Privacy Notice

Last Updated: 07/01/2025

This Privacy Notice describes how Tiled, Inc. and our subsidiaries and affiliates (collectively "Tiled," "we", “us” or "our") handle personal information that we collect though our websites, mobile applications and other digital properties that link to this Privacy Notice (collectively, the “Service”); as well as through social media, in connection with our marketing activities, and through other activities described in this Privacy Notice. This Privacy Notice also describes certain legal rights you may have under applicable laws and how you can exercise them.

Personal information we process for our customers

Tiled provides a web-based software platform that businesses use to create, distribute and interact with microapps. We may collect and process personal information in our role as a processor on behalf of our customers, including when customers use our services to: (i) host and/or share content and collect analytics; (ii) send electronic communications, including SMS messages and emails, to other individuals; or (iii) otherwise collect, use, share, disclose or process personal information via our Service.

Authorized Users: If you are using with the Service because you are an authorized user of one of our customers, or because you are interacting with a microapp from one of our customers’ accounts, the personal information we may collect, receive, process, and store may include your name, phone number, job title, employer name, mailing address, email addresses, credential data, profile data and other information identifiable to you; your search queries and viewing history; information related to your microapp viewing behavior and activities; location data (i.e., the latitude and longitude indicating where our microapps are accessed), and automatically collected information such as IP addresses and the type of device or operating system. Customer’s users can also upload content to the Service, which may include your personal information, and share such content with other users or with the public.

We have no direct relationship with the people whose personal information we collect on behalf of our customers while providing the Service to them. All such information is owned and controlled by our customers, who are the data controllers for such information with respect to data protection laws. Our use of this information is restricted by our agreements with those customers. We are not responsible for and do not control customers’ privacy and data security practices, which differ from those in this Privacy Notice. This Privacy Notice does not apply to any information we receive from or on behalf of our customers or their agents. If your personal information was submitted to us by, or on behalf of, a Tiled customer and you wish to exercise any rights you may have under applicable data protection laws, please inquire with the applicable customer directly.

Trial Users: If you access our platform on a trial basis, we may collect analytics data about your use of the platform to help us understand how trial users navigate the platform, identify areas of friction, and improve overall user experience. This may include information such as pages visited, features used, duration of activity, and actions taken within the platform.

Personal information we collect

Information you provide to us. Personal information you may provide to us through the Service, at a tradeshow, on our website, at our offices, by responding to inquiries from us, or otherwise includes:

Contact data, such as your first and last name, and email and physical addresses. ‍
Profile data, such as your username and the password that you set to establish an online account with us, as well as any other information that you add to your account profile.
‍Communications that we exchange, including when you contact us with questions, feedback, or otherwise. To help users navigate our product support pages more effectively, we may offer an AI-powered chatbot. This chatbot can answer common questions, and provide general assistance based on the information available in our support content. We may use your interactions with the chatbot to improve its performance over time. This includes fine-tuning the AI model based on aggregated and anonymized user input to make future responses more accurate and helpful. The chatbot does not make decisions that affect your rights or access to our services. For account-specific questions or issues requiring human support, we may direct you to contact our support team directly.
‍Marketing data, such as your preferences for receiving communications about our products and services, and details about how you engage with our communications.‍
Other information that we may collect which is not specifically listed here, which we will use as described in this Privacy Notice or as otherwise disclosed to you at the time of collection.

Third-party sources. We obtain personal information from other sources, including:

‍Data providers, such as information services and data licensors that provide contact, profile, demographic and other information. ‍
Public sources, such as social media platforms.
‍Integrated services, such as Google, Salesforce, Adobe XD, Slack or other public or proprietary services offered by third parties that have been integrated into a Tiled account or microapp.

For Google user data collected as part of the Service’s integration with Google’s APIs, the use of the data adheres to Google’s User Data Policy established for its API Services and its stated Limited Use requirements found here: https://developers.google.com/terms/api-services-user-data-policy.

Automatic data collection. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your activity over time on our sites and other sites and online services. This information may include:

‍Device data, such as your computer or mobile device operating system type and version number, manufacturer and model, browser type, screen resolution, IP address, unique identifiers, the website you visited before browsing to our website, and general location information such as city, state or geographic area.
‍Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access.

Cookies. Some of our automatic data collection is facilitated by cookies and similar technologies. For more information, see our Cookie Notice.

‍How we use your personal information

We use your personal information for the following purposes or as otherwise described at the time we collect it:

Service delivery. We use your personal information to:

provide, operate and improve the Service and our business;
establish and maintain your user profile on the Service;
enable security features of the Service, such as by sending you security codes via email or SMS;
communicate with you about the Service, including by sending announcements, updates, security alerts, and support and administrative messages;
understand how you interact with content presented through our website;
understand your needs and interests, and personalize your experience with the Service and our communications; and
provide support for the Service, respond to your requests, questions and feedback.

Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business. Sometimes, we may also create aggregated, de-identified or other anonymous data from personal information we collect by removing information that makes the data personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business.

‍Marketing and advertising. We and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes:

‍Direct marketing. We may send you Tiled-related or other direct marketing communications as permitted by law, including by email. You may opt-out of our marketing communications as described in the Opt-out_of_marketing section below. ‍
Interest-based advertising. We may contract with third-party advertising companies and social media companies to display ads on our Service and other sites. These companies may use cookies and similar technologies to collect information about you (including the device data, online activity data and/or geolocation data described above) over time across our Service and other sites and services or your interaction with our emails, and use that information to serve ads that they think will interest you. You can learn more about your choices for limiting interest-based advertising, in the Your choices section below.

Compliance and protection. We may use your personal information to:

comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities;
protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);
audit our internal processes for compliance with legal and contractual requirements and internal policies;
enforce the terms and conditions that govern the Service; and
prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

How we share your personal information

We may share your personal information with the following parties and as otherwise described in this Privacy Policy or at the time of collection:

Affiliates, including our subsidiaries and other corporate affiliates, for purposes consistent with this Privacy Notice.
Service providers, including companies and individuals that provide services on our behalf or help us operate the Service or our business, such as hosting, information technology, customer service, email delivery, and analytics.
Advertising partners, including third party advertising companies that collect information about your activity on the Service and other online services to help us advertise our Service, and/or use hashed customer lists that we share with them to deliver ads on their platforms to those customers and similar users.
Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.
Authorities and others, including law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.
Business transferees, including relevant participants in business transactions (or potential transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, Tiled or our affiliates (including, in connection with a bankruptcy or similar proceedings).

Social Media Platforms, if you choose to use social sharing features, and other integrated tools, we offer that allow you to share microapps or actions you take when using our Service with other media or applications, and vice versa. The use of these features enables the sharing of information with others, depending on the settings you establish with the entity that provides the social sharing feature. For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy notices of the entities that provide these features.
Analytics Partners, including third-party analytics services which may use cookies, web beacons, and other technologies to collect information about your use of our Service, including your IP address, web browser, pages viewed, time spent on pages, links clicked, and other usage information. This information may be used to analyze and track data, and to determine the popularity of certain content so we can better understand your use of our Service.
Our Customers, to whom we will share details about you and your interactions with our Service and microapps, including information like your IP address, web browser, pages viewed, time spent on pages, links clicked, and other usage information, with users within the customer account publishing the microapp. This collection and use of information on behalf of our customers is controlled by the customer and subject to the customer’s privacy policy.

Your choices

You have the following choices with respect to your personal information.

Access or update your information. If you have registered for an account with us, you may review and update certain account information by logging into your account. You may also remove optional information from your account, such as a profile photo. Customer accounts are managed by the designated account administrator. Administrators can delete users or close the entire account, subject to their agreement with us. If you are not an administrator and wish to delete your account or associated data, please contact your account administrator. They can submit a support request on your behalf. For some requests, such as changes to billing information or account data deletion, we may ask you to verify your identity before we can process your request. Please note that we may keep certain personal information as necessary to comply with our legal obligations or for legitimate business purposes, such as to resolve disputes or enforce our agreements.
Opt-out of marketing communications. You may opt out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us. You may continue to receive service-related and other non-marketing emails. If you receive marketing text messages from us, you may opt out of receiving further marketing text messages from us by replying STOP to our marketing message.
Cookies. Most browsers let you remove and/or stop accepting cookies from the websites you visit. To do this, follow the instructions in your browser’s settings. Many browsers accept cookies by default until you change your settings. If you do not accept cookies, however, you may not be able to use all functionality of the Service and the Service may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org.
Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
Declining to provide information. We need to collect personal information to provide certain services. If you do not provide the information requested, we may not be able to provide those services.
Data Requests. Depending on where you live, you may have certain rights under U.S. state law with respect to the personal information we hold on you, including the following:
- Right to Know. You can request the following information about how we collected and used your personal information during the last 12 months:
  - The categories of sources from which we collected personal information;
  - Our business or commercial purpose for collecting and/or selling personal information;
  - The categories of third parties with which we share personal information;
  - The categories of personal information that we “sold” (as defined by applicable state privacy laws) or disclosed for a business purpose; and
  - The categories of third parties to whom the personal information was “sold” or disclosed for a business purpose. If you are located in Oregon, you can also request a list of third parties to which we have disclosed data
- Right of Access. You can request a copy of the personal information that we have collected about you.
- Right of Correction. You can ask us to correct any inaccurate personal information that we hold on you.
- Right of Deletion. You can ask us to delete the personal information we have collected about you.
- Opt-Out of Targeted Advertising. You can opt out of certain processing of personal information for targeted or interest-based advertising purposes, including sharing personal information with our marketing partners for cross-contextual or interest-based behavioral advertising.
- Out-out of Other “Sales” of Personal Information. You have the right to opt out of the sale of your personal information. “Sale” is defined broadly under certain state privacy laws to include the transfer of personal information to third parties in exchange for anything of value. We do not “sell” your personal information for money. However, we may share personal information (in the form of identifiers and internet activity information) with third-party advertising partners for the purposes of targeting advertisements for our Service to you on non-Tiled websites, applications and services. In addition, we may allow third-party analytics partners to collect certain personal information from you on our Service in exchange for insights or other benefits. State privacy laws may classify our use of these services as “selling” or “sharing” your personal information. You can opt out of the sale or sharing of your personal information by clicking the “Do Not Sell or Share My Personal Information” link in the footer of our website or by emailing us at privacy@tiled.co. Under certain state privacy laws, you can also opt out by enabling the Global Privacy Control (“GPC”) signal from your browser. If you notify us of your preference through GPC, we will honor your request with respect to the browser or device that sends us the GPC signal. If you are logged in, your preference will be associated with your account and if you log in from another device or browser, you will be automatically opted out. However, if you are not logged into your account, your request will only be associated with the browser you are currently using. For more information about the Global Privacy Control, please visit https:/globalprivacycontrol.org.
- Opt-out of Automated Processing or Profiling. Some states grant individuals the right to opt out of automated processing or profiling of personal information when it's used to make significant decisions—such as those related to employment, credit, or legal matters. Where we use automated processing or profiling to detect, prevent, or respond to fraud or illegal activity, this right does not apply. Outside of these limited uses, we do not engage in profiling or automated decision-making as defined by applicable state privacy laws.
- Right to Limit the Use and Disclosure of Sensitive Personal Information or Use of Sensitive Data Inferences. Tiled does not intentionally collect sensitive personal information as that term is defined under applicable state laws, nor draw inferences therefrom.
- Right of Appeal. If we deny (or otherwise refuse to act) on your request to exercise your rights, we will provide you with information about how you can appeal our decision.
- Non-Discrimination. You have the right not to receive discriminatory treatment by us for the exercise of your rights conferred by applicable law.

When you submit a request, we will take steps to verify your identity and your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information in order to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for denial.

You may also designate someone as an authorized agent to submit requests and act on your behalf. Authorized agents will be required to provide proof of their authorization. Additionally, Tiled may require you to confirm that you have provided the authorized agent permission to submit the request, and you must provide the authorized agent with signed permission. “Signed” means that the written attestation, declaration, or permission has either been physically signed or provided electronically pursuant to the Uniform Electronic Transactions Act. Tiled may deny a request from an authorized agent who does not submit proof that he or she has been authorized to act on your behalf.

Customer Data. We collect information for our customers. If you receive access to the Service under an account with one of our customers, including viewing any microapp or other content published under that account, and would no longer like to be contacted by that customer, please contact the customer that you interact with directly.

Additional State Law Disclosures

In addition to the rights and choices described above, California law requires the following additional disclosures:

Notice of Collection. While this information is covered in greater detail above, the categories of personal information that we have collected – as described by the California Consumer Privacy Act are:
- Identifiers. Includes direct identifiers such as name, alias, email, phone number, address, unique personal identifier, online identifier, IP address, or other similar identifiers.

Other individual records. Includes your account and profile information and customer records that contain Personal Information, such as name, demographics, and other characteristics or descriptions, contact information, and financial or payment information.
Commercial information. Includes records of Services purchased, obtained, or considered, or other purchasing or use histories or tendencies.
Internet or other electronic network activity. Includes browsing history, clickstream data, search history, and information regarding interactions with our websites, advertisements, or emails, including other usage data related to your use of any of our Services or other similar online services.
Location data. Such as general location information or geolocation data about a particular individual or device.
Audio, Electronic, Visual, or Similar Information. Includes information collected via call recordings if you are interacting with us in a customer service capacity or if you call us on a recorded line, recorded meetings and webinars, videos, and photographs.
Inferences. Such as inferences drawn from any of the information described in this section about a consumer including inferences reflecting consumer preferences, characteristics, behaviors, attitudes, abilities, and aptitudes.

Business or Commercial Purpose for Collecting and Using Personal Information. We collect each category of personal information listed above for the business or commercial purposes described in “Personal information we collect” section above.
Categories of Sources of Personal Information. We collect each category of personal information listed above directly from you, through automatic data collection means, or through the third-party sources described in “Personal information we collect” section above.
Categories of Personal Information Disclosed. In the preceding 12 months, we have disclosed the categories of personal information listed above in the circumstances described in “How we share your personal information” section above.
De-identified Data Disclosure. Tiled may use de-identified data in some instances. Tiled either maintains such data without attempting to re-identify it or treats such data as personal information subject to this Privacy Notice and applicable law.
Shine the Light. California Civil Code § 1798.83, also known as the “Shine The Light” law, permits California residents to request and obtain from us, once a year and free of charge, information about categories of Personal Information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared Personal Information in the immediately preceding calendar year. Tiled does not share personal information with third parties for their direct marketing purposes.

Data Retention

We will retain personal information we process on behalf of our customers for as long as needed to provide services to our customers.

Other sites and services

The Service may contain links to websites, mobile applications, and other online services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. In addition, our content may be included on web pages or in mobile applications or other

online services that are not associated with us. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions.

Security

We employ a number of technical, organizational and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal information.

International data transfer

We are headquartered in the United States and may use service providers that operate in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country.

Children

The Service is not intended for use by children under 16 years of age. If we learn that we have collected personal information from a child under 16 without the consent of the child’s parent or guardian as required by law, we will delete it.

Changes to this Privacy Notice

We reserve the right to modify this Privacy Notice at any time. If we make changes to this Privacy Notice, we will notify you by updating the date of this Privacy Notice and posting it on the Service. If required by law we will also provide notification of changes in another way that we believe is reasonably likely to reach you, such as via email or another manner through the Service. Any modifications to this Privacy Notice will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your continued use of the Service after the effective date of any modified Privacy Notice indicates your acceptance of the modified Privacy Notice.

How to contact us

Email: privacy@tiled.co

Mail: Tiled, Inc. 17190 Bernardo Plaza, Ct., San Diego, CA 92128

‍

Information regarding the European Economic Area

Notice to European users

This section applies only to individuals in the United Kingdom and the European Economic Area.

