Privacy Notice

Version Date: October 12, 2026

Purpose

TileSet is a product of Smash Balloon, LLC. At Smash Balloon, protecting privacy is a key priority. The purpose of this document is to set out how Smash Balloon and its affiliates (“us,” “our,” or “we”) collect, use, store, or otherwise process personal information about customers and other individuals (collectively “you”) who access or use TileSet: our websites, including https://tileset.com/, the TileSet dashboard, API and MCP server for AI agents at https://app.tileset.com/, the widgets and Link in bio pages TileSet serves, and any of our other websites, products, or services that link to this Privacy Notice (the “Services”). By using our Services, you understand that we will collect and use your personal information as described in this Privacy Notice.

In some cases, we may process your personal information pursuant to an agreement with a third-party organization. In those cases, the terms of that agreement may govern how we process your personal information. If you believe a third-party organization has asked us to process your personal information on their behalf, please consult with them in the first instance, as they will be responsible for how we process your information. For example, when a business shows your review or testimonial in a TileSet widget, that business decides what is shown. This Privacy Notice (“Notice”) does not apply to any third-party websites and apps that you may use, including those to which we link in our Services, and including the websites of our customers that show TileSet widgets. You should review the terms and policies for third-party websites and apps before clicking on any links.

We recommend that you read this Notice in full to ensure you are fully informed about the way we collect, use, store, or otherwise process your personal information as well as your privacy rights. Section 12 describes, source by source, exactly what TileSet receives and keeps, including the Instagram and Facebook data described there.

1. Collection of Personal Information

You have choices about whether you visit our websites, create an account, or provide personal information to us. However, if you do not provide us with certain personal information, you may not be able to use some functionalities of our Services. For choices and rights you may have, please see Sections 5 and 6 of this Notice.

Personal Information We Collect from You. You provide us with personal information about yourself when you:

• Register or sign in to your account, with Google or with a one-time link we email you.
• Use our products and services: connect a source, build a widget, publish a Link in bio page, or connect an AI agent.
• Create or edit a Link in bio page.
• Contact support or request a feature from the dashboard.
• Buy a plan or credits.
• Sign up for product news by email, or tell us why you cancel.

You also provide us with personal information about others when you use parts of our Services, such as when you:

• Connect a source whose content names other people, such as Google reviews (reviewer names and photos) or Instagram posts other accounts tagged you in.
• Add testimonials from your own customers, or collect them through a link you share.
• Put links or names on a Link in bio page.

Your main choice for this type of personal information is simply not providing it, such as by not connecting a source or not publishing a page. For other choices you may have, please see Section 5 of this Privacy Notice.

Examples of the categories of personal information you may provide are:

• Identifiers and Contact Information. This includes your name and email address.
• Commercial Information. This includes billing information (your billing country and state, business name and VAT or tax ID if you give one), and products or services purchased. Our payment processor collects and holds your card; we never see or store your card number.
• Your Account Data. This includes your sign-in information (your email address, and the Google account identifier when you sign in with Google; there is no TileSet password) and your account settings.
• Other Contacts Data. Information about other people you add, such as your customers’ testimonials (a name, role or company, words, star rating and date).
• Customer Service and Communications Information. This includes questions and other messages or feedback you address to us directly through the dashboard’s support and feature request forms, by email, or in the optional question when you cancel.

Personal Information We Collect Automatically. We may automatically collect personal information from you and your devices when you use our Services, including when you visit our websites without signing in. For choices you may have on what information we automatically collect, please see Section 5 of this Privacy Notice.

We collect personal information about how you use our Services and the devices (e.g., computers, mobile phones, tablets) you use to access our Services. This may include, but is not limited to, the following:

• Device Data. This includes your IP address, which we use to protect the Services from abuse in rate-limit counters that expire on their own (most within a minute, none after more than two days) and to tell which country your connection comes from. We do not store your browser type or a device identifier.
• Usage Data. This includes a record of account actions (the audit log), anonymous widget usage signals, page paths if you turn on page-level insights, product usage records, and, on tileset.com only if you allow it, Google Analytics measurements of your visit, each described in Section 12.
• Transactional Data. This includes the country your connection came from and the country of your card when you check out, which tax rules ask us to keep.
• Marketing Data. This includes your choice about receiving product news from us, with a record of when and how you made it.

Some of the information we collect automatically is captured using cookies, which are text files containing small amounts of information that are downloaded on your device, or related technologies such as your browser’s local storage. For additional information about cookies and related technologies, including details of how to opt-out, please read our Cookie Notice and “Your Privacy Rights and Choices” below.

Personal Information We Collect from Other Sources. Subject to applicable law, we may collect personal information about you from others, such as:

• Third-Party Sources. Examples of third-party sources include affiliates (companies under common ownership or control of Smash Balloon), service providers, and others where they are legally allowed to share your personal information with us. For example, when you sign in with Google, Google provides your email address and name to us; when you buy a plan, our payment processor tells us the status of your payment; and when you connect a source, the platform behind it provides that source’s content (Section 12).
• Other Customers. Other customers may give us your personal information, for example when a business you reviewed connects its reviews, or adds your testimonial.
• Combining Personal Information from Different Sources. We may combine the personal information we receive from other sources with personal information we collect from you (or your device) and use it as described in this Notice.

Personal Information We Collect & Process on Behalf of Customers. When our business customers use certain Services, we generally process and store limited personal information on their behalf as a data processor. For some products we act as a data processor and process personal information on the customer’s behalf and in accordance with their instructions. In those instances, the customer is the data controller and is responsible for most aspects of the processing of the personal information. For some products we may act as a processor and as a controller in certain circumstances. In TileSet, this covers the content a customer chooses to show in their widgets and Link in bio pages (such as reviews, posts and testimonials that name other people) and page paths a customer chooses to collect; our Processor Policy applies. If you have any questions or concerns about how personal information is processed in these cases, including how to exercise your rights as a data subject, you should contact the customer. If we receive any rights requests concerning instances where we act as a data processor, we will forward your query on to the relevant customer.

2. Use of Personal Information and Lawful Bases for Processing

In general, and subject to applicable law, we will use your personal information to provide, maintain, and improve our Services, develop new Services, and market TileSet. Please see the section below entitled “Further Information on the Personal Information We Process and Our Purposes,” which provides more specific information on these purposes, examples of the types of information processed for these purposes, and the lawful bases on which we rely to process it.

