Privacy Policy

1. Introduction

Welcome to Tinglebay ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our video content platform and services (the "Service").

By using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described in this policy, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you provide directly to us, including:

• Account information (email address, username, display name)
• Profile information (profile photo, bio, preferences)
• Payment information (processed by our payment processors; we do not store full card numbers)
• Communication data (support requests, feedback)
• Messages you send and receive on the Service, including direct messages, comments, and custom order requests
• Content you upload (videos, comments, requests)

2.2 Automatically Collected Information

When you use our Service, we automatically collect certain information:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, interactions)
• Log data (access times, error logs, referrer URLs)
• Cookies and tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process payments and manage subscriptions
• Authenticate users and prevent fraud
• Send notifications and updates about our Service
• Respond to customer support requests
• Analyze usage patterns and improve user experience
• Comply with legal obligations
• Enforce our Terms of Service
• Review messages, comments, and other content for quality, safety, and compliance, as described in Section 3.1

3.1 Message Review

Messages sent through the Service are not private communications in the way personal email is. We may access, review, and retain messages, comments, and custom order requests, using automated tools and human review, in order to:

• Detect fraud, spam, harassment, attempts to move payments off the platform, requests for leaked content, and other violations of our Terms of Service
• Investigate reports and complaints
• Monitor service quality and support creators and users
• Comply with legal obligations and lawful requests

Review is limited to what is reasonably necessary for these purposes, and access is restricted to authorized staff. We do not sell message content or use it for third-party advertising. Messages are retained as described in Section 8.

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

4.1 Service Providers

We share information with the service providers below only as needed for them to perform services for us. Each is bound by contract to use your information only for that purpose.

• Payment processors: our card processing partners and PayPal, for payment processing, subscription billing, refunds, and fraud prevention. They receive your payment details, name, and email; we do not store full card numbers.
• Veriff: identity and age verification for creators. Creators submit a government-issued ID and a selfie directly to Veriff, which returns a verification result to us. We store the result and a reference, not the ID images.
• Stack Auth: authentication and account management.
• Neon: database hosting.
• Vercel: hosting, file storage for uploads and thumbnails, and web analytics.
• Mux and hostr: video hosting, encoding, and streaming delivery. Playback requests include your IP address.
• AssemblyAI: automated captioning of creator videos.
• Amplitude: product analytics and session replay. Session replay records how you interact with pages (clicks, scrolling, navigation) so we can find and fix problems. Text you type into fields is masked and video playback is not recorded.
• Sentry: error monitoring and performance diagnostics, which may capture the page you were on, your account identifier, and a replay of the session leading up to an error.
• Customer.io: email, in-app messages, and push notifications.
• Plain: customer support conversations.
• Slack: internal alerts to our team about reports, payment issues, and operational events. These alerts may include your username and the content or transaction concerned.
• Advertising and attribution partners: Meta, Google, and TikTok, to measure whether our advertising works. We send hashed identifiers and event data (for example, that a sign-up or purchase occurred) through their pixels and server APIs. We do not send them the content you watch or the creators you subscribe to. See Section 6 on how to limit this.

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Legal processes (court orders, subpoenas)
• Government requests
• Enforcement of our rights or terms
• Protection of safety and security

5. Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.

Our security measures include encryption, secure servers, access controls, and regular security assessments.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. These may include:

• Essential cookies: Required for basic functionality
• Analytics cookies: Help us understand usage patterns
• Preference cookies: Remember your settings and preferences
• Advertising and attribution cookies and pixels: Set by Meta, Google, and TikTok to measure whether our advertising works and to attribute sign-ups and purchases to the ad that led to them. Under some privacy laws this counts as "sharing" personal information for cross-context behavioral advertising.

You can control cookies through your browser settings, but disabling certain cookies may affect functionality. You can limit advertising pixels through your browser's tracking protection, through the ad settings of your Meta, Google, or TikTok account, or by asking us to opt you out at help@tinglebay.com with the subject "Do Not Sell or Share My Personal Information."

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Restriction: Request restriction of processing

To exercise these rights, please contact us through our support channels.

You may also be able to close or delete your account through your account settings.

8. Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy. Specific retention periods include:

• Account data: Until account closure or as needed to provide the Service. We may delete inactive accounts after extended periods of inactivity (typically 3+ years)
• Payment data: As required by law and financial regulations (typically 7 years)
• Content data: Until deletion by user or account termination
• Log data: Up to 12 months for security and analytics purposes

Certain information may be retained or stored by our service providers (such as payment processors) as required for their legal and compliance obligations.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your personal information in accordance with applicable data protection laws.

10. Email Communications and Unsubscribe

We may send you emails related to your account, including:

• Transactional emails: Account notifications, payment confirmations, and security alerts
• Service updates: Product announcements and platform changes
• Marketing communications: Promotional offers, new features, and creator highlights (optional)

Email Consent: By creating an account, you consent to receive transactional and service-related emails. You provided your email address during account registration through our authentication system.

How to Unsubscribe: You can unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link at the bottom of any marketing email, or by updating your email preferences in your account settings. Please note that you cannot unsubscribe from essential transactional emails related to your account security and service usage.

11. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after any modifications constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: