Privacy Policy
wikiTaTa provides a project-memory and context system for AI-assisted work. This policy explains what we collect, why, and your choices. We aim to collect the minimum needed to run the service.
Who we are
wikiTaTa is operated by TMC555, LLC, TMC555, LLC · 737 Huntington Ave · Boston, MA 02115 · United States. TMC555, LLC is the data controller for the information described here. For any privacy question or request, email hello@wikitata.com.
Information we collect
- Account information — name, username, email, and phone number you provide when you create or are invited to an account. Phone/email are used for sign-in and two-factor authentication.
- Content you create — cards, notes, tasks, and project data you store in wikiTaTa.
- Usage analytics — we use Microsoft Clarity (heatmaps + session replay) and Google Analytics (via Google Tag Manager) to understand how the site is used. These set cookies and collect device/usage data. In the EEA, UK, and Switzerland they load only after you accept analytics in the cookie banner; elsewhere they are on by default and you can opt out at any time via the cookie control (the 🍪 button).
- First-party usage logs — we record basic, cookieless page-view events (the page visited, referring page, screen size, and a coarse device type such as "mobile" or "desktop" — never your full browser user-agent) for our own traffic measurement. This is first-party only, sets no cookies, is not shared with third parties, and is not used to track you across other sites.
- Diagnostics — if you submit a help request and explicitly opt in, limited troubleshooting data (browser, page, masked invite code — never your password) is included.
- Billing information — only if and when you subscribe to a paid plan. See Payments below.
We do not collect government identification numbers, health data, biometric data, or precise geolocation.
Cookies & consent
Strictly-necessary cookies (security, functionality) are always on. For optional analytics we use Google Consent Mode v2 with a region-aware model: in the EEA, UK, and Switzerland, analytics and tracking cookies load only after you click Accept in the consent banner; elsewhere, analytics is enabled by default under a notice-and-opt-out model, and you can opt out at any time using the cookie control (the 🍪 button), which clears known analytics cookies. You can change your choice whenever you like.
How we use information
- To provide, secure, and improve the service.
- To authenticate you (email magic links, phone one-time codes, TFA).
- To respond to support requests.
- To bill you and keep accounting records, if you are on a paid plan.
- To detect and prevent fraud and abuse.
We do not sell your personal data, we do not share it for cross-context behavioral advertising, and we do not use your content to train AI models.
Payments
wikiTaTa is currently free and we do not collect payment information. This section describes what will happen once paid plans launch.
Payments are processed by Stripe, Inc., which is certified to PCI DSS Service Provider Level 1. Card details are entered directly into Stripe's secure fields — your full card number and security code never reach our servers. We receive only your name and billing email, billing country and postal code, the transaction amount and status, the card brand and last four digits, and fraud signals such as the IP address of the transaction. Charges appear on your statement as "TMC555". Stripe also processes this data as an independent controller under its own privacy policy.
Processors we use
We share data only with infrastructure providers needed to run wikiTaTa: Supabase (database/auth), Vercel (hosting), Resend (email), Twilio (SMS verification), Microsoft (Clarity analytics), Google (Analytics/Tag Manager), and Stripe (payment processing, for paid plans). We may also disclose information to tax authorities or law enforcement where required by valid legal process, and to a successor entity in a merger or sale of assets — in which case the successor remains bound by this policy or one at least as protective. We do not sell your personal data.
Your rights (incl. EU/UK GDPR)
You may request access to, correction of, export of, or deletion of your personal data, and you may withdraw analytics consent at any time. To exercise any right, email hello@wikitata.com. We respond within 30 days and will never charge you or degrade your service for exercising a privacy right. If you are in the EEA or UK, you may also lodge a complaint with your local supervisory authority.
Where the GDPR applies, we rely on: performance of a contract (running your account), legitimate interests (security, fraud prevention, service improvement), legal obligation (tax and accounting records), and consent (optional analytics, which you may withdraw at any time).
Data retention
We keep account and content data while your account is active. After closure you may export your content for 30 days, after which it is deleted or anonymized. Analytics retention is limited (Google Analytics set to 14 months; Microsoft Clarity up to 13 months). Payment and tax records, where they exist, are retained for 7 years as required by law and cannot be deleted on request until that period ends.
Security
Traffic is encrypted in transit with TLS, content at rest is protected by row-level access controls, two-factor authentication is required at sign-in, and payment card data never touches our infrastructure. No system is perfectly secure — if we become aware of a breach affecting your personal data, we will notify you and any required regulator without undue delay. If you believe your account has been compromised, email hello@wikitata.com immediately.
International transfers
TMC555, LLC operates in the United States and our providers store and process data there. If you use wikiTaTa from outside the United States, your information is transferred to and processed in the US. For transfers from the EEA, UK or Switzerland we rely on the European Commission's Standard Contractual Clauses, which our providers incorporate in their agreements with us.
Children's privacy
wikiTaTa is intended for adults and business users. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us information, email hello@wikitata.com and we will delete it promptly.
Contact
TMC555, LLC
TMC555, LLC · 737 Huntington Ave · Boston, MA 02115 · United States
hello@wikitata.com — privacy, support and billing