Lawful Basis for Processing Your Personal Information. If applicable data protection law requires a lawful basis for processing, and where Smash Balloon acts as a data controller, our lawful basis for collecting and using the personal information described in this Notice will depend on the type of personal information concerned and the specific context in which we collect or use it.

We normally collect or use personal information only where we need the personal information to perform a contract with you or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may have a legal obligation to collect or retain personal information or may need the personal information to protect your vital interests or those of another person. In certain circumstances, we may ask for your consent (separately from any contract between us) before we collect, use, or disclose your personal data.

If we process sensitive personal information about you, as well as ensuring that one of the lawful bases referenced above applies, we will make sure that one or more of the grounds for processing sensitive personal information applies.

Note that in situations where Smash Balloon acts as a processor, it is our customer who determines the appropriate legal basis associated with processing activities, and queries about the applicable lawful basis should be directed to them.

Further Information on the Personal Information We Process and Our Purposes

The table below provides more specific information on our purposes, the types of information that may be processed, and the legal bases on which we process it. The examples provided in the table cannot, of course, be exhaustive.

Depending on the jurisdiction in which you live, there may be other applicable lawful bases for processing your personal information that are not listed here. If you have questions about our lawful bases or need further information, please contact us using the contact details provided in Section 11 of this Notice.

Purpose	Examples of personal information that may be processed	Lawful basis for processing
Provide you with and collect payment for the products and Services you request, including showing your widgets and Link in bio pages	Identifiers and Contact Information; Commercial Information; Account Data; Customer Service and Communications Information; Transactional Data; Device Data	Contract
Create your account and manage your relationship with us (e.g., communicating with you, providing you with requested information)	Identifiers and Contact Information; Account Data; Customer Service and Communications Information	Contract; Legitimate interests (to operate, provide and improve the Services; or to communicate with you, where our communications are not necessary to perform or enter into a contract with you)
Maintain and improve the security of the Services	Account Data; Device Data; Usage Data; Transactional Data	Legitimate interests (to operate, provide and improve the Services; to detect or prevent illegal activities; and to manage the security of our IT infrastructure and the Services, and the safety and security of our employees, customers and vendors)
Troubleshoot the Services, including answering support questions, customer education and training, and resolving disputes	Identifiers and Contact Information; Account Data; Customer Service and Communications Information; Device Data; Usage Data; Transactional Data	Legitimate interests (to operate, provide and improve the Services; and to communicate with you)
Prevent, investigate, and respond to fraud, unauthorized access to or use of our Services, breaches of terms and policies, or other wrongful behavior	Identifiers and Contact Information; Account Data; Device Data; Usage Data; Transactional Data	Contract; Legitimate interests (to operate, provide and improve the Services; to detect or prevent illegal activities; and/or to manage the security of our IT infrastructure and the Services, and the security of our employees, customers, and vendors)
Analyze, improve, and enhance the Services and research and develop new features and products	Customer Service and Communications Information (more specifically, any product feedback you provide); Usage Data	Consent (where required by applicable law); Legitimate interests (to operate, provide and improve the Services; and use insights to research and develop new products and services)
Send you information about new features or products by email	Identifiers and Contact Information; Marketing Data	Consent
Comply with legal and regulatory obligations to which we are subject	Identifiers and Contact Information; Account Data; Commercial Information; Transactional Data; Customer Service and Communications Information	Legal obligation
Protect our legal rights, for example to establish, exercise, or defend our rights in legal claims	Any information relevant or potentially relevant to a dispute or legal proceeding affecting us	Legitimate interests (to protect our business interests)
Record details about transactions	Identifiers and Contact Information; Account Data; Device Data; Transactional Data	Contract; Legitimate interests (to operate, provide and improve the Services)

Other Uses. We may aggregate the personal information we collect, or insights generated or derived from the use of our Services or remove pieces of personal information (“de-identify”) to limit or prevent identification of any particular user or device to help with goals like research and product development. Where such information has been aggregated and anonymized so that it is no longer considered personal information under applicable data protection law, this Notice does not apply.

AI Model Training and AI Assistants. We never use your personal information, or content from the sources you connect, to train any AI model. TileSet sends personal information to an AI model in one place only: the automated testimonial check described in Section 12, which sees a testimonial’s name, role or company, star rating and words. Two kinds of AI assistant can see some of your account information, and both only after someone signs in:

• An assistant you connect. TileSet is built to be set up by an AI agent. If you connect one (for example by adding TileSet to Claude, Cursor or another tool), you sign in and approve it, and it acts for you on your account only. Through TileSet’s MCP tools or an API key it can see your sources’ names and status, your widgets and their embed code, and counts that describe a source’s content. It never receives the content itself (no post, review, name, picture or link), and nothing from Instagram or Facebook beyond a source’s name, its platform account or Page ID, and its status. It never sees an access token. Your widgets themselves are public on your site, so anyone with a widget’s ID can load what the widget shows, as any visitor to your site does. The company behind that assistant handles what it sees under your agreement with them, not ours. You can disconnect an assistant at any time under Agent Access in the dashboard.
• Our staff’s assistant. Our staff may use an AI assistant, provided by an AI model provider, when working on your account in our internal admin tools, which sit behind our own staff sign-in. It then sees the account details staff can see (Section 3): your email, plan, billing status, credit history and support requests, your sources’ names and status, error messages, and, if Meta has asked us to delete or disconnect your data, the Meta user ID that request named. It never sees an access token or your sources’ content.

3. Disclosures of Personal Information

Subject to applicable law, including to the extent applicable law requires us to obtain consent, we may disclose personal information as follows:

• Service Providers. We disclose your personal information to service providers we use to support our Services. These companies provide services like hosting and storage, sign-in, payments, email delivery, cookie consent, website analytics, review data, testimonial moderation, and an AI assistant for our staff; Section 12 names what each receives. We have contracts with our service providers with applicable privacy and data protection language and controls that require the safeguarding and lawful and proper use of your personal information.
• Affiliates. We may disclose your personal information to other companies under common ownership or control with Smash Balloon, such as Awesome Motive, whose email platform sends our product news. These companies use your personal information as described in this Notice.
• Public or Government Authorities. We may disclose your personal information to comply with our legal obligations, regulations, or contracts, or to respond to a court order, administrative, or judicial process, such as a subpoena, government audit, or search warrant where we are legally compelled to do so. We also may disclose your information when there are threats to the physical safety of any person, violations of Smash Balloon policies or other agreements, or to protect the legal rights of third parties, including our employees, users, or the public.
• Corporate Transactions. Your personal information may be disclosed or transferred to relevant third parties in the event of, or as part of the due diligence for, any proposed or actual reorganization, sale, merger, consolidation, joint venture, assignment, transfer, or other disposition of all or part of our business, assets, or stock (including in connection with any bankruptcy or similar proceeding). If a corporate transaction occurs, we will provide notification of any changes to the control of your information, as well as choices you may have.
• Consent. We may disclose your personal information in other ways if you have asked us to do so or have given consent. For example, with your consent, we post user testimonials that may identify you.

