Privacy Policy

Last updated · October 27, 2026

Your privacy is important to us. It is the policy of Tightknit, Inc. to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including across our website, https://www.tightknit.ai, and other sites we own and operate.

Personal information is any information about you which can be used to identify you. This includes information about you as a person (such as name, address, and date of birth), your devices, payment details, and even information about how you use a website or online service.

In the event our site contains links to third-party sites and services, please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy information about how they collect and use personal information. This Privacy Policy does not apply to any of your activities after you leave our site.

This policy is effective as of September 1, 2023. Last updated on October 27, 2026.

Information We Collect

Information we collect includes both information you knowingly and actively provide us when using or participating in any of our services and promotions, and any information automatically sent by your devices in the course of accessing our products and services.

Log Data

When you visit our website, our servers may automatically log the standard data provided by your web browser. It may include your device's Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details about your visit. Additionally, if you encounter certain errors while using the site, we may automatically collect data about the error and the circumstances surrounding its occurrence. This data may include technical details about your device, what you tried to do when the error happened, and other technical information relating to the problem. You may or may not receive notice of such errors, even at the moment they occur, that they have occurred, or what the nature of the error is. Please be aware that while this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individual persons.

Device Data

When you visit our website or interact with our services, we may automatically collect data about your device, such as:

Geo-location data
IP address
Browser version
Operating system version
Screen size and display

Data we collect can depend on the individual settings of your device and software. We recommend checking the policies of your device manufacturer or software provider to learn what information they make available to us.

Personal Information

We may ask for personal information which may include one or more of the following:

Name
Email
Organization membership
Employer
Social media profiles
Financial and credit card information

Legitimate Reasons for Processing Your Personal Information

We only collect and use your personal information when we have a legitimate reason for doing so. In which instance, we only collect personal information that is reasonably necessary to provide our services to you.

Collection and Use of Information

We may collect personal information from you when you do any of the following on our website:

Register for an account
Begin a paid subscription
Sign up to receive updates from us via email or social media channels
Use a mobile device or web browser to access our content
Contact us via email, social media, or on any similar technologies
When you mention us on social media

We may collect, hold, use, and disclose information for the following purposes, and personal information will not be further processed in a manner that is incompatible with these purposes:

to provide you with our platform's core features and services
to enable you to customize or personalize your experience of our website
to provide customer support and ensure we provide a good level of customer service
to contact and communicate with you
to notify you of any changes to our Services
for analytics, market research, and business development, including to operate and improve our website, associated applications, and associated social media platforms
to enable you to access and use our website, associated applications, and associated social media platforms
for internal record keeping and administrative purposes
for security and fraud prevention, and to ensure that our sites and apps are safe, secure, and used in line with our terms of use

If our app receives data from third-party platforms such as Slack (e.g., user IDs, messages, or metadata), we only use this data to provide the requested functionality and features of the app. We do not store, use, or share this data beyond what is necessary to operate the service.

Please be aware that we may combine information we collect about you with general information or research data we receive from other trusted sources.

AI Assistants, Agents, and the Model Context Protocol

Tightknit offers a hosted Model Context Protocol (MCP) server that lets an AI assistant you choose, such as Claude, ChatGPT, or Cursor, work inside your community on your behalf. This section describes how we handle data in that setting, and applies in addition to the rest of this policy.

Connecting an assistant

The MCP server is disabled by default and is enabled per community by Tightknit. You connect an assistant by signing in to your Tightknit account through OAuth 2.1; you never paste a token or secret into the assistant. Through that sign-in we receive your email address, your account identifier, and the list of communities you belong to. An assistant can only reach communities where the MCP server is enabled and where your role carries MCP access.

What we collect during a session

When your assistant calls a Tightknit tool, we record the name of the tool, whether it succeeded, the community it acted on, your email address and account identifier, the IP address and user agent of the request, and the time. Tool inputs and results are used to serve the request and are not stored as session records.

We do not collect the conversation between you and your assistant. We do not receive, request, or store your assistant's chat history, memory, conversation summaries, or any files you have uploaded to it, and we have no means of querying them.

What leaves Tightknit

A tool returns the community data you asked for, which may include member profiles and email addresses, posts and comments, events and attendee lists, poll responses, group membership, and community analytics. That data passes to the assistant you connected and is then handled under the privacy policy and terms of that assistant's provider, not under this one. Assistant providers are not our subprocessors: you choose the assistant and your relationship is with its provider. Connect only assistants you trust with your community's data, and grant MCP access only to roles that should have it.

When a tool searches posts or comments, the search text is processed by our AI provider to generate a search embedding, as described in our subprocessors list.

