Privacy Policy

• Customers: people who have a TinyCMS account and the people they invite to it.
• Visitors to sites we host: people who read a customer's website or fill in one of its forms.
• Visitors to tinycms.ai: people who browse our own website.

If you visited a site built with TinyCMS: the site's owner is in charge of the information you give that site. Section 2 explains how that works.

TinyCMS hosts our customers' websites. Each site's owner decides what it publishes, what its forms ask, and which tools run on it. For information about that site's visitors, the owner is in charge and we act as their service provider: we store and use it only to run the site for them.

Forms

When you fill in a form on a site we host, what you send goes to that site's owner.

• We store your response in the owner's TinyCMS account, with the page you sent it from, your browser type, and a one-way code made from your IP address (not the address itself), which we use to stop spam and abuse.
• Only people with access to the owner's account can see responses, inside the TinyCMS app. We don't email them anywhere, and AI assistants connected to the site can't read them.
• The owner chooses how long responses are kept (12 months unless they change it), can delete a response at any time, and can download their responses.
• A note under each form can tell you how the owner will use what you send.

To see, correct or delete a response you sent, contact the site's owner. If you can't reach them, email us and we'll pass your request on.

Google Analytics and other tools

Site owners can turn on Google Analytics, Google Tag Manager or Amplitude, and we can help them set it up. When they do, we store the tool's ID for that site and add the tool's standard code to its pages. The tool then collects visitor information directly, under the owner's own account and agreement with that provider. We don't receive that information. Owners can also add their own code, and can turn on a consent banner so these tools wait until a visitor agrees.

Each site's owner is responsible for telling their visitors how they use information, usually in their own privacy policy.

Account and billing information

• Your name and email address.
• Sign-in details. We usually sign you in with a one-time code sent to your email. If you set a password, we store only a secure hash of it, never the password itself.
• Business name and address, if you give them.
• Your plan, subscription status and billing history.
• Messages you send our support team.

Card payments are handled by our payment processor. We don't store full card numbers.

The content you create

• Pages, articles, drafts and earlier versions.
• Photos, videos and other files you upload or import.
• Forms you build, custom fields, and data you import.
• Your site's design, settings, navigation and custom domain.
• A record of approvals: who approved what to go live, and when.

Connected social accounts

If you connect Facebook, Instagram, Threads, LinkedIn, X, YouTube or TikTok, we collect:

• Account, page and profile IDs and names.
• Access tokens and the permissions you grant.
• The posts we publish for you and when they're scheduled.
• Performance numbers the platform returns, such as views, likes, comments, shares and followers.

AI assistants you connect

If you connect an AI assistant (such as Claude) to TinyCMS, we record which assistant you connected, when, which site it can reach, and the requests it sends us, such as creating a page or asking to publish. We don't receive your conversations with the assistant, only the requests it sends to TinyCMS. If you or your assistant send us feedback, we receive that message.

Information from visitors to sites we host

• Form responses, as described in section 2.
• Standard request logs, such as IP address, browser, the page requested and the time. We use these to deliver pages and keep sites secure.

Usage and device information

• Logs, device and browser details, the features you use, and errors you run into.
• Cookies and similar technologies, described in section 10.

We use information to:

• Provide the Service: host and serve your site, store your content and show you previews.
• Publish to social platforms when and how you tell us to.
• Run checks and suggestions, such as copy-edits, broken-link checks, and search-engine checks on live sites.
• Send sign-in codes, receipts, and messages about your account and the Service.
• Process payments and manage your plan.
• Answer support requests.
• Prevent fraud, abuse and security problems.
• Understand how the Service is used so we can fix and improve it.
• Meet our legal obligations and enforce our Terms of Service.

We send marketing emails only where the law allows, and every one includes a way to unsubscribe.

Some features send your content to AI model providers to get a result back: copy-edit checks, drafting and rewriting, turning articles into social posts, and answering questions about your archive. These providers process your content on our behalf to return that result.

