What we collect, and why.

This privacy policy is a placeholder that describes, in plain language, how Tinctloom handles the data you put into the workspace — formula briefs, ingredient lookups, account and billing fields — once those features are live. The five short sections below cover the categories we expect to dominate the policy at launch.

The full policy text (legal bases, retention windows, sub-processor list, your rights, and the contact channel for data requests) is being drafted alongside the accounts and billing rollout and will replace these placeholders before any account data is collected.

When you brief the formula generator, the brief and the completion are routed through the Polsia AI proxy on our behalf; we do not call a model provider directly and we do not resell brief content to a third party. Ingredient directory searches return cached metadata and carry standard request metadata for rate limiting only.

Account profile data (email, name, hashed password) and the workspace data you save under it are scoped strictly to your account. Brand workspaces are isolated — one workspace never sees another workspace’s briefs, formulas, COAs, or brand assets.

A minimal cookie set: a session cookie to keep you signed in once accounts launch, a preference cookie for theme and locale, and a short-lived analytics cookie for unique-visitor counts. We do not use third-party advertising cookies and we do not sell data.

You can clear cookies in your browser at any time; clearing the session cookie signs you out, and clearing the analytics cookie resets the unique-visitor counter for that browser.

Stripe processes payments on our behalf when paid plans launch. Stripe returns a tokenized payment-method reference that we store against your workspace; we do not see or store full card numbers on our systems.

We retain billing records for the period required by tax and accounting law in the jurisdictions we operate in (typically seven years from the last transaction). Receipts and invoice metadata are available from the customer dashboard.

You can request access to the personal data we hold about you, ask us to correct inaccurate records, request deletion, restrict or object to particular processing, or receive a portable copy of the data you provided. Verified requests are answered within 30 days; complex requests may take up to 60 days with status updates.

Any privacy question, complaint, or data-rights request can be sent through the contact form below — we answer; we do not delegate privacy requests to a faceless queue.