Terms of service

These terms are an agreement between you and Harbor Software LLC, a Wyoming limited liability company. Harbor Software LLC makes and runs Tightlip. In these terms, “we”, “us” and “our” mean Harbor Software LLC. “Tightlip” means the website at tightlipai.com, the web workspace, the browser extension, the SDK, the command-line tool and the local proxy.

Please read these terms before you use Tightlip. If you do not agree to them, do not use Tightlip.

In short

• You buy prepaid credits. One credit costs USD 0.05. Each eligible new account gets USD 20 of free credits once.
• Tightlip swaps sensitive details for placeholders on your device before your text reaches an AI. Detection is automatic and can miss things, so check the preview before you send.
• You stay responsible for what you send to AI providers and for how you use their answers.
• Keep your API key secret. You are responsible for credits used with it.
• Unused paid credits can be refunded within 14 days of purchase. The refund policy has the details.
• Wyoming law governs these terms.

This summary helps you find your way. If it ever differs from the numbered sections below, the numbered sections apply.

1. The agreement

You accept these terms when you create an account, buy credits, install the extension or SDK, or use Tightlip in any other way, whichever happens first.

Two documents are part of these terms: the acceptable use policy and the refund policy. A breach of either one is a breach of these terms. Our privacy notice explains how we handle personal data. It is a notice and does not form part of this agreement.

If you accept these terms for a business or other organization, you confirm that you have authority to do so, and “you” means that organization.

If you and we sign a separate written agreement, such as an enterprise agreement, that agreement applies where it differs from these terms.

2. Who can use Tightlip

You must be at least 18 years old to use Tightlip. You may use it for work or for personal use.

You may not use Tightlip if you are in a country or region under comprehensive US sanctions, or if US sanctions law forbids us from providing it to you.

3. Your account

You need an account to use the web workspace, to buy credits and to get an API key. The free leak check at /try works without one. Accounts and sign-in are run by Clerk, our sign-in provider. Give accurate details when you sign up and keep them up to date.

Keep your sign-in details to yourself. You are responsible for everything done through your account. If you think someone else has used it, email hello@tightlipai.com straight away.

4. Credits

What a credit buys

Tightlip is pay as you go. You buy credits in advance, and protected prompts use them up. One credit costs USD 0.05 and covers one protected prompt of up to 8,000 input tokens. Each further 8,000 input tokens, or part of 8,000, uses one more credit. A token is a small piece of text, about four characters of English.

In the web workspace, the AI model counts the input tokens for each message you send. They include the earlier messages in that chat and the instructions Tightlip sends to the model with them, so a message late in a long chat uses more credits than the same message in a new chat. If the model declines to answer, the credits for that message are still used, because the model has already processed it.

When your balance runs low

Before each workspace message, Tightlip checks that your balance can cover it. If it cannot, the message is not sent. When your balance runs out, the browser extension blocks protected sends and tells you why, and by default the SDK stops the prompt from being sent. If you choose to pause Tightlip on a site, your prompts on that site go to the AI provider without protection.

If two requests run at the same moment, your balance can go slightly below zero. Any shortfall comes out of your next top-up.

Free credits

Each new account gets USD 20 of free credits (400 credits) once, on first sign-in, if it has a verified email address. Each person may receive free credits only once, however many accounts they open. We do not give free credits to temporary email addresses, email addresses with a plus sign, or networks that have already claimed several grants that day. Free credits have no cash value. They cannot be refunded, sold or transferred.

Until your first paid top-up, the web workspace allows up to 25 messages a day (counted in UTC) and up to about 8,000 tokens per message, history included. A paid top-up removes both limits.

Buying credits

You can top up with USD 100 (2,000 credits), USD 250 (5,000 credits), USD 500 (10,000 credits) or USD 1,000 (20,000 credits). You pay by card through Stripe Checkout. Harbor Software LLC is the merchant for every purchase. You enter your card details on Stripe’s payment page, and we never receive your full card number.

Credits are added to your balance once Stripe confirms the payment. Prices are in US dollars and do not include taxes. You are responsible for any taxes that apply to your purchase, other than taxes on our income.

For larger volumes we offer an annual commitment paid by invoice. Email hello@tightlipai.com to talk about it.