We don't use your content, or information about the people who visit your site, to train AI models.

AI output can be wrong. That's why nothing goes live until you approve it.

We share information only in these cases:

• Service providers: companies that help us run TinyCMS, for hosting, storage and content delivery, video, email delivery, payments, AI processing, and error monitoring. They may use it only to provide their service to us.
• Social platforms: when you tell us to publish to them or to fetch your posts' performance.
• AI assistants you connect: they can read and change your site's content within the access you give them. They can't read form responses.
• Site owners: they receive the form responses submitted on their sites.
• Legal and safety: when the law requires it, to answer a valid legal request, or to protect people's rights and safety.
• Business transfers: as part of a merger, acquisition, financing or sale of assets, under the protections of this policy.

We don't sell personal information, and we don't share it for targeted advertising.

When you connect a social account, the information we can reach depends on the permissions you grant and on that platform's own terms and privacy policy.

You can disconnect an account at any time in TinyCMS or in the platform's own settings. Once you do, we stop using its access token. Posts already published stay on the platform until you remove them there. To have us delete the information we received from a platform, disconnect the account and email us at [email protected]. We'll confirm when it's done.

YouTube: TinyCMS uses YouTube API Services. By connecting a YouTube account, you agree to the YouTube Terms of Service. Google's handling of your information is described in the Google Privacy Policy. You can remove TinyCMS's access at any time from your Google account permissions.

• We keep your content and account information while your account is open.
• Pages, articles and forms you delete stay in Recently deleted for 30 days so you can restore them, then they are removed.
• When you ask us to close your account, we delete your content and personal information. We keep only what we must for legal, tax, billing or security reasons. Copies in backups are overwritten on their normal schedule.
• Form responses are kept for the period the site's owner chooses (12 months unless they change it), or until the owner deletes them or closes their account.

Depending on where you live, you may have the right to:

• Know what personal information we hold about you and get a copy of it.
• Correct information that's wrong.
• Have your information deleted.
• Object to or limit some uses of it.
• Withdraw consent you've given, such as to marketing emails.

California residents: under the California Consumer Privacy Act, as amended by the CPRA, you have the right to know, delete and correct your personal information, to limit the use of sensitive personal information, and to opt out of its sale or sharing. We don't sell or share personal information as those laws define it. We won't treat you differently for using any of these rights.

EEA and UK residents: we process your information to provide the Service you signed up for, for our legitimate interests in running and securing it, with your consent where we ask for it, and to meet legal obligations. You may also complain to your local data protection authority.

To make a request, email [email protected]. We may need to confirm your identity first. If your request is about a site built with TinyCMS, we may pass it to that site's owner.

On tinycms.ai and the TinyCMS app, we use cookies that are needed to sign you in, keep your account secure and remember your settings. We also use analytics tools, such as Google Analytics, to see which pages are used.

On sites we host, we set only the cookies needed to deliver the site. Any analytics or other tools are the site owner's choice, and the owner can turn on a consent banner so those tools wait for the visitor's agreement.

You can block or delete cookies in your browser settings. Some features, such as signing in, won't work without them.

We use reasonable safeguards to protect information, including encryption in transit, secure storage of access tokens, and limited staff access to customer data. No system is completely secure, so we can't guarantee absolute security. If a breach affects your information, we'll tell you as the law requires.

We're based in the United States, and your information may be processed there or in other countries where our service providers work. Where the law requires, we use safeguards for these transfers, such as standard contractual clauses.

The Service is not directed to children under 13, or a higher age where the law requires. We don't knowingly collect personal information from children. If you believe a child has given us information, email us and we'll delete it.

We may update this policy from time to time. We'll post the new version on this page and change the effective date. If a change is significant, we'll also email account holders before it takes effect.

TinyCMS, operated by Blue Line Fabrication, LLC

Email: [email protected]

Website: www.tinycms.ai