Privacy policy
Last updated 8 October 2026
Tinbird helps people sell what they make. This policy explains what personal information we collect when you open a shop with us or visit one, why we collect it, who helps us look after it, and the choices you have.
Who we are
Tinbird is run by Tinbird Labs, based in British Columbia, Canada. When this policy says “we” or “us”, it means Tinbird Labs.
For questions about your personal information, email hello@tinbird.shop.
Sellers and their customers
We handle personal information in two different roles.
- Sellers. When you open a shop, we decide how your account information is used, so we are responsible for it.
- Customers and visitors of a shop. When you buy from or sign up to hear from a shop on Tinbird, the seller is responsible for your information, and we process it on their behalf to run their shop. Questions about an order are best sent to the seller first.
What we collect
The information we collect depends on how you use Tinbird. For example:
- Account information, such as your email address, sign-in details and anything you tell us when you ask to join.
- Shop information, such as your shop’s name, handle, products, photos and settings.
- Order information, such as a customer’s name, email address, delivery address and what they ordered.
- Download activity: when a buyer of a digital product opens their downloads page or downloads a file, with the IP address and browser it came from, and when access to their downloads is given, paused, stopped or ended. When the seller stops or restarts downloads, it records the email address they sign in with. The shop’s seller sees it on the order, so they can show their bank that the buyer received what they paid for if the payment is disputed.
- Payment information. Card and bank details are handled by our payment processor, Stripe, under its own privacy policy. We don’t see full card numbers.
- Email preferences, such as when someone asks a shop to tell them about restocks or new releases, and when they unsubscribe.
- Usage information, such as the pages visited on a shop, the website that led there and approximate location (like city and country) worked out from an IP address. We use this to show sellers how their shop is doing, and we don’t use it to identify individual visitors. Locations are looked up on our own servers in GeoLite data created by MaxMind, available from https://www.maxmind.com.
- Technical information, such as IP address, browser and device details, which our servers record to keep Tinbird working and secure.
- Messages you send us, such as support requests.
How we use it
- To provide, run and support Tinbird and the shops on it.
- To process orders and payments, and to send the emails the service needs, like receipts, sign-in codes and account notices.
- To show sellers how their shop is doing.
- To keep Tinbird safe, including preventing fraud, spam and abuse.
- To understand how Tinbird is used, and to improve it.
- To meet our legal obligations and enforce our terms.
We don’t sell personal information, and we don’t use it for third-party advertising.
Who helps us
We use trusted service providers to run Tinbird, for example for hosting, file storage, payments, email delivery and protection against bots. They may only use personal information to provide their services to us.
We may also share information when the law requires it, to protect the rights and safety of Tinbird, our users or others, or as part of a sale or reorganisation of our business.
Our service providers may store or process information outside Canada, including in the United States. There, it may be accessible to courts and authorities under local law.
How long we keep it
We keep personal information only as long as we need it for the purposes in this policy, including to meet legal, tax and accounting obligations, resolve disputes and enforce our agreements. After that we delete it or make it anonymous. Download activity is kept as long as the order it belongs to, because a payment can be disputed months after it was made.
Security
We use reasonable safeguards to protect personal information. No service can be completely secure, so we can’t guarantee the security of information sent to or stored with us.
Your choices
Depending on where you live, you may have the right to see, correct or delete the personal information we hold about you, or to withdraw your consent to some uses of it. Email hello@tinbird.shop and we will respond as the law requires. You can unsubscribe from a shop’s emails at any time with the link in each one.
If you’re unhappy with how we’ve handled your information, please tell us. You may also be able to complain to your local privacy regulator.
Children
Tinbird isn’t meant for children, and you must be 18 or over to open a shop.
Changes to this policy
We may update this policy from time to time. If we make significant changes, we will let sellers know, for example by email or in the app. The date at the top shows when this page last changed.