We do not sell, license, or share your personal information with data brokers or advertisers, and we do not use advertising or marketing technologies on our websites, the dashboard, widgets or Link in bio pages. Google Analytics, which runs on tileset.com only if you allow it, works for us as a service provider, with Google signals and ad personalization turned off (Section 12).

Your personal information may also be disclosed as described below:

• Our staff. Staff with an assigned role on our internal admin tools can see account details (your email, plan, billing status, credit history, support requests, and the names and status of your connected sources) to provide support and handle billing. They cannot see or retrieve any access token. Every change staff make to an account is logged with the staff member’s name and a reason.
• Your AI agent. When you connect an AI agent or create an API key, it receives what Section 2 describes.
• Payment Processors. When you buy a plan or credits, your payment details go to our payment processor.
• Public Information.
  • User-Generated Content. What you publish on a Link in bio page, and the content of your widgets, is public and may be read, collected, and used by others.
  • Profile Information. The name, bio, picture and links on your Link in bio page can be viewed by anyone with its address.

4. Retention of Personal Information

We keep your personal information for no longer than necessary for the purposes for which it is processed. The length of time for which we retain personal information depends on the purposes for which we collected and use it and/or as required to comply with applicable laws as set out in our data retention policy and information handling standards. Generally, this means we retain your personal information to comply with any retention compliance obligations or statutory requirements or for purposes of performing a contract with you. Where there are technical limitations that prevent deletion or anonymization, we safeguard personal information and limit active use of it through implementing appropriate organizational technical and security measures.

For TileSet, this means:

• An Instagram or Facebook Page access token is kept for as long as its source stays connected; disconnecting the source, deleting all your Meta data from Settings, the platform revoking our access, or deleting your account removes it. No access token is kept for these sources: Google, YouTube, X, testimonials, Twitch, Kick, Pinterest.
• Cached feed and review content is refreshed from the source rather than kept indefinitely: every refresh that brings something new replaces the copy, and a copy nothing refreshes expires automatically within 30 days. When two accounts connect the same public Google place or YouTube channel (or Twitch channel), one fetch can serve both for up to 10 minutes; that shared copy holds only what the platform shows anyone and expires on its own. A resized tile image is kept for as long as its source stays connected, because each refresh restarts its expiry, and it is deleted with the source; a YouTube tile image instead expires within 7 days of being fetched and is fetched again by the next update, and a YouTube channel’s name is checked with YouTube within 30 days and deleted when YouTube no longer finds the channel. How often we refresh depends on the source and on the update speed or schedule you choose for it, from every 15 minutes to once a week, and scheduled refreshes slow down when a month’s credits run low. On paid plans you can also ask for an update, or have a webhook ask for one, as often as every 5 minutes (every 15 minutes for YouTube, every hour for Google reviews).
• Your account details are kept while your account exists. Sessions end after 7 days or when you sign out. An emailed sign-in link’s record (its hash, your address, the times and the country) is deleted within a day of the link expiring, whether or not it was used.
• When you delete your account, we keep a one-way fingerprint of your email address for 30 days so that a new account on the same address does not get the sign-up bonuses again. Then it is deleted.
• Your Lindris contact is kept while your account exists, and deleted from Lindris when your account is deleted, normally within 15 minutes of the deletion running. If you withdraw from product news, the contact is marked within 15 minutes to receive emails about the service only. If you unsubscribe with the link in any of our emails, the contact is marked unsubscribed and we send it nothing more.
• Billing records in our database are deleted with your account. Our payment processor keeps your customer record and invoices after that, because invoices are tax records we are required to keep. If you claimed a one-time card bonus, the payment processor’s anonymous fingerprint of that card is kept after deletion, so the same card cannot claim the bonus again. Support and feature requests are deleted with your account.
• Link in bio pages are kept until you delete them or your account. An address a page gave up redirects or stays held for 30 days, then for a year no other account may take it (only the address is kept). A report a visitor sends about a page is kept until the page’s account is deleted.
• API keys you create are kept until you revoke them. A key an AI agent received through the MCP sign-in is revoked after 90 days unused.
• Audit log entries are kept for 12 months, then deleted. An entry that proves a deletion happened can outlive the account it describes, but not the 12-month window. Records of staff actions are kept after an account is deleted, because they are our record of what staff did; they hold your account’s internal ID and plan and credit values, not your personal details.
• Product usage records are kept for approximately 90 days, then age out on their own. Turning Share anonymous product usage off stops new records at once; the ones already made age out the same way, and once your account is deleted nothing links them to you. The campaign tags you signed up with are deleted with your account.
• Widget usage events are kept for approximately 90 days, then age out on their own. Because they carry no information that identifies a visitor, they are not part of the deletion described below: deleting a widget, a source, or an account does not, and cannot, reach back and remove that widget’s already-recorded usage events.
• Page paths, if you have page-level insights on, are stored in our own database rather than with the usage events above, which is what makes them deletable one row at a time. Turning the setting off deletes every path already collected for your widgets, and that deletion happens immediately. Two things we will not overstate. First, a page that was already loaded can send one more path for a short while after you turn the setting off, and anything recorded that way is normally removed within a day by a daily cleanup, and within about two days if that cleanup fails and has to wait for the next one. Second, while we are recording a path we also keep an internal marker that has the path in its own name, so that we write it at most once an hour; the same delete clears those markers, and any the delete cannot reach expire on their own within an hour. Page paths are also deleted with the widget or the source that produced them and with your account, and any that are never deleted age out on their own 90 days after the last time we saw them.
• If your plan changes so it no longer includes page-level insights, we stop collecting page paths and stop showing them to you straight away. We keep your setting as you left it, so it still reflects your choice if you upgrade again, and the paths already collected age out under the same 90 day rule.
• Once a deletion is triggered (you disconnect a source, you delete all your Meta data or you delete your account, or Instagram or Facebook tells us you revoked access or forwards a data deletion request on your behalf), we complete it within 7 days. The access token itself is removed immediately, not after the 7 days.
• Our database provider keeps an automatic recovery history of the database for 30 days, which we cannot turn off, and we keep encrypted backups of the database for at most 90 days. Data we delete leaves the live database as described above; it can remain in that history and those backups until they age out. We do not read from them in normal operation.