Personal information. References to “personal information” in this Privacy Notice are equivalent to “personal data” under European data protection legislation.

Processor. Tiled, Inc. is the controller of your personal information covered by this Privacy Notice for purposes of European data protection legislation. Tiled, Inc. is the processor of any personal information we collect, receive, or are otherwise process in connection with a customer account, including information collected when you access the Service or view any microapp or other content published by that customer.

Legal bases for processing. The legal bases of our processing of your personal information as described in this Privacy Notice will depend on the type of personal information and the specific context in which we process it. However, the legal bases we typically rely on are set out in the table below. We rely on our legitimate interests as our legal basis only where those interests are not overridden by the impact on you (unless we have your consent or our processing is otherwise required or permitted by law). If you have questions about the legal basis of how we process your personal information, contact us at privacy@tiled.co.

Processing purpose

Details regarding each processing

purpose listed below are provided in the section above titled “How we use your personal information”.

Legal basis

Service delivery

Processing is necessary to perform the contract governing our provision of the Service or to take steps that you request prior to signing up for the Service.

Where we cannot process your personal information as required to operate the Service on the grounds of contractual necessity, we process your personal information for this purpose based on our legitimate interest in providing you with the Service you access and request.

Marketing and advertising

Processing is based on your consent where that consent is required by applicable law.

Where such consent is not required by applicable law, we process your personal information for these purposes based on our legitimate interests in promoting our business.

Research and development

Compliance and protection

These activities constitute our legitimate interests.

Compliance with legal obligations

Processing is necessary to comply with our legal obligations.

Actions we take with your consent

Processing is based on your consent. Where we rely on your consent you have the right to withdraw it any time in the manner indicated when you consent or in the Service.

Use for new purposes. We may use your personal information for reasons not described in this Privacy Notice, where permitted by law, and the reason is compatible with the purpose for which we collected it.

Sensitive personal information

We ask that you not provide us with any sensitive personal information (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through the Service, or otherwise to us. If you do not consent to our processing and use of such sensitive personal information, you must not submit such sensitive personal information through our Service.

Retention

We retain personal information where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested; to comply with applicable legal, tax or accounting requirements; to establish or defend legal claims; or for fraud prevention). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Your rights

European data protection laws give you certain rights regarding your personal information. If you are located within the United Kingdom or European Economic Area, you may ask us to take the following actions in relation to your personal information that we hold:

• Access. Provide you with information about our processing of your personal information and give you access to your personal information.

• Correct. Update or correct inaccuracies in your personal information.

• Delete. Delete your personal information.

• Transfer. Transfer a machine-readable copy of your personal information to you or a third party of your choice.

• Restrict. Restrict the processing of your personal information.

• Object. Object to our reliance on our legitimate interests as the basis of our processing of your personal information that impacts your rights.

You may submit these requests by email to privacy@tiled.co or our postal address provided above in the How to contact us section. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions. If you would like to submit a complaint about our use of your personal information or our response to your requests regarding your personal information, you may contact us or submit a complaint to the data protection regulator in your jurisdiction. You can find your data protection regulator here.

Special note regarding personal information processed by Tiled for customers

If we have collected or are otherwise processing your personal information in connection with your access to the Service under an account with one of our customers, including viewing any microapp or other content published under that account, you should contact that customer (e.g. the business with whom you emailed or otherwise engaged online using our Service) directly to exercise any of the rights above.

Cross-Border Data Transfers

As noted above, personal information we collect may be stored and processed for the purposes set out in this Privacy Notice in the United States where we are based or in any country where we have operations or engage vendors or service providers. These countries may have different data protection and government surveillance laws than your country. Some of these countries have received a European Commission adequacy decision. For other countries, we take measures such as entering into written agreements with the relevant third party to ensure your personal information is protected. In most cases, our legal reason for processing and transferring your personal information is to fulfill a contract with you, generally to provide the services you have requested, whether free or paid.

‍