Privacy Policy

Information we collect

• Account data (email address, password hash).
• Session data (cookie-based session token, device/user agent, IP address).
• Audit/event data (actions taken inside the CRM).
• Workspace data you enter (organizations, deals, companies, contacts, notes, and metadata).
• Demo-mode cookie state (bookmarks/NDA demo state) when using `/demo/*`.

Cookies

This app uses HTTP-only cookies to maintain sessions and (for faster routing) cached org context. Typical cookie names include tb_session, tb_org, tb_role, and tb_demo_state.

How we use information

• Provide and secure access to the platform.
• Operate workflow features (teasers, outreach, NDAs, data rooms, offers).
• Detect abuse/fraud and enforce rate limits.
• Maintain an audit trail for compliance and traceability.

Sharing

In this testing environment, data is intended to remain within your VPS instance. If you integrate third-party providers (email delivery, storage, analytics), update this policy to describe what is shared and why.

Retention & deletion

Data is retained as long as the instance is operated. Add your retention schedule and deletion process (account deletion, organization deletion, export tools) before production.