Privacy Policy

Translation notice: This page is translated from Korean. You can also read the Korean source using the language menu. Your statutory rights remain unchanged regardless of language.

Optional sharing of values: “Share value with AI” is off by default for each field. If you enable it after confirming the notice, current and future AI connections registered to this vault can read that value in full. This is separate from AI access, destinations and task approvals. For web connections, shared values pass through the relay server and AI service. The AI service’s storage and processing policies apply.

Values already sent to AI cannot be recalled by turning this setting off later. Choose carefully before sharing. After sharing is successfully disabled, new reads are blocked, but information already approved for delivery, in transit or delivered cannot be recalled. Changing a value or restoring a backup disables sharing; enabling it again requires confirmation.

1. Information collected

• Account: email address, sign-in times, approved device types (OS, architecture and app version) and approval times.
• If you choose Google sign-in, we receive your Google account identifier, verified email, name and profile image for account authentication. We do not request access to your mailbox, Drive or vault.
• Subscription: status, billing period and customer identifier provided by Dodo Payments. Card numbers are not shared with tinygem.
• Site visits: cookie-free aggregate statistics from Vercel Web Analytics (pages, countries and device types).
• Web AI connections: approved AI services and devices, connection/task identifiers and statuses. Labels, descriptions and task scopes you permit are shared with connected AI and pass through a relay server for web connections.

2. The vault and authorized use of values

Vault files and master passwords are not uploaded to tinygem. Private vault values and raw destination responses are not returned in AI tool responses. Human searches run on this device. The app does not track usage behavior.

When you approve a connection and task, this device’s executor sends the required values to the approved destination: GitHub for GitHub tasks, or the European Commission’s VIES for EU VAT checks. Each destination’s policies apply. This does not mean values never leave the device.

GitHub Privacy Statement · VIES privacy information

Do not put secrets in names or descriptions shared with AI. Information you view, copy or export to backups may remain in the locations you choose.

Separate AI access to screens, files or memory, or an OS compromise, can expose information outside Bossanova’s tool path. For limits and guidance, see the Secret Protection Guide.

Language preference: Your chosen language is stored in a cookie in this browser for one year. Choosing Automatic deletes it.

3. Purposes of use

Account authentication, subscription checks and entitlement issuance, device limits, approved AI connections and tasks, payment/refund support, and service notices.

4. Storage and service providers

Account and subscription data is stored with Neon (database) and Vercel (hosting). Email delivery uses Brevo (primary) or Resend (backup); payments use Dodo Payments. Account and device data is deleted without undue delay after account deletion. The merchant of record retains payment records for the periods required by law.

5. Rights and contact

You can remove devices and manage subscriptions from your account page. Send access, correction or deletion requests to support@tinygem.ai.