Privacy Policy
Effective October 15, 2026
This policy describes how the private Tin project handles information through its website, workspace and optional connected tools. Contact the project operator at tinbetav1@gmail.com with privacy questions or requests.
1. Information handled by Tin
- Workspace content: notes, chats, prompts, uploaded files, preferences, drafts, schedules and instructions you enter.
- Account and device information: Tin username, authentication records and device-pairing credentials needed to protect access.
- Connected platform information: authorized account identifiers and names, access and refresh tokens, granted permissions, and available profile, follower, video and engagement statistics. Available fields vary by platform and permission.
- Publishing records: the account, title, caption, hashtags, media selection, audience, visibility, approval, scheduled time, job status and provider results associated with posts you approve.
- Operational information: hosting and service logs may include request times, IP addresses, browser information, errors and connection status.
2. How information is used
Tin uses this information to provide the features you select: authenticate access, save and retrieve your workspace, display account analytics, prepare content, run configured workflows, publish approved posts and diagnose failures. Connecting an account is optional. Tin does not require your social-platform password; authorization happens with the platform or through your separately configured n8n installation.
3. Local and optional cloud storage
Tin's workspace uses encrypted browser storage for protected workspace data. Your passphrase and unlocked session affect access to that data. Some preferences and connection settings also use browser storage. Clearing browser data can remove local information; keep an appropriate backup.
In Studio's This PC mode, platform credentials and account records are stored in the local Studio database with encryption protected by Windows DPAPI. Local video files remain in your existing video-tool installation. The selected media is read and transmitted when an approved upload runs.
Optional cloud sync, cloud account connections and configured backups use their configured server-side storage or backup destination. These are separate from local Studio storage. A local-only setting does not mean every website request, AI request or authorized upload stays on your device. If you configure n8n, it has its own credentials, execution history and retention settings.
4. Services that receive information
Hosting providers process website requests. When you choose a cloud AI provider, the prompts and context needed for that request are transmitted to that provider. When you connect a social platform, Tin exchanges authorization information with it; refreshing analytics requests that platform's permitted account data. Publishing sends the approved content and media to the destination platform. Workflows send their configured inputs to your chosen n8n endpoint and any services that workflow uses.
These providers operate under their own privacy policies, including TikTok and Google/YouTube. Tin does not sell personal information or use connected account data for advertising brokerage. Publicly published posts are subject to the platform's visibility settings and policies.
5. Retention and deletion
Workspace content stays in its selected storage until removed, replaced or cleared. Local account credentials remain until disconnected or removed from local storage. Job history and analytics snapshots can remain after a connection is removed. Backups, exported files, n8n execution records and the social platform's own records are separate copies and may need separate deletion. Hosting and provider logs follow the applicable service's retention settings.
To stop account access, open Studio > Accounts and choose Disconnect, then revoke Tin in the connected platform's authorized-app settings. Disconnecting removes that connection's credential from the selected Tin storage; it does not delete a previously published post or all saved history. Delete published content on the destination platform.
For deletion of operator-controlled data or help removing local records, email tinbetav1@gmail.com with the subject Tin data deletion request, your Tin username and the connection or data you want removed. Do not send passwords, tokens or client secrets. The operator may request reasonable identity verification. Data held only on your device cannot be erased remotely by the operator; instructions can be provided. Requests will be addressed subject to applicable law and legitimate security or legal retention requirements.
6. Security and your choices
Encryption, access controls and signed device requests reduce risk but cannot protect against every threat, including an unlocked or compromised device. Protect your passphrase and Windows account, restrict authorized applications, and review approvals before publishing. You can decline optional integrations and browser permissions. Microphone or camera features need your permission; speech processing may involve your browser's service provider.
7. Children, changes and contact
Tin is not directed to children under 13. Do not use connected features if you do not meet the relevant platform's age requirements. Contact the operator if you believe a child's information was provided inappropriately. This page will show an updated effective date when practices change. For access, correction or other privacy requests, contact tinbetav1@gmail.com.