5. Your Choices

This section describes many of the actions you can take to change or limit the collection, use, storage, or other processing of your personal information.

• Profile. You are not required to publish a Link in bio page. If you do, you can access and review this personal information, and change or delete it in the dashboard.
• Marketing Messages. You can opt out of email marketing messages we send you by clicking on the “unsubscribe” link in the email message, or under Settings, “Product news and tips by email”. If you are a registered user of our Services, or if you have engaged in transactions with us, we may continue to send transactional or relationship messages (e.g., account notifications) after you opt out of marketing messages.
• Cookies and Other Related Technology. You can decline cookies through your browser settings or via the other methods detailed in our Cookie Notice. However, if you decline cookies, you may not be able to use some parts of our Services. Please note we do not recognize or respond to browser-initiated Do Not Track signals.
• Product usage and page paths. Stop sharing under Settings, “Share anonymous product usage”, turns product usage records off. Page-level insights are off unless you turn them on.
• Sources. You can disconnect any source at any time, and delete all your Meta data at once from Settings.
• Closing Your Account. If you wish to close your account, sign in to the dashboard and delete your account from Settings. This cancels any paid plan.
• Complaints. We are committed to resolving valid complaints about your privacy and our collection, use, storage, or other processing of your personal information. For questions or complaints regarding our data use practices or this Notice, please contact us as described on our Privacy Requests page.

6. Your Privacy Rights and Choices

Rights Regarding Your Personal Information. You may have certain rights related to your personal information, subject to local data protection laws, as described in more detail below. To exercise any of these rights, please contact us as described on our Privacy Requests page. If you are a California resident, you can find more information about your rights with respect to your personal information in Section 8 (“Notice to California Residents”) below.

• You can access and review personal information associated with your account at any time. You can export everything we hold about your account as a JSON file from the dashboard’s Settings screen at any time: your account details and settings, connected sources (never token material), your testimonials, widgets, Link in bio pages, API keys (never a secret), any page paths collected, your support and feature requests, your billing and credit records, deletion records, and your audit history. The file also names what it deliberately leaves out and why, so a short file is not read as us holding nothing. It exists so you can see and keep your own data; it is not a backup, and there is no way to load it back in.
• You also can request the following information: how we collect and use your personal information and why; the categories of personal information involved; the categories of recipients of your personal information; how we received your personal information and its source; our business purpose for using your personal information; and how long we use or store your personal information or the manner in which we determine relevant retention periods.
• You have a right to correct inaccurate personal information about you, and you should notify us immediately if you believe the personal information we hold about you is inaccurate, incomplete, or out-of-date.
• In certain situations, you can ask that we erase or stop using your personal information, object to or restrict the use of your personal information or export your personal information to another controller.
• Where we rely on your consent to process your personal information, you have the right to decline consent and/or, if provided, to withdraw consent at any time. This will not affect the lawfulness of processing prior to the withdrawal of your consent. At any time, you can request that we stop using your personal information for direct marketing purposes. See Section 5 (“Your Choices”) of this Notice for more information on your choices.
• If you are unsatisfied with our response to your complaint, you have a right to raise questions or complaints with your local data protection authority at any time.
• Depending on applicable law, you may have the right to appeal our decision to deny your request, if applicable. If we deny your request, we will provide you with information on how to appeal the decision, if applicable, in our communications with you.

If you make a request to exercise the rights referenced above, we will require you to provide certain information for identity verification purposes. If you have an account with us, we may verify you through your login of your account. If you do not have an account with us, we may require you to provide additional information from which we can confirm your identity. You may authorize an agent to make a request to us on your behalf and we will verify the identity of your agent or authorized legal representative by either seeking confirmation from you or documents that establish the agent’s authorization to act on your behalf.

Certain personal information may be exempt from such requests under applicable law. We need certain types of personal information so that we can provide the product and Services to you. If you ask us to delete it, you may no longer be able to access or use our product and Services.

If you wish to exercise these rights, please contact us as described on our Privacy Requests page.

Instagram and Facebook data. From the dashboard’s Settings screen you can delete all your Meta data: every Instagram, Instagram tagged and Facebook source, the widgets built only on them (a widget that also shows other sources keeps those), their tokens, cached posts, profile pictures and tile images are deleted at once, your other sources and your account stay, and you get a confirmation code for the deletion. We also ask Facebook to remove TileSet’s permissions for the Facebook account that connected your Pages, unless another TileSet account still uses that connection; Instagram offers no way for us to do that, so remove TileSet in their settings if you want the connection gone on their side too. Our audit log keeps the Meta account ID for 12 months as the record of what was deleted. You can delete your account from the same screen; this immediately revokes your sessions and API keys and starts the deletion described above. If Instagram or Facebook forwards us a data deletion request on your behalf, we honor it and provide a status page, with a confirmation code, showing whether the request is complete.

Right to Opt-Out of Sales of Personal Information and Processing of Personal Information for Targeted Advertising Purposes. Depending on your jurisdiction, you may also have the right to opt out of “sales” of your information and “processing of your information for targeted advertising purposes.”

As explained in Section 3 (“Disclosures of Personal Information”) above, we do not sell your personal information, and we do not disclose it to third parties for targeted advertising, so there is nothing to opt out of today. If that ever changes, we will update this Notice first and give you a way to opt out. Depending on your jurisdiction, you may be permitted to designate an authorized agent to submit requests on your behalf. Please note that we do not knowingly sell the personal information of minors under 16 years of age without legally required affirmative authorization.

Please note that if you have a legally recognized browser-based opt-out preference signal turned on via your device browser, we recognize such preference in accordance with applicable law.

Transfers to the U.S. and Third Countries. Subject to applicable law, we may transfer your personal information outside of your jurisdiction, including for further processing. TileSet runs on a global network, so your information may be processed in the United States and in other countries. Smash Balloon has adopted a Processor Policy to facilitate the transfer of personal information from the European Economic Area and/or United Kingdom (“EEA”) to Smash Balloon outside of the EEA. Transfers outside the Smash Balloon group are only made to organizations that agree to adhere to the standards in our Processor Policy or use another valid alternative (such as EU Standard Contractual Clauses) under data protection law.

