Privacy Policy
Last updated: March 22, 2026
1. Information We Collect
We collect the following types of information:
- Account information: name, email address, and password when you create an account
- Organization data: organization name, team members, and roles
- Connected service data: data retrieved from third-party services you connect (Slack, Notion, GitHub, etc.) for knowledge extraction
- Usage data: queries, API calls, and feature usage for billing and analytics
- Technical data: IP address, browser type, and device information
2. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the Service
- Process knowledge extraction from connected services
- Respond to AI-powered queries with relevant knowledge
- Process billing and manage subscriptions
- Send transactional emails (account verification, alerts, digests)
- Monitor and prevent abuse
3. Data Storage and Security
Your data is stored in Supabase (PostgreSQL) with row-level security policies ensuring organization-level data isolation. OAuth credentials for connected services are encrypted using AES-256-GCM. All data is transmitted over HTTPS/TLS.
4. Third-Party Services
We use the following third-party services:
- Supabase: database, authentication, and storage
- Stripe: payment processing
- Vercel: web hosting and deployment
- OpenAI / Anthropic: AI-powered knowledge extraction and query synthesis
Each third-party service has its own privacy policy governing its handling of your data.
5. Data from Connected Services
When you connect third-party services (Slack, Notion, GitHub, etc.), we access and process data from those services solely for the purpose of knowledge extraction. We store extracted knowledge units and metadata. You can disconnect a service and request deletion of associated data at any time.
6. Data Retention
We retain your data for as long as your account is active. When you delete your account or organization, we will delete your data within 30 days. Billing records may be retained longer as required by law.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Request deletion of your data
- Export your data in a portable format
- Object to processing of your data
- Withdraw consent at any time
8. Cookies
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.
9. Children's Privacy
The Service is not directed at children under 16. We do not knowingly collect data from children under 16.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service.
11. Contact
For questions about this Privacy Policy, please contact us at privacy@tribemem.com.