Privacy Policy

This Website Privacy Notice ("Privacy Policy") explains the processing of your personal data by Tiptap GmbH, Kurfürstenstraße 56, 10785 Berlin, Germany ("we" or "Tiptap") as the controller (Art. 4 no. 7 GDPR) when using our website and your rights under the GDPR.

1. Purposes of processing

1.1. Processing of personal data you provide

We process personal data that you provide in the context of using certain content and functions on our website. For example, if you contact us by any means, such as email or messenger, we process your personal data to respond to your inquiry. We also process personal data which are submitted and stored in your Tiptap account and profile page for the performance of the contractual relationship between you and Tiptap.

The legal basis for the above mentioned processing of your personal data is Art. 6 (1) b) GDPR.

1.2. Log data

When using the website, certain personal data, including data sent by the browser (e.g., IP addresses, types of cookies, previous website, time and date, content displayed) are temporarily stored. We use this log data to enable you to use our website and, if necessary, to check and enforce our rights and the rights of third parties in the event of damage or infringement of legal regulations, our terms of use and the rights of third parties. The legal basis is Art. 6 (1) f) GDPR. The log files are stored for as long as is necessary for the respective purpose, generally no longer than 14 days.

1.3. Google Analytics

We use Google Analytics with your consent (Art. 6 (1) a GDPR) to better understand our visitors and their interests and to continuously improve our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics allows us to analyze traffic and usage patterns of individual users (without further identifying them) or groups (which offers are used how often, how often users return, how long they stay, from which websites users come, from which regions, etc.). Google acts as our processor. The cookies used for this purpose expire after 4 months.

1.4. Clearbit

We use Clearbit with your consent (Art. 6 (1) a GDPR) to continuously improve our website. The provider is API Hub, Inc. dba Clearbit, 548 Market St. #95879, San Francisco CA 94104. Clearbit allows us to analyze traffic and usage patterns of users and to connect this data with its commercial database. Clearbit acts as our processor and may collect personal data such as your IP address and cookie identifiers. For more information and how to remove yourself from the Clearbit database, see Clearbit’s Privacy Policy.

1.5 GitHub

After logging in with your Tiptap account on https://cloud.tiptap.dev/login, you can choose to connect the Tiptap account to your GitHub account to gain access to private Tiptap repositories on GitHub. The provider is GitHub B.V. Prins Bernhardplein 200, Amsterdam 1097JB