7. Children’s Privacy

Our Services are not designed for and are not marketed to people under the age of 18 or such other age designated by applicable law (“minors”). We do not knowingly collect or ask for personal information from minors. We do not knowingly allow minors to use our Services. If you are a minor, please do not use our Services or send us your personal information. We delete personal information that we learn is collected from a minor without verified parental consent. Please contact us as described on our Privacy Requests page if you believe we might have personal information from or about a minor that should be removed from our system.

8. Notice to California Residents

In addition to the other information and rights described in this Privacy Notice, California residents are also entitled to certain additional information and have certain additional rights under the California Consumer Privacy Act (“CCPA”) with respect to their personal information. If you are a resident of California (a “Consumer” as defined by the CCPA), this section of the Privacy Notice applies to you. If you are not a Consumer, this section does not apply to you and you should not rely on it.

A. Information We Collect and How We Use and Disclose It

Below is a summary of the categories of personal information, including sensitive personal information, that we have collected in the past 12 months leading up to the effective date of this Notice, as well as the purposes for which we use the information and the categories of third parties to whom we disclose or “sell/share” the information.

Categories of Personal Information Collected	Purpose of Use	Categories of Third Parties to Which Information is Disclosed for Business Purposes	Categories of Third Parties to Which Information is Sold/Shared
Identifiers (e.g., name, email address, device identifiers)	Provide and collect payments for the Services. Communicate with you. Send you product news you asked for. Analyze and improve the Services and develop new features and products. Troubleshoot the Services, including answering support questions and resolving disputes. Manage the Services platform, including support systems and security. Prevent, investigate, and respond to: fraud, unauthorized access to or use of our Services, breaches of terms and policies, or other wrongful behavior. Comply with legal obligations. Meet legal retention periods. Establish, exercise, or defend our rights in legal claims.	Service providers; Payment processors; Affiliates; Entities for legal and security purposes; Entities for sales or transfer of business or assets; Others with your consent	N/A: we do not sell/share this information
Commercial information, including financial or payment information and transaction information	Provide and collect payments for the Services. Analyze and improve the Services and develop new features and products. Troubleshoot the Services, including answering support questions and resolving disputes. Manage the Services platform, including support systems and security. Prevent, investigate, and respond to: fraud, unauthorized access to or use of our Services, breaches of terms and policies, or other wrongful behavior. Comply with legal obligations. Meet legal retention periods. Establish, exercise, or defend our rights in legal claims.	Service providers; Payment processors; Affiliates; Entities for legal and security purposes; Entities for sales or transfer of business or assets	N/A: we do not sell/share this information
Customer service information (e.g., questions and other messages you address to us directly through the dashboard or by email)	Provide the Services. Communicate with you. Analyze and improve the Services and develop new features and products. Troubleshoot the Services, including answering support questions and resolving disputes. Prevent, investigate, and respond to: fraud, unauthorized access to or use of our Services, breaches of terms and policies, or other wrongful behavior. Comply with legal obligations. Meet legal retention periods. Establish, exercise, or defend our rights in legal claims.	Service providers; Affiliates; Entities for legal and security purposes; Entities for sales or transfer of business or assets; Others with your consent	N/A: we do not sell/share this information
Internet or other electronic network activity information (e.g., IP address, device attributes, cookie IDs, data about how you interact with the Services)	Provide the Services. Analyze and improve the Services and develop new features and products. Troubleshoot the Services, including answering support questions and resolving disputes. Manage the Services platform including support systems and security. Prevent, investigate, and respond to: fraud, unauthorized access to or use of our Services, breaches of terms and policies, or other wrongful behavior. Comply with legal obligations. Meet legal retention periods. Establish, exercise, or defend our rights in legal claims.	Service providers; Affiliates; Entities for legal and security purposes; Entities for sales or transfer of business or assets; Others with your consent	N/A: we do not sell/share this information
Geolocation data, limited to the country (and, for tax, the state) of your connection and your card	Provide the Services. Troubleshoot the Services, including answering support questions and resolving disputes. Manage the Services platform including support systems and security. Prevent, investigate, and respond to: fraud, unauthorized access to or use of our Services, breaches of terms and policies, or other wrongful behavior. Comply with legal obligations. Meet legal retention periods. Establish, exercise, or defend our rights in legal claims.	Service providers; Affiliates; Entities for legal and security purposes; Entities for sales or transfer of business or assets; Others with your consent	N/A: we do not sell/share this information
Information about others, such as testimonials you add and the reviews and posts your sources show	Provide the Services. Analyze and improve the Services and develop new features and products. Troubleshoot the Services, including answering support questions and resolving disputes. Manage the Services platform including support systems and security. Prevent, investigate, and respond to: fraud, unauthorized access to or use of our Services, breaches of terms and policies, or other wrongful behavior. Comply with legal obligations. Meet legal retention periods. Establish, exercise, or defend our rights in legal claims.	Service providers; Affiliates; Entities for legal and security purposes; Entities for sales or transfer of business or assets; Others with your consent	N/A: we do not sell/share this information
Sensitive personal information, including account log-in (your sign-in and API keys, which we store only as one-way hashes) and payment card details (held by our payment processor, not by us)	Provide the services. Manage the Services platform, including support systems and security. Prevent, investigate and respond to: fraud, unauthorized access to or use of our Services, breaches of terms and policies, or other wrongful behavior. Comply with legal obligations. Meet legal retention periods. Establish, exercise, or defend our rights in legal claims.	Service providers; Payment processors (payment card details only); Entities for legal and security purposes; Entities for sales or transfer of business or assets; Others with your consent	N/A: we do not sell or share this information

B. The Right to Opt-Out of Sales/Sharing of Personal Information

Consumers have the right to opt out of “sales” of their personal information or “sharing” of their personal information for cross-context behavioral advertising purposes under the CCPA. As explained in our Privacy Notice above, we do not sell personal information and we do not share it for cross-context behavioral advertising: no advertising or marketing technologies run on our Services.

Please note that we do not knowingly sell the personal information of minors under 16 years of age without legally required affirmative authorization.

If you have a legally recognized browser-based opt-out preference signal turned on via your device browser, we recognize such preference in accordance with applicable law.

C. Information Rights

Consumers have other rights with respect to their Personal Information under the CCPA. This includes the right to request that we:

• Provide you the categories of personal information we have collected or disclosed about you in the last 12 months; the categories of sources of such information; the business or commercial purpose for collecting or selling your personal information; and the categories of third parties with whom we shared personal information.
• Provide access to and/or a copy of specific pieces of information we hold about you.
• Delete certain information we have about you.
• Correct inaccurate personal information we have about you.

