Tinfoil procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Depending on where you live, you may have the following rights over your personal data: Be informed about how your data is used. Access the personal data we hold about you. Correct inaccurate or incomplete data. Delete your data. Restrict or object to certain processing. Port your data to another service. Opt out of cross-context behavioral advertising. Appeal a privacy-rights decision we make. To exercise your rights, email privacy@tinfoil.sh . We respond within 30 days and will explain any limits that apply.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We keep personal data only as long as needed for the purposes described in this Policy, unless a longer period is required for legal, tax, accounting, security, fraud-prevention, dispute-resolution, backup, or operational reasons. Account data: for the life of your account and up to 30 days after deletion to complete deletion across backups. Billing records: as required by tax and accounting laws, typically up to 7 years. Encrypted chat backups: until you delete them or close your account. We only hold ciphertext. API and Container usage metrics: while your account is active for billing and operations, then aggregated or anonymized. IP and request logs: for anti-abuse and security, collected and managed by Clerk under its retention policy. Mailing list subscriptions: until you unsubscribe. Support communications: as needed to resolve your request and for reasonable record-keeping. Upon a verified request, we will delete or de-identify personal data that Tinfoil controls, subject to the exceptions described above.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We may suspend or terminate a Container without prior notice if we reasonably believe it is necessary to protect the Services, our infrastructure, or other customers; if you violate these Terms; if required by law; or for non-payment. Suspension may interrupt your workload mid-execution, and we are not responsible for consequences of that interruption. On termination, the Container and its encrypted state will be decommissioned and rendered irrecoverable. Your use of Containers does not give you any right to physically access or possess Tinfoil servers, hardware, equipment, or other assets. In addition to the indemnity in Section 14, you agree to defend and indemnify Tinfoil and its affiliates from claims arising from your Container workloads, credentials, data processing, or use of third-party materials.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ You may stop using the Services or delete your account at any time in settings or by contacting us. When you delete your account, we delete personal data that Tinfoil controls, subject to the retention periods and exceptions in our Privacy Policy, including legal, billing, security, fraud-prevention, dispute-resolution, and operational records. We may suspend or terminate your account or access to the Services if you violate these Terms, if your use creates risk or harm, if we must do so to comply with law, for non-payment, or for any other reason permitted by law. Sections concerning payment obligations, ownership, restrictions, disclaimers, limitation of liability, indemnity, dispute resolution, governing law, export compliance, and provisions that by their nature should survive will survive termination.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Resend: transactional and marketing email delivery. Plausible: cookieless aggregate website analytics. Google Ads, ChatGPT Ads, DuckDuckGo: keyword-based advertising and conversion tracking on web surfaces other than chat.tinfoil.sh. We run keyword advertising only; we do not target ads based on personal attributes, audiences, or behavioral segments. Cloudflare Turnstile: bot and abuse protection. Sentry: anonymized backend error and crash reporting. Tigerdata: account, usage, and billing metrics storage. Google Workspace: internal email, documents, and productivity tools. Exa: third-party web search provider used only when web search is enabled in Chat. Receives search queries generated by a model running inside the enclave under a Zero Data Retention agreement. Does not receive your account identifier or IP. Slack: internal team communications and support coordination. Probo: Trust Center and SOC 2 audit evidence management. If Tinfoil is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal data may be transferred as part of that transaction. We will use reasonable efforts to ensure the successor handles personal data consistently with this Policy or gives notice of material changes.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We do not sell or share your personal data for others to use independently. We share personal data only in these situations: At your request or with your direction. With our vendors and service providers acting on our behalf to operate the Services. To comply with law, legal process, or valid government requests. To protect the rights, property, or safety of Tinfoil, our users, or others. To handle emergencies or resolve disputes. In aggregated or non-identifying form. We may update this list as our practices evolve. Our current subprocessors are listed below. For business and enterprise customers, we offer a Data Processing Addendum (including Standard Contractual Clauses where applicable). If you need additional certifications or arrangements, such as a Business Associate Agreement for HIPAA or a region-specific data processing agreement, contact privacy@tinfoil.sh . Our subprocessors include: Amazon Web Services, Cloudflare, Vercel: hosting, CDN, and networking. Clerk: authentication and account management. Stripe: payment processing for web subscriptions and Containers usage. Payment details (including full card numbers) are transmitted directly to Stripe and are not stored on Tinfoil's servers. Stripe is certified as PCI DSS Level 1 compliant. See Stripe's Privacy Policy . RevenueCat: mobile subscription status and entitlements. GitHub: OAuth sign-in and repository access when you authorize our GitHub App. ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Tinfoil is based in the United States, and personal data may be processed in the United States and other locations where our providers operate. If you are in the EEA or UK, we use Standard Contractual Clauses and other appropriate safeguards for transfers where required.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ Some Services require payment. Fees may include fixed subscription fees and usage-based fees. You agree to pay all applicable fees and taxes. Web payments are processed by Stripe or another payment processor we identify. Mobile subscriptions through the Apple App Store or Google Play are governed by the relevant app store's payment, billing, refund, cancellation, and auto-renewal terms; we receive subscription status through RevenueCat to enable paid features. Subscriptions renew automatically unless you cancel before the renewal date. You can cancel in account settings, through the relevant app store for mobile subscriptions, or by contacting us. When you cancel, your access continues until the end of the current billing period. Except where required by law, fees already paid are non-refundable, and cancellation prevents future renewals. We may change prices with at least 30 days' notice by email or through the Services. Price increases apply to the next renewal, not the current active subscription term. We may suspend or terminate access for non-payment. Fees are exclusive of taxes unless stated otherwise. You are responsible for applicable sales, use, VAT, withholding, and similar taxes, except taxes based on Tinfoil's income.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.