Privacy Policy

1Who is responsible

tinbo is run by Dmytro Utkin, a sole proprietor (private entrepreneur) registered in Ukraine (“tinbo”, “we”, “us”). For everything in this policy you can reach us at support@tinbo.co.

We hold personal data in two roles:

• For ourselves (as “controller”): the data of people who visit this website or have a tinbo account.
• For our customers (as “processor”): the data of people who follow a customer's short link. The customer who made the link decides why it is collected. The Data Processing Agreement governs that. We also use this data in our own right to keep the service secure, to stop abuse and to count clicks against a plan.

2What we collect

When you have an account

• Account: your name, email address and password. The password is stored only as a hash.
• Workspace: its name and subdomain, who its members are, their roles, and the email addresses of people who were invited.
• What you create: links, destinations, tags, folders, UTM parameters, routing rules and domains. A password set on a link is stored only as a hash.
• Audit log: who changed what in a workspace, and when.
• Billing: your plan, its status and the identifiers our payment provider gives us for you and your subscription. Card details go to Creem and never reach us.
• Messages: what you write when you email us or use the contact form, with the email address and name you give there.

When somebody follows a short link

Each request is recorded with:

• the time, the short link and the destination the visitor was sent to;
• the IP address;
• the browser's user agent, and the browser, operating system and device type read from it;
• the referrer (the page the visitor came from) and the browser's language;
• an approximate location derived from the IP address: country, region, city and rough coordinates;
• UTM and similar parameters present on the short link;
• whether the request looks like a person, an AI agent or another bot.

We do not try to find out who a visitor is, and we do not follow visitors from one link or site to another.

When you visit this website

tinbo.co loads no third-party scripts, fonts or analytics. Like any web server, ours sees the IP address and user agent of a request while handling it. To keep spam out, the contact form counts messages per IP address for an hour. That count is held in memory and never stored.

When something breaks

Errors in the service are reported to our monitoring provider with the technical details needed to fix them. A report can include an IP address or the address of a link.

3Why we use it

We do not use personal data for advertising, we do not build profiles of visitors, and we do not make decisions about people by automated means that have legal effects for them.

4Cookies and local storage

Everything we store in a browser is needed for a feature somebody asked for. There are no advertising or cross-site tracking cookies, which is why there is no cookie banner.

5Who we share it with

• Providers that work for us. Hosting, email, analytics storage and the like. Each one is listed, with what it handles, under Subprocessors.
• Our payment provider. Creem (Armitage Labs OÜ, Estonia) sells the subscriptions in its own name and is responsible for the payment data it collects.
• The workspace you belong to. Other members see your name and email address and, in the audit log, what you changed.
• Authorities. When the law requires it, or when it is needed to stop fraud or serious abuse of the service.
• A successor. If tinbo is sold or reorganised, the data moves with it under the same commitments, and we will tell you.

We do not sell personal data, and we do not share it for advertising.

6Where the data is

tinbo is operated from Ukraine, and its servers and database are in the United States. Other providers work from the locations listed under Subprocessors. When personal data from the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on the European Commission's standard contractual clauses or an equivalent safeguard.

7How long we keep it

• Account and workspace data: for as long as the account exists. After you ask us to delete it, we remove it within 30 days.
• Click records: for as long as the workspace exists. How far back the dashboard shows them depends on the plan: 90 days on Free, 1 year on Basic and 2 years on Pro.
• Billing records: for as long as tax and accounting law requires.
• Error reports and emails: for as long as they are needed to resolve the matter.

Links that were disabled for abuse, and the evidence for it, may be kept longer, so that the same abuse can be recognised again.

8Your rights

You can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct it;
• delete it;
• restrict or stop a use of it that you object to;
• hand it over in a format another service can read.

Write to support@tinbo.co from the email address on your account. We answer within 30 days. There is no charge.

If you followed a short link and want to know about the record of that click, the customer who owns the link is responsible for it. Write to us anyway and we will pass your request on to them.

You also have the right to complain to a data protection authority: the one in the country where you live, or in Ukraine the Ukrainian Parliament Commissioner for Human Rights.

9Security

Traffic to every tinbo site is encrypted in transit. Passwords are stored as hashes, never in readable form. Access to production systems is limited to the people who operate them, and workspaces have roles and an audit log so that owners can see who did what. No system is perfectly secure. If a breach affects your data, we will tell you without undue delay.

10Children

tinbo is not meant for children, and accounts are for people aged 18 or over. If you believe a child has given us personal data, write to us and we will delete it.

11Changes to this policy

When we change this policy we update the date at the top. If a change affects how your data is used in a way that matters, we tell account holders by email before it takes effect.

12Contact

support@tinbo.co, or the contact page. Short links live on inbo.to; this policy covers them too.