← Back to Tilted

Privacy Policy

1. Introduction

Tilted Inc. ("we," "us," "our"), a company with its business address at 143 Metairie Heights Ave, Metairie, LA 70001-4210, United States, respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

This policy applies to all users globally and incorporates requirements from GDPR, CCPA, PDPA, and other applicable data protection regulations.

2. Information We Collect

2.1 Information You Provide

• Account data: name, email address, password (hashed)
• Profile data: avatar, display name, preferences
• Content: documents, slides, boards, images, and other materials you create
• Agent configurations: custom agent settings, tool selections, constitution rules
• Payment data: processed securely via Stripe; we do not store card numbers
• Communications: messages in community channels, support tickets

2.2 Information Collected Automatically

• Usage data: features used, interaction patterns, session duration
• Device data: browser type, operating system, screen resolution
• Log data: IP address, access times, referring URLs
• Cookies: authentication tokens, preferences (see Section 7)

2.3 Information from Third Parties

• OAuth providers: Google account data (name, email, profile picture) when you sign in with Google
• Blockchain data: public wallet addresses and transaction hashes (publicly available on-chain)

3. How We Use Your Information

Purpose	Legal Basis (GDPR)
Provide and maintain the Service	Contract performance
Process payments and subscriptions	Contract performance
Send service-related communications	Legitimate interest
Improve and personalize the Service	Legitimate interest
Ensure platform security and prevent abuse	Legitimate interest
Comply with legal obligations	Legal obligation
Send marketing communications (optional)	Consent

4. AI & Agent Data Processing

5. Data Sharing & Disclosure

We do not sell your personal data. We may share information with:

• Service providers: hosting (GCP), payments (Stripe), email (SMTP), analytics
• Legal compliance: when required by law, court order, or regulatory request
• Business transfers: in connection with a merger, acquisition, or sale of assets
• Community features: content you post in public channels is visible to other users

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion:

• Personal data is deleted within 30 days
• Anonymized usage analytics may be retained indefinitely
• Backup copies are purged within 90 days
• Legal compliance records (e.g., terms acceptance) are retained as required by law

7. Cookies & Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising trackers.

Cookie	Purpose	Duration
auth_token	Authentication	Session
refresh_token	Token refresh	30 days
preferences	UI settings	1 year

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: request a copy of your personal data
• Rectification: correct inaccurate data
• Erasure: request deletion of your data ("right to be forgotten")
• Portability: receive your data in a structured, machine-readable format
• Restriction: limit how we process your data
• Objection: object to processing based on legitimate interest
• Withdraw consent: revoke previously given consent at any time

To exercise these rights, contact contact@tilted.xyz or write to us at the postal address in Section 13. We respond within 30 days.

9. International Data Transfers

Your data may be processed in the United States. For EU/EEA users, we rely on Standard Contractual Clauses (SCCs) to ensure adequate protection for international transfers.

10. Security

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Access controls and audit logging
• Regular security assessments
• Incident response procedures

11. Children's Privacy

Tilted is not directed to users under 18. We do not knowingly collect data from minors. If we learn we have collected data from a minor, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notification at least 30 days before taking effect.

13. Contact Us

The Tilted platform is operated by the company named below. Data protection enquiries can be sent to the same address.

See also our Terms of Use.