Your data, explained plainly.

LinkedOtter LLC owns and operates Tipoff. We act as a controller for our website, account, billing, product analytics, and business-contact data. We generally act as a processor or service provider for private CRM records, lists, materials, and instructions a customer submits to its workspace.

The customer is responsible for its instructions, permissions, notices, outreach, and lawful basis for data it provides or directs us to process.

• Account and business data: name, work email, organization, role, workspace settings, support messages, and billing status.
• Customer content: company and people lists, CRM fields, target profiles, prompts, uploaded documents, campaign configuration, and connected-tool metadata.
• Business intelligence: company firmographics, professional information, public buying signals, and licensed enrichment data.
• Usage and security data: device and browser data, IP address, request and audit logs, feature activity, and diagnostic events.
• Optional company-level website data: network information used to infer a visiting company. The tag is designed not to set cookies or retain full IP addresses and honors supported opt-out signals before lookup.

We receive data from account holders and their colleagues, customer uploads and connected systems, public sources, licensed business-data providers, the Tipoff application and website, and service providers that support authentication, payments, hosting, support, analytics, enrichment, and security.

On public Tipoff pages and the sign-in page, we offer a separate choice to allow Google Analytics. It stays off unless you select Allow analytics, and it also stays off when the browser sends Global Privacy Control or Do Not Track.

If allowed, Google Analytics receives the page path without its query string, page title, broad device and browser information, an approximate location derived by Google, campaign labels such as UTM source, and fixed events such as a call-to-action click or sign-in start. Tipoff does not send form text, email addresses, workspace content, authenticated product activity, advertising identifiers, or cross-site advertising signals through this integration.

You can change the choice from the Analytics choices control on public pages. Rejecting or withdrawing removes Tipoff's Google Analytics cookies from the current browser and stops new analytics events. Google's processing is also governed by its own terms and privacy practices.

You can sign in with an email address and password, Google, or a company single sign-on connection enabled by your workspace. We use Supabase to manage authentication and session cookies. If you choose Google or company single sign-on, that identity provider also processes your sign-in and supplies the account information needed to identify you.

Email verification and password recovery may require a one-time email link. These are separate from ordinary password sign-in. Passwords are used for authentication, not as inputs to Tipoff's AI employee, enrichment, or marketing analytics.

• Provide, personalize, secure, troubleshoot, and improve Tipoff.
• Match, enrich, score, prioritize, and display companies and professional contacts.
• Run automations and connected actions only when configured or directed by an authorized customer user.
• Authenticate users, manage billing, prevent abuse, and keep audit records.
• Communicate about the service and comply with legal obligations.

Where applicable, our legal bases include performance of a contract, legitimate interests in operating and securing a B2B service, consent, and compliance with law. A customer determines the legal basis for customer-controlled data.

We disclose only what is reasonably needed to service providers and subprocessors that support hosting, databases, authentication, payments, email, analytics, AI, enrichment, support, and security; to connected tools at a customer's direction; during a corporate transaction subject to appropriate safeguards; or when required to protect rights, safety, or comply with law.

Third-party integrations have their own terms and privacy practices. Connecting a tool authorizes Tipoff to exchange the information required for the requested action.

When you request an AI feature, we may send the prompt and relevant workspace content to the model provider configured for that feature, which may include OpenAI or Anthropic. We use the result to provide the requested analysis or draft. Do not submit sensitive personal data or confidential data you are not authorized to process. AI outputs should be reviewed before use.

We retain data only as long as reasonably needed for the service, the customer's instructions, security, dispute resolution, and legal obligations. Website-visit records use a rolling window of 180 days by default. Workspace data generally remains until the customer deletes it or closes the account, subject to backups and records we must preserve. Backup copies expire through their normal lifecycle.

Authorized users may delete supported records in the product. For an account, access, or deletion request, email support@gettipoff.xyz.

We use administrative, technical, and organizational safeguards designed to protect personal data. These include workspace-scoped access, role-based permissions, encrypted customer integration credentials, transport encryption, security headers, audit logging, and change controls. No system is perfectly secure. See our Trust & Security page for current status and limits.

Depending on where you live, you may have rights to know or access, correct, delete, restrict or object to processing, obtain a portable copy, withdraw consent, or appeal a decision. You may also have a right not to receive discriminatory treatment for exercising a right.

Email support@gettipoff.xyz and describe your request. We may verify identity and authority before acting. If Tipoff processes the data only for a customer, we may direct the request to that customer. We respond within the time required by applicable law.

California residents may request the categories and specific pieces of personal information collected, the sources, purposes, and recipients; request correction or deletion; and exercise applicable opt-out or limitation rights. We do not sell personal information for money or share it for cross-context behavioral advertising. We do not knowingly discriminate for exercising privacy rights.

Tipoff and its providers may process data in countries other than where you live. Where required, we use recognized transfer safeguards and contractual protections. Contact us for more information relevant to your workspace.

Tipoff is a business service and is not directed to children under 18. We do not knowingly collect children's data. Customers should not upload sensitive personal information unless authorized, necessary, and supported by an appropriate legal basis.

We may update this policy as the product or law changes. We will post the new effective date and provide additional notice when a material change requires it. Questions, complaints, and requests can be sent to support@gettipoff.xyz.