Privacy Policy
Last updated 12 August 2026
This Privacy Policy explains what information Tissue Systems ("Tissue", "we") collects when you use tissue.systems, how we use it, and the choices you have. We aim to collect as little as we need to run a reliable platform.
01 Information we collect
We collect:
- Account information. Your email address, workspace name, and a hashed password (we never store passwords in plain text). If you invite someone onto an account, the address you invited is stored with the invitation.
- Account security records. If you turn on two-factor authentication, the secret behind your codes and a hash of each recovery code. So that we can tell you about a sign-in from an unfamiliar device, we store a truncated hash of your user-agent string and network prefix for 30 days, rather than those values themselves.
- Content you deploy. The code, configuration, databases (c3), and objects (g7) you store on the platform.
- Operational logs. Request metadata such as timestamps, Cell addresses, response codes, and coarse error information, used to operate and debug the Service.
- Traffic statistics for your Cells. Hourly counts of requests by status class, country, browser, path, and referrer, plus an approximate daily visitor count derived from a salted hash of the visitor's address and user-agent. The salt rotates daily and the hashes are held in memory, so no per-visitor record is written.
- Usage & billing metrics. Aggregate counts of invocations, storage, and bandwidth to enforce limits and, in future, to bill paid plans.
02 How we use it
We use this information to provide, secure, and improve the Service; to authenticate you and your API tokens; to communicate with you about your account and important service changes; and to comply with legal obligations. We do not sell your personal information, and we do not use the content you deploy to train machine-learning models.
03 Sub-processors
We run on a small set of infrastructure providers who process data on our behalf, including our compute and storage hosts and email delivery. Each is bound by confidentiality and data-protection obligations. Your Cells' data is stored on infrastructure we operate; see Security for where and how.
04 Cookies
The dashboard and auth flow use a single first-party session cookie to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.
05 Data retention
We keep account information for as long as your account is active. When you delete a resource, its content is removed from active systems; residual copies in backups are rotated out on a rolling basis.
Closing an account schedules it for deletion after a grace period of seven days, and an owner can cancel at any point during that window. Once the grace period ends, we delete the account's Cells and their deployed code, its c3 databases, its g7 buckets and the objects in them, its custom domains, its API tokens and its vault secrets, then the account record itself, its memberships and open invitations, and any user left belonging to no account.
Some records outlive the resource they describe, each on a fixed window. Per-request access logs for your Cells are kept for 30 days. The account activity record — the entries behind the activity feed in the dashboard, covering deploys, deletions, vault changes, access-link and session changes, and account-level events such as a scheduled closure — is also kept for 30 days. Traffic statistics for your Cells are kept for 90 days at hourly resolution and 400 days at daily resolution; closing an account deletes them along with everything else, rather than leaving them to age out.
06 Your rights
You can access, export, correct, or delete your content at any time through the dashboard, the ribo CLI, or the API. Anyone signed in to an account can download a copy of its metadata — members, Cells, databases, buckets, domains, API tokens, webhook endpoints, and the activity record described in section 05 — from the dashboard or from GET /v1/account/export. An owner can close the account from the dashboard, which starts the seven-day deletion described in section 05 and can be cancelled while it runs. To exercise data-protection rights over your personal information, email privacy@tissue.systems.
07 Changes
We may update this policy as the Service evolves. Material changes will be reflected in the date above and, where appropriate, notified to you.
08 Contact
Questions about privacy? Email privacy@tissue.systems.