You may have the right to receive information about the financial incentives that we offer to you (if any). You have the right not to be discriminated against for exercising your CCPA rights. We will not deny, charge different prices for, or provide a different level of quality of goods or services with respect to Consumers who choose to exercise their CCPA rights.

Consumers may submit requests to access, delete, or correct their personal information using any of the following methods:

1. You can access and review personal information associated with your account at any time, and export or delete it from the dashboard’s Settings screen.
2. You may contact us as described on our Privacy Requests page or by email as outlined in Section 11.

For security purposes, we will attempt to verify your identity prior to fulfilling your request. If you have an account with us, we may verify your identity through your login to your account. If you do not have an account with us, we may need to respond to your request or otherwise contact you to request additional information from you to verify your identity (including, but not limited to your name or email address).

If we can verify your identity, we will respond to your request to the extent we are able to and as required by law. If we cannot verify your identity, we may request additional information from you or we may deny your request. If we are unable to fulfill your request in its entirety, we will provide further information to you about the reasons that we could not comply with your request.

Certain personal information may be exempt from such requests under applicable law. In addition, we need certain types of personal information so that we can provide the product and Services to you. If you ask us to delete it, you may no longer be able to access or use our product and Services.

D. Authorized Agents

Consumers may designate an agent to make CCPA requests on their behalf. For Consumers who do so, we will take steps to verify both the identity of the consumer seeking to exercise their rights as described above, and to verify that the consumer’s agent has been authorized by them to make a request on their behalf by requesting a signed written authorization or a copy of a power of attorney.

E. “Shine the Light”

California residents may ask for a list of third parties that have received your personal information for direct marketing purposes during the previous calendar year. This list also contains the types of personal information shared. We provide this list at no cost. If you are a California resident and would like to request this information, please contact us as described on our Privacy Requests page.

9. How We Protect Your Personal Information

We have implemented appropriate technical, physical, and organizational measures to protect your personal information from misuse or accidental, unlawful, or unauthorized destruction, loss, alteration, disclosure, acquisition, or access, as well as all other forms of unlawful processing. To achieve this, we have developed and implemented sub-policies and guidelines relating to the protection of your personal information. For example, our staff is permitted to access customer personal information only to the extent necessary to fulfill the applicable business purpose(s) and to perform their job, subject to confidentiality obligations.

Everything is stored on Cloudflare’s infrastructure: Cloudflare D1 for account data, sources, page paths, and the audit log, and Cloudflare KV for cached and short-lived working data (the content and thumbnail caches, sign-in codes, rate-limit counters, and two internal markers used while recording page paths, one of which holds a page path in its own name for up to an hour). Every platform access token (Instagram and Facebook) is encrypted before it is stored. Session identifiers and API keys are stored only as one-way hashes, never in a form that could be read back as the original value.

10. Changes to This Privacy Notice

We may amend this Notice to reflect changes in the law, our companies, our Services, our data processing practices, or advances in technology. Our use of the personal information we collect is subject to the Privacy Notice in effect at the time such personal information is used. Depending on the type of change, we may notify you of the change by posting on this page. The Version Date at the top of this Notice shows when it last changed.

11. How to Contact Us

For questions or complaints regarding our use of your personal information or this Notice, please contact Smash Balloon, LLC at privacy@tileset.com.

12. Supplemental Privacy Disclosures

This section describes, for each part of TileSet, what we receive, what we keep, and who else is involved.

Account information

When you sign in with Google, we receive and store your email address and, if Google provides one, your display name. We never see or store your Google password. The Google sign-in token is checked once and then discarded; we do not save it.

You can also sign in with a one-time link we email you. We then store your email address and, for each link we send, a one-way hash of the link (never the link itself), when it was sent and when it was used, and the country the request came from (never your IP address). The link works once and expires after 15 minutes, and its record is deleted within a day of it expiring, whether or not it was used. The form that asks for a link uses a Cloudflare Turnstile check and is rate limited. Signing in with Google and by email with the same address reaches the same account. The email is sent by our email provider, who handles it only to deliver it.

Meta Platform Data: Instagram and Facebook

The next three parts apply only if you connect an Instagram account, the Instagram posts you are tagged in, or a Facebook Page.

Instagram sources

When you connect an Instagram account as a source, we store that account’s access token (encrypted), its Instagram user ID, and its @username, so we can fetch and refresh your feed. We cache the feed content itself (captions, media URLs, thumbnails, permalinks, timestamps, and usernames) so your widget loads fast without a request to Instagram on every page view. Each refresh overwrites that copy, and a copy nothing refreshes expires on its own within 30 days. We also store resized copies of each post’s lead image in two sizes, the larger capped at 1,080 pixels, for as long as the source stays connected.

Facebook Page sources

When you connect a Facebook Page as a source, we store that Page’s access token (encrypted), the Facebook user ID of the admin who connected it, and the Page’s name, so we can fetch and refresh its posts. We cache each post’s text, media URLs, permalink, timestamp, and reaction and comment counts on the same terms as an Instagram feed: overwritten by each refresh, and expiring on its own within 30 days if nothing refreshes it. We never store who reacted or commented, only the counts. We also store resized copies of each post’s lead image in two sizes, the larger capped at 1,080 pixels, so your widget’s tiles keep rendering between refreshes; those copies are kept for as long as the source stays connected. We refresh a connected Page’s posts on the schedule you choose, at most about once an hour, and on paid plans also when you ask for an update or a webhook you set up calls us, at most once every 5 minutes. A Page access token does not expire on its own, so we keep it until you disconnect the source, until Facebook tells us you revoked our access, or until you delete your account.

Instagram tagged post sources

When you connect the posts other Instagram accounts have tagged your Instagram professional account in, you connect them through the Facebook Page that account is linked to, because that link is the only way Instagram makes tagged posts available. We store that Page’s access token (encrypted), the Facebook user ID of the admin who connected it, and the Instagram account’s ID and @username, so we can fetch and refresh the tagged posts. We cache each tagged post’s caption, media URLs, permalink, timestamp, and like and comment counts, plus the public @username of the account that posted it and a link to its profile, which may be shown as a credit to that account. These are other people’s public posts that name you, so the poster’s username is the one piece of information here about someone other than you and your visitors. We never store who liked or commented, only the counts, and we store nothing else about the poster. The cached copy and the resized tile images are kept on the same terms as a Facebook Page’s posts: each refresh overwrites the copy, a copy nothing refreshes expires on its own within 30 days, and the tile images are kept while the source stays connected. We refresh tagged posts on the schedule you choose, at most about every 15 minutes, and on paid plans also when you ask for an update or a webhook you set up calls us, at most once every 5 minutes. If Instagram limits how often we can ask, your widget keeps showing the last posts we fetched rather than going blank. The Page access token is kept until you disconnect the source, until Facebook tells us you revoked our access, or until you delete your account.

