations.

Children's privacy

Tilebox, Inc. is committed to protecting the privacy of children. Our services are not designed for or directed towards individuals under the age of 13 or the applicable age of consent in specific jurisdictions. We do not knowingly collect, process, or store personal information from children below the age of consent. If we become aware that we have inadvertently collected personal information from a child under the age of consent, we will take appropriate steps to promptly remove such information from our records.

Your choices and rights

You have the right to access, rectify, and object to the processing of your personal information. If you object to the processing of your personal information, please note that we may not be able to provide our services to you, as your personal information is required for authentication and payment purposes.

Rights of EU and California users

Users in the European Union (subject to GDPR) and California (subject to CCPA) have specific rights concerning their personal data, including:

• Access, rectification, and erasure of personal data

• Data portability

• Objection to or restriction of data processing

• Withdrawal of consent, if applicable

• Complaints with a supervisory authority

To exercise these rights, contact our Data Protection Officer at [email protected].

Opt-Out options

Users can opt-out of receiving marketing communications by unsubscribing from our newsletters or groups via the "unsubscribe" link provided in such communications.

Data retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected or to comply with legal, regulatory, or contractual obligations. When your personal data is no longer necessary, we will securely delete or anonymize it.

Data breach notification

In the event of a data breach, we will notify affected parties via email as soon as reasonably practicable after discovering the breach, in accordance with applicable laws and regulations.

Third-party services

We may use the following third-party services to collect, process, or store your personal information:

• Stripe – https://stripe.com/

• Clerk – https://clerk.dev/

• Simple Analytics – https://simpleanalytics.com/‍

• Google Cloud – https://cloud.google.com/‍

• Amazon Web Services – https://aws.amazon.com/

• Loops – https://loops.so/

Changes to this Privacy Policy

We reserve the right to change or modify portions of this Privacy Policy at our sole discretion to align with our practices or legal requirements. If we do so, we will post the changes on this page and indicate the date these terms were last revised. Changes will become effective no earlier than fourteen (14) days after they are posted, with exceptions for new functions of the website or services or changes made for legal reasons, which will be effective immediately. Your continued use of the website or services after the date any such changes become effective constitutes your acceptance of the updated Privacy Policy.