Privacy Policy

1. Introduction

TinCat ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered chat bubble platform at tincat.io (the "Service").

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when you:

• Create an account: Name and email address (via Manus OAuth authentication)
• Subscribe to a paid plan: Billing information processed securely by Stripe — we never store full card details
• Create chat bubbles: Bubble names, custom prompts, personality settings, greeting messages, and configuration data
• Contact us: Any information included in support requests or communications

2.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Usage data: Pages visited, features used, time spent, click patterns, and bubble interactions
• Device information: IP address, browser type and version, operating system, and device type
• Analytics data: Aggregated and anonymized usage statistics

2.3 Conversation Data

When end users interact with chat bubbles created through our Service, we collect conversation data including messages, timestamps, and session information. This data is used to provide the Service and improve AI responses. Conversation data is treated as confidential and is not shared with third parties except as necessary to provide the Service.

Retention periods by plan: FREE and PRO users — conversations are not stored beyond the session; PRO PLUS users — conversation history is retained for 3 days and accessible from the dashboard.

3. How We Use Your Information

4. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

We share information with trusted third-party providers who help us operate the Service:

• Manus: Hosting, infrastructure, and OAuth authentication
• Stripe: Payment processing and subscription management
• OpenAI and Google: AI model providers for chat functionality

These providers are contractually obligated to protect your information and use it only for specified purposes.

4.2 Legal Requirements

We may disclose your information when required by law, court order, or to protect the rights, property, or safety of TinCat, our users, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

5. Your Privacy Rights

Regardless of your location, you have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and associated data
• Objection: Opt out of direct marketing communications at any time
• Data Portability: Export your bubble configurations and data from account settings

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

6. Data Security

We implement industry-standard security measures to protect your information, including HTTPS/TLS encryption for all data in transit, encryption of sensitive data at rest, access controls and authentication mechanisms, and regular security monitoring. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. Account information is retained until you delete your account. Billing records are retained for 7 years as required by tax law. When data is no longer needed, we securely delete or anonymize it.

8. Cookies

We use essential cookies for authentication and session management, analytics cookies to understand usage patterns, and preference cookies to remember your settings. You can manage cookies through your browser settings, though disabling essential cookies may affect Service functionality.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at [email protected] and we will promptly delete it.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We take appropriate measures to ensure your information remains protected in accordance with this Privacy Policy, including using standard contractual clauses where applicable.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]

We will respond to your inquiry within 48 business hours.