Permissions we request from Meta

When you connect an Instagram account through Instagram Login, our app requests one permission:

• instagram_business_basic: to read the connected account’s own profile (username, account ID, profile picture), which labels the source in the dashboard and the widget header, and the account’s own media, which the widget shows.

When you connect a Facebook Page, or Instagram tagged posts, through Facebook Login, our app requests these permissions:

• pages_show_list: to list the Pages you manage (Page name and ID), so you choose which Pages become sources. Pages you do not choose are not stored.
• pages_read_engagement: to read the chosen Page’s own posts (text, images, permalink and time), their reaction and comment totals, and the Page’s name and picture for the widget header. We read totals only, never who reacted or commented.
• pages_read_user_content: requested with pages_read_engagement for that same read of the Page’s own published posts. We do not show, store or act on posts, comments or reviews that other people leave on the Page.
• business_management: only to include, in that list, the Pages you can reach through a business portfolio. We make no change to any business asset and read nothing else from the portfolio.
• instagram_basic: for tagged posts, to read the Instagram professional account linked to each Page you manage (account ID and username) and that account’s tagged media, as described under “Instagram tagged post sources”.
• instagram_manage_comments: required by Meta for the tagged media read. We read no comment text and never create, reply to, hide or delete a comment; we keep only each tagged post’s comment count.

TileSet only reads: it never posts, comments or messages, and it never reads insights. Instagram and Facebook content is shown only in your own dashboard and your widgets: no AI agent and no API key ever receives it. You can delete all Platform Data at any time from the dashboard’s Settings screen with “Delete all Meta data”, as described in Section 6, or by disconnecting a source. When you remove TileSet in your Instagram or Facebook settings, Meta tells us and we delete the access token at once and the rest within 7 days. When Meta forwards us a data deletion request on your behalf, we answer with a confirmation code and a status page at app.tileset.com that shows whether the deletion is complete.

Google Business sources

When you connect a Google Business location, we store the Google Place ID for that business and its name. We fetch its reviews through a business data provider (described under “Who we share it with” below), not from Google directly, and cache the review content (reviewer name, profile link and photo, review text, star rating, publish time, link to the review, photos the reviewer attached, and the business owner’s reply). Each refresh overwrites that copy, and a copy nothing refreshes expires on its own within 30 days.

YouTube sources

When you connect a YouTube channel, we store the channel’s public uploads playlist identifier and the channel’s title. We read the channel’s public videos with our own YouTube API key and cache each video’s ID, title, thumbnail link, publish time and whether it is a Short, on the same terms as Google reviews above. We also store resized copies of each video’s thumbnail in two sizes, the larger capped at 1,080 pixels, for as long as the source stays connected. No YouTube account sign-in is involved, and we receive nothing about you from YouTube.

TileSet uses YouTube API Services to read these public videos, so the Google Privacy Policy also applies to that data. Because we read only public channel data with our own key, you never sign in to YouTube for us, and we hold no access to any YouTube account of yours. To stop us using a channel’s data, disconnect the YouTube source: its cached videos and thumbnails are deleted as described in Section 4. You can also review and remove the apps that have access to your Google account, including the Google sign-in you use for the TileSet dashboard, on Google’s security settings page.

Link in bio pages

A Link in bio page holds what you put on it: a name, a short bio, a picture link, your links and the blocks you choose, and its look. It is public at its own address (app.tileset.com/@ and the name you pick). Content from your sources is drawn from their caches each time the page is shown and is never copied into the page, so disconnecting a source, deleting all your Meta data or deleting your account takes that content off the page too. We count each page’s views and link clicks without any visitor detail: no cookie, no visitor identifier and no IP address is stored. A visitor can report a page to us; we store the reason and the words they write (at most 500 characters), and nothing about who sent it (no IP address, email or device details), so our staff can review it. The page sets nothing in a visitor’s browser.

Billing

If you buy a plan or credits, payment is handled by our payment processor, which collects and holds your card; we never see or store your card number. We store your payment processor customer and subscription identifiers, your plan and its status, your billing country and state, your business name and VAT or tax ID if you give one, the country of your card and the country your connection came from when you checked out (two pieces of evidence tax rules ask us to keep), and, if you claim a one-time card bonus, the payment processor’s anonymous fingerprint of that card so the same card cannot claim it twice. If you enter an EU VAT ID, we check it with the European Commission’s VIES service, which receives only that VAT ID. If you cancel and choose to tell us why, we store your answer.

Support and feature requests

If you contact support or request a feature from the dashboard, we store the subject and message you send, with its status, so you can see your history.

Update settings

If you give a source a webhook URL, we store only a one-way hash of its secret, never the URL itself, so it cannot be read back. We store your account’s time zone, which we use only to run your update schedules at the local time you picked. If you set a monthly credit cap, we store the cap and how many credits the account has spent toward it this month.

Operational logs

We keep an audit log of account-level actions: signing in, connecting or removing a source, creating an API key, and similar events. Each entry records what happened and when. For an Instagram or Facebook source, an entry also records that platform’s numeric id for the connected account, which stays in the log for its 12 months even after the source is removed. It never records a token, password, or key value.

Widget usage

When someone visits a page that embeds one of your widgets, the embed script sends us a small, anonymous usage signal: that the widget rendered, that its lightbox opened, or that a visitor clicked through to the original post. This carries no cookie, no visitor identifier, and no session. It cannot be used to track someone across sites or to link two visits to the same person or device, and we do not fingerprint a visitor’s browser. The visitor’s IP address is never written to this data. By default we record only the page’s origin (its domain), never the path.

When a widget shows a picture or a player that is not one of our resized copies, the visitor’s browser loads it from the platform that published it (for example Meta’s or a feed host’s image servers, or Twitch’s or Kick’s player), which then sees the visitor’s IP address and handles it under its own privacy policy. The live examples on our own website work the same way.

Page-level insights (off by default, your choice)

Page-level insights is a setting in your dashboard, off for every account until you turn it on, and available on a paid plan. While it is on, the usage signal above also carries the page path (the part after your domain, never the query string, capped at 128 characters), and we store that path in our database alongside an approximate count of the separate hours in which we saw it and the time we last saw it. That count is not a view or visit count: an hour with one visit and an hour with five thousand both count once, and repeated visits inside one hour normally count once.

Whether a path is stored is decided on our side, from your account’s own setting, not by the visitor’s browser: a path sent for an account that has not turned this on is discarded rather than stored. Turn it on only if none of your page paths could reveal something sensitive on their own. A token or an identifier can sit directly in a path (for example /reset-password/<token> or /users/<email>/settings), which stripping the query string does not catch.

Product usage

When you use the dashboard, an AI agent through MCP, or the API, we record what kind of thing you did: for example that a widget was made with the Carousel layout, that a source of a given type was connected, that you checked your page, or that an upgrade button was shown and pressed. Each record carries your plan and where the action came from (dashboard, MCP or API), and we keep it against a random account key that only your account row links to, not your account ID. It never holds your name, your email, your content, your customers’ data or page addresses, nor anything from Instagram or Facebook. Nothing is stored in your browser for it. When you sign up from a link that carries campaign tags (utm_source, utm_medium, utm_campaign), we keep those three tags with your account so we know which campaign brought you. If you also said yes to product news, three of these steps (connecting a source, installing a widget that Check my page found, opening an upgrade prompt) are noted on your account and become labels on your email contact, as “Product news by email” describes; turning off either setting removes them.

We use it to see which features people use and where they get stuck, so we can improve the product; that is our legitimate interest, and you can object to it at any time. It is on by default. Stop sharing under Settings, “Share anonymous product usage”, turns it off, and we stop recording at once.

Product news by email

When you sign in for the first time, a box under the Google button (or on the screen where you allow an AI agent) reads “Send me product news and tips”. If you are in the European Union, the European Economic Area, the United Kingdom, Switzerland or Canada, or we cannot tell where you are, the box starts unticked and we send you product news only if you tick it. Elsewhere it starts ticked, and you can untick it before you continue. We keep your answer with the time, the wording you saw, the country your connection came from, and whether the box was ticked when shown, as the record of your choice.

We keep a contact for every TileSet account in Lindris, Awesome Motive’s email platform: your email address, your name, your TileSet account ID, whether you said yes, and labels for your plan (free or the paid plan’s name) and for a suspended account. If you said yes and share product usage (see “Product usage”), it also carries up to three labels for steps you took: connected a source, installed a widget that Check my page found, and opened an upgrade prompt. Turning off product news or product usage removes them. We use it to email account holders about the service itself, such as changes to features, plans or these terms, and to send product news and tips only to people who said yes. If you said no or were never asked, the contact carries a label that keeps product news and other marketing from reaching you. If you said no before October 12, 2026, the contact stays unsubscribed. Lindris receives nothing else from your account: no sources, widgets, content, billing details or usage records. Emails about your account and billing are separate and come either way.

You can change your answer at any time under Settings, “Product news and tips by email”, which stops product news, or with the unsubscribe link in any email we send through Lindris, which stops all of them, emails about the service included; an unsubscribe from an email shows in Settings too. We send product news because you asked for it; your consent is its legal basis, and withdrawing it does not affect anything sent before.

Cookies and analytics on our websites

tileset.com uses Google Analytics to count visits and see which pages help: which pages are viewed, which site sent the visitor, and whether they pressed Start free, opened an install guide, copied a snippet or searched the docs. It runs only after you allow Statistics in the cookie banner from ConsentLayer, our consent provider; until then nothing of Google’s loads and no analytics cookie is set. Cookie settings, at the foot of every page, opens your choices again at any time, and a no stops it and removes its cookies. Google signals and ad personalization are off, so the data is not used for advertising, and Google Analytics does not store your IP address. It never runs on app.tileset.com: not in the dashboard, on Link in bio pages, in widgets or in the API. We use it on the basis of your consent, and withdrawing it does not affect what was measured before. Our Cookie Notice lists every cookie and every item of local storage TileSet sets, and what the banner records.

Our websites and hosts

• tileset.com: our marketing website and documentation.
• app.tileset.com: the dashboard, the API, the MCP server for AI agents, the widget script, the sign-in and platform callbacks, the data deletion status pages and Link in bio pages.

Who we share it with

We do not sell, license, or share your data with data brokers or advertisers; we do not use any of those. The widget usage signal and the product usage records described above stay inside the same infrastructure named below, not a separate analytics vendor; Google Analytics measures visits to tileset.com only, as described above. The only outside parties that touch your data are the providers who run the service on our instructions:

• Cloudflare, Inc. hosts and stores everything: compute, the database, the cache, the edge network in front of it, the widget and product usage records described above, and the sign-in gate in front of our internal admin tools.
• Google LLC is the identity provider for dashboard sign-in.
• Our payment processor handles payments and holds your card and billing details.
• Our email provider delivers emailed sign-in links.
• Lindris, Awesome Motive’s email platform, holds the contact described under “Product news by email” and sends those emails.
• Google LLC runs Google Analytics on tileset.com, only after a visitor allows Statistics, and receives what “Cookies and analytics on our websites” describes. It receives nothing about your account, your sources, your widgets or your site’s visitors.
• ConsentLayer runs the cookie banner on tileset.com and keeps the record of each choice described in our Cookie Notice. It receives nothing about your account, your widgets or your site’s visitors.
• A business data provider runs the service behind Google reviews. When you connect Google reviews by pasting a Maps link or typing your business name, they turn that into the listing identifier we store, and on each refresh they supply the reviews themselves. They receive only what you typed, the identifier read out of the link you pasted, or the stored listing identifier on a refresh. They receive nothing about your account, your site, or your visitors.
• An automated moderation service checks waiting testimonials, as described under “Testimonials”, and receives only what that section names.
• An AI model provider runs the assistant our staff may use with our internal admin tools, and receives only what Section 2 describes.
• The European Commission’s VIES service receives an EU VAT ID you enter, to confirm it is valid, and nothing else.

YouTube content comes from Google’s YouTube Data API. X posts come from an X data service, which receives only the handle or account id. Twitch videos and clips come from Twitch’s API, and Kick live status from Kick’s public API; both receive the channel name or id, with our app credentials. Instagram and Facebook content comes from Meta Platforms, Inc. Pinterest Pins come from the feed Pinterest publishes, which receives only the public address you gave us. A platform named here is the source of that data, not a party we share it with.