How long credits last

Credits stay valid for at least 12 months from the date they were added to your account.

We may change prices, or what a credit buys, in the future. Section 17 explains how we tell you about changes.

5. Refunds

Unused paid credits can be refunded within 14 days of purchase, on request, to the original payment method. If you have used part of a top-up, we refund the unused part. Used credits and free credits cannot be refunded. The refund policy explains how to ask.

6. How Tightlip works, and its limits

Tightlip looks for sensitive details in your text, such as names, account numbers, patient identifiers, case numbers and secrets. On your device, it swaps each one for a placeholder like [PERSON_1], sends the placeholder version (the “protected text”) to the AI, then swaps the real values back into the answer. The table that links each placeholder to its real value (the “vault”) stays on your device.

Detection is automatic and imperfect. It can miss a sensitive detail, and it can swap something that was harmless. Anything Tightlip does not detect stays in the protected text as you wrote it and is sent to the AI. If an AI changes a placeholder beyond recognition, that placeholder stays in the answer as it is.

You are responsible for what you send to AI providers. Before you send, check the preview of what the AI will see. Add client names, matter names and anything else that must always be hidden to your custom terms list.

You are also responsible for checking an AI’s answers before you rely on them. Answers come from the AI model, and they can be wrong. Nothing that Tightlip or an AI model produces is legal, medical, financial or other professional advice.

7. AI providers

Web workspace. The workspace uses Anthropic’s Claude models, and the cost of the model is included in your credits. Your protected text passes through our servers on its way to Anthropic, and the answer comes back the same way. Anthropic processes it under its Commercial Terms of Service. Our privacy notice explains what we keep and what we do not.

Browser extension, SDK and proxy. You bring your own AI: your ChatGPT, Claude or other account, or your own API key with an AI provider. Protected text goes straight from your browser or your server to that provider and does not pass through our servers. Your use of that provider is governed by your own terms with it, and it charges you separately. Your credits pay for Tightlip’s protection only.

We do not control the AI provider you choose for the extension, SDK or proxy. We are not responsible for what it does with the text it receives, for its answers or for whether it is available. Tightlip is not affiliated with OpenAI, Anthropic, Google or Microsoft.

8. Sensitive and regulated data

Tightlip helps you keep sensitive details away from AI providers. You still decide whether your use of Tightlip, and of any AI provider, meets the laws, professional rules and contracts that apply to you. Examples include health privacy laws, financial privacy laws and duties of confidentiality to clients.

Harbor Software LLC is not a business associate under HIPAA and does not sign business associate agreements. Do not submit protected health information through the Tightlip web workspace. Tightlip reduces what reaches an AI provider; it does not make an AI tool acceptable for patient information. Tightlip holds no security or compliance certification.

9. API keys

The browser extension, SDK and proxy use an API key to meter your credits. You can create and rotate your key in your account under API keys. We show each new key once.

Keep your key secret. Do not put it in public code, share it outside your organization or send it by email. You are responsible for all use of your key, including credits used by anyone who has it. If you think someone else has your key, rotate it straight away. Rotating it stops the old key from working.

When your key is used, we receive the key, the number of credits and where they were used (extension, SDK or proxy). We never receive your text this way.

10. The Tightlip software

While you follow these terms, we give you a personal, non-exclusive, non-transferable right to install and use the Tightlip browser extension, SDK, command-line tool and proxy for yourself or for your organization. You may use the SDK and proxy inside your own products, with your own API key. We may withdraw this right if you break these terms.

We own Tightlip, including its software, its design and the Tightlip name. These terms do not transfer any ownership to you. You may not copy, sell or give away the software, or change it so that it protects text without metering the credits it should. If you send us ideas or feedback, we may use them without owing you anything.

We may update the software. Some updates may be needed to keep using Tightlip.

11. Your content

As between you and us, you own the text you put into Tightlip and the answers you get back. We claim no rights in them. You give us only the permission we need to carry workspace messages to Anthropic and back to you.

We do not store the text you protect. The vault stays on your device, so we cannot recover it for you. If you close the workspace tab, or your browser clears the extension’s session storage, the vault for that conversation is gone and its placeholders can no longer be swapped back.

12. Acceptable use

You must follow our acceptable use policy. It is part of these terms. You are responsible for use of Tightlip through your account and your API key, including use by people you let use them.

13. Availability

We do not promise that Tightlip will always be available or free of errors. We may change, add or remove features. We may pause Tightlip for maintenance or to deal with a security problem. The web workspace depends on Anthropic, and the extension, SDK and proxy depend on your AI provider, so an outage at a provider can stop them working.

14. Warranty disclaimer

Tightlip is provided “as is” and “as available”. To the extent the law allows, we give no warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, accuracy and non-infringement. We do not warrant that Tightlip will detect every sensitive detail, that AI answers will be correct, or that Tightlip will be uninterrupted or free of errors.

Some places do not allow some of these exclusions. If you live in one of them, the exclusions apply only as far as the law there allows.

15. Limitation of liability

To the extent the law allows:

• we are not liable for any indirect, incidental, special, consequential or punitive damages, or for lost profits, lost revenue, lost data or harm to reputation, arising from or related to Tightlip or these terms; and
• our total liability for all claims arising from or related to Tightlip or these terms is limited to the greater of the amount you paid us in the 12 months before the claim arose and USD 100.

These limits apply whatever the legal basis of the claim, and even if we were told the damage was possible. Nothing in these terms limits liability that the law does not allow to be limited, such as liability for fraud.

16. Suspension and termination

You can stop using Tightlip at any time. To close your account, email hello@tightlipai.com from the address on your account. Credits left on a closed account can no longer be used, so if you want a refund of unused paid credits, ask for it within the refund window first.

We may suspend or close your account, or stop an API key from working, if you break these terms or the acceptable use policy, if a payment is reversed or disputed, if your use creates a security risk for Tightlip or for others, or if the law requires it. Where a problem can be fixed and the situation allows, we will tell you first and give you a reasonable chance to fix it.

Credits used in breach of these terms are not refunded. We may remove free credits obtained in breach of the acceptable use policy.

If we close your account when you have not broken these terms, or if we stop offering Tightlip, we will refund the unused paid credits on your account. Where we can, we will email you at least 30 days before.

Sections 5, 11, 14, 15, 18 and 19 continue to apply after your account closes.

17. Changes to these terms

We may update these terms. The current version is always on this page, with the date of the last update at the top. If a change is material, for example one that makes credits you already hold buy less, we will email the address on your account at least 30 days before it takes effect. A change the law requires, or one that only concerns a new feature, can take effect sooner.

If you do not agree to a change, stop using Tightlip before it takes effect. If you keep using Tightlip after that, the updated terms apply to you.

18. Governing law and disputes

These terms are governed by the laws of the State of Wyoming, USA, without regard to its conflict-of-law rules.

If you have a complaint, email hello@tightlipai.com first. Before either of us starts a court case about these terms or Tightlip, the one with the complaint will describe it in writing, and we will both try in good faith to settle it for 30 days. Either of us may still ask a court for urgent relief during that time, for example to stop misuse of an API key or of our software.

The exclusive venue for any court case about these terms or Tightlip is the state and federal courts located in Wyoming, and you and we agree to the jurisdiction of those courts.

If you use Tightlip as a consumer, you keep the protection of any law of the place where you live that cannot be changed by contract. You may also bring a claim in the courts where you live if that law gives you the right to.

19. General

• Whole agreement. These terms, with the documents listed in section 1, are the whole agreement between you and us about Tightlip. They replace anything said or written before on the same subject.
• Transfer. You may not transfer these terms to anyone else without our written consent. We may transfer them to a company that takes over Tightlip or our business.
• If part is invalid. If a court decides part of these terms cannot be enforced, that part is changed as little as needed to make it enforceable, or removed, and the rest stays in force.
• No waiver. If we do not enforce a term straight away, we can still enforce it later.
• Events outside our control. Neither of us is responsible for a delay or failure caused by events beyond reasonable control, such as a natural disaster, war, a power or network failure, or an outage at a hosting or AI provider.
• Notices. We send notices to the email address on your account, so keep it up to date. You can send notices to us by email to hello@tightlipai.com or by post to the address in section 20.

20. Contact

Questions about these terms go to hello@tightlipai.com. The contracting party under these terms is:

Harbor Software LLC
1309 Coffeen Avenue, STE 1200
Sheridan, Wyoming 82801, USA