Actions taken on your behalf

Some tools write. They can create and edit posts, publish and unpublish content, add and remove group members, create and deactivate members, and change community and site settings. Any such action is attributed to your account and is subject to the same permissions that apply when you act in Tightknit directly.

Records and retention

Every tool call is written to your community's audit log with the fields listed above. Audit records are visible to community administrators and are retained for the life of the community, then deleted with the rest of its data when the account is closed. We separately record the tool name and a success or failure outcome in our product analytics, associated with your email address and account identifier, to operate and improve the service; those records contain no tool inputs or results. If you send feedback through the assistant, we receive the feedback you write. Errors are reported to our error monitoring provider. The providers we use for hosting, analytics, error monitoring, AI processing, and authentication are listed at https://tightknit.ai/legal/subprocessors.

Turning it off

A community administrator can remove the MCP access permission from a role at any time, which immediately ends access for every assistant connected under it, or ask Tightknit to disable the MCP server for the community. Disconnecting the connector inside your assistant also ends its access. Questions about this section can go to privacy@tightknit.ai.

Security of Your Personal Information

When we collect and process personal information, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification.

Although we will do our best to protect the personal information you provide to us, we advise that no method of electronic transmission or storage is 100% secure, and no one can guarantee absolute data security. We will comply with laws applicable to us in respect of any data breach.

How Long We Keep Your Personal Information

We keep your personal information only for as long as we need to. This time period may depend on what we are using your information for, in accordance with this privacy policy. If your personal information is no longer required, we will delete it or make it anonymous by removing all details that identify you.

However, if necessary, we may retain your personal information for our compliance with a legal, accounting, or reporting obligation or for archiving purposes in the public interest, scientific, or historical research purposes or statistical purposes.

Children

Our Services and website are not intended for, and should not be used by, children under the age of 16. We do not knowingly collect personal data from children under 16.

International Transfers of Personal Information

The personal information we collect is stored and/or processed in United States, or where we or our partners, affiliates, and third-party providers maintain facilities.

The countries to which we store, process, or transfer your personal information may not have the same data protection laws as the country in which you initially provided the information. If we transfer your personal information to third parties in other countries: (i) we will perform those transfers in accordance with the requirements of applicable law; and (ii) we will protect the transferred personal information in accordance with this privacy policy.

Your Rights & Preferences as a Data Subject

Subject to GDPR and applicable law, you have the following rights:

Right to Be Informed: You have the right to be informed about how your data is collected and used.
Right of Access: You have the right to access your personal data.
Right to Rectification: You can request to amend or update inaccurate or incomplete data.
Right to Erasure: You can request deletion of your personal data.
Right to Restrict Processing: You can request to limit the processing of your personal data.
Right to Object: You can object to the processing of your data, particularly for direct marketing.
Right to Data Portability: You can request a copy of your personal data in electronic format.
Right Not to Be Subject to Automated Decision-Making: You can opt out of decisions made solely by automated means, including profiling.

To exercise these rights, email us at privacy@tightknit.ai.

Tightknit, Inc. is established in the United States. As required by Article 27 of the EU GDPR and of the UK GDPR, we have appointed representatives in the European Union and in the United Kingdom. If you are located in the EU, the EEA or the UK, you may contact the relevant representative below on any matter relating to our processing of your personal data.

EU Representative: Euverify Ltd (Ireland), Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork, T23 AT2P, Ireland. Email: gdpr@euverify.com

UK Representative: Euverify Ltd (UK), 3rd Floor, 86-90 Paul Street, London, EC2A 4NE, United Kingdom. Email: gdpr@euverify.com

You may also submit a data subject access request, a deletion request or any other GDPR enquiry to our representative through their secure portal at https://gdpr.euverify.com/verify/1a6b0269-7d3c-49e6-baf8-940f9c908bbd, where requests are logged and tracked. Contacting our representative does not affect your right to contact us directly at privacy@tightknit.ai, or to lodge a complaint with your local supervisory authority.

Limits of Our Policy

At our discretion, we may change our privacy policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we will post the changes here at the same link by which you are accessing this privacy policy.

If the changes are significant, or if required by applicable law, we will contact you (based on your selected preferences for communications from us) and all our registered users with the new details and links to the updated or changed policy.

If required by law, we will get your permission or give you the opportunity to opt in to or opt out of, as applicable, any new uses of your personal information.

Changes to This Privacy Policy

We may change this privacy policy at any time. The new privacy policy will be displayed on our website. The date this privacy policy was last updated appears at the top.

Contact Us

Questions and comments regarding this privacy policy should be sent to: privacy@tightknit.ai

Data Protection Officer (DPO): Stephen Cook - privacy@tightknit.ai