Privacy notice

This notice explains what personal data Harbor Software LLC collects when you use Tightlip, what it never collects and who else handles it. Harbor Software LLC, a Wyoming limited liability company, runs Tightlip and is the controller of the personal data this notice describes. In this notice, “we” and “us” mean Harbor Software LLC.

In short

• The real values Tightlip detects, and the vault that links them to their placeholders, stay on your device.
• In the web workspace, your protected text passes through our servers on its way to Anthropic. We do not store it or log it.
• We keep what we need to run your account: who you are, what you paid, your credit balance and standard request logs.
• We do not sell personal data, use it for advertising or use it to train AI models.
• To see or delete your data, email hello@tightlipai.com.

1. What leaves your device

Tightlip finds sensitive details in your text on your device and swaps each one for a placeholder like [PERSON_1]. We call the result “protected text”. The table that links each placeholder to its real value is the “vault”. This table shows where each piece goes in each part of Tightlip.

Protected text is your text with the detected details swapped out. Detection is automatic and imperfect. Anything Tightlip misses stays in the protected text as you wrote it, and goes wherever the protected text goes. Check the preview before you send, and add names that must always be hidden to your custom terms list.

2. What we collect

• Your account. Clerk, our sign-in provider, holds your name, your email address and the details it needs to sign you in and keep you signed in. We link your Clerk account to your Stripe customer record, and note whether you have received your free credits.
• Payments and credits. Stripe, our payment provider, holds your payment details and your credits ledger. The ledger records each top-up, your free credits, each debit with its number of credits and where they were used, and any refund. You enter card details on Stripe’s payment page, and we never receive your full card number.
• Request logs. Vercel, which hosts our website and app, keeps standard logs of requests: your IP address, the address of the page or API you asked for, your browser’s user agent and the time. These logs do not include the content of requests.
• API key metering. Each time the extension, SDK or proxy meters credits, we receive your API key, the number of credits and the source. We use the key to find your account and debit your balance. We do not store the key itself. We show each new key once and keep only a version number, which lets us turn old keys off.
• Shared leak check results. If you use the share button on the leak check, the link you share holds only counts by type, such as “3 names, 2 account numbers”. Anyone who opens the link, including our servers, can see those counts. The link never holds your text.
• Free-credit checks. Before free credits are added, we check that your email address is verified and is not from a temporary email service. We store a scrambled (hashed) form of your email address and of your IP address on your Stripe customer record, so the same person or network cannot claim free credits again and again. The hash cannot be turned back into the address.
• Referral code. If you arrive through a link with a referral code, your browser keeps the code for 30 days, and we add it to your customer record when you sign up.
• Team notices. When you sign up or pay for a top-up, our team gets a notice in Slack with your email address, whether free credits were added, any referral code and, for a top-up, the amount. Notices never include text you protect.
• Messages to us. Contact form messages reach our team through Slack, together with the name, email address, company and team size you enter. If you email us, we receive your email and any attachments.

3. What we never collect

• The vault, in any part of Tightlip.
• Your original text with its real values.
• Your custom terms list. It stays in your browser’s localStorage.
• Files you drop into the workspace. Your browser reads them on your device.
• Any text from the leak check, the browser extension, the SDK or the proxy.

4. The web workspace and Anthropic

When you chat in the web workspace, your browser sends the protected text of your conversation to our server. Our server passes it to Anthropic’s Claude model and streams the answer back to your browser, where the real values are put back in. Our server does not store or log the text or the answer. It records only the number of credits the message used.

Anthropic receives the protected text and returns the answer under its Commercial Terms of Service. Anthropic’s own rules on how long it keeps API data apply. At the time of writing, those terms say that Anthropic may not train models on customer content from its services.

If you use Tightlip for your work, the text you protect may be about other people, such as your clients or patients. You decide what to send and why. We handle that text only to carry it between you and Anthropic, on your instruction.

Harbor Software LLC is not a HIPAA business associate and signs no business associate agreements. Do not submit protected health information through the Tightlip web workspace.

5. How we use personal data

We use personal data only for the purposes below. If you are in the European Economic Area or the United Kingdom, the last column shows the legal basis we rely on.

We do not sell personal data, use it for advertising or use it to train AI models. We do not make decisions about you based only on automated processing that have legal or similarly significant effects.

6. Who else handles your data

These providers process personal data for us, only to run Tightlip:

All five are based in the United States. We may also share personal data:

• with our professional advisers, such as lawyers and accountants, who must keep it confidential;
• with a court, regulator or law enforcement agency, when the law requires it;
• with a buyer or successor if Tightlip or our business is sold or merged, under protections at least as strong as this notice.

If you use the extension, SDK or proxy, your AI provider receives your protected text directly from you, under your own terms with that provider. We do not choose it or pay it, so it is outside the list above.

7. Cookies and browser storage

Clerk sets the cookies it needs to sign you in and keep you signed in. These cookies are used only on the app and on the sign-in and sign-up pages. We set two small cookies of our own: tl_ref holds a referral code for 30 days, only when you arrive through a referral link, and tl_gc records for 24 hours that this browser received free credits. We use no advertising cookies and no analytics cookies.

Tightlip also keeps some things in your own browser:

• the web workspace keeps your custom terms list and your chosen profile in localStorage, and keeps the vault in memory until you close the tab;
• the browser extension keeps the vault in chrome.storage.session, and keeps its settings in the extension’s own storage.

8. How long we keep data

9. Your rights

You can ask us to:

• tell you what personal data we hold about you, and give you a copy;
• correct data that is wrong;
• delete your account and your data;
• stop using your data for a purpose you object to.

To make a request, email hello@tightlipai.com from the email address on your account and tell us what you want. We may ask you to confirm it is you before we act. We reply within one month, and we do not charge for requests.

When we delete your account, we delete it from Clerk, and any credits left on it can no longer be used. We keep payment records for as long as tax and accounting laws require. If you want a refund of unused paid credits, ask within the refund window before you ask us to delete your account.

If you are in the European Economic Area or the United Kingdom, you can also complain to the data protection authority where you live or work. If you live in a US state with a privacy law, you have the rights that law gives you, and we will not treat you differently for using them. We do not sell or share personal data as those laws define it.

10. Where your data is processed

Harbor Software LLC is a US company, and our providers are based in the United States. Your personal data is processed in the United States, and may also be processed in other countries where our providers operate. The people who run Tightlip work from Pakistan. They can view account and billing records from there when they need to, for example to answer your email or send a refund.

If you are in the European Economic Area, the United Kingdom or Switzerland, these countries may not have data protection laws that your authorities consider equal to your own. Where the law requires a safeguard for these transfers, we rely on the data protection terms our providers offer, such as the European Commission’s Standard Contractual Clauses.

11. Children

Tightlip is for people aged 18 or over. It is not directed at anyone under 18, and we do not knowingly collect personal data from anyone under 18. If you think a child has given us personal data, email hello@tightlipai.com and we will delete it.

12. Security

Tightlip is designed so that the real values it detects, and the vault, never reach us. For the data that does reach us, we use HTTPS and we do not log the content of requests or answers. We do not store copies of API keys. No system is perfectly secure. The security page sets out the full data flow.

13. Changes to this notice

We update this notice when our practices, our providers or the law change. The date at the top of this page shows the last update. If a change is material, we will email the address on your account before it takes effect.

14. Contact

For privacy questions and requests, email hello@tightlipai.com. Our postal address is Harbor Software LLC, 1309 Coffeen Avenue, STE 1200, Sheridan, Wyoming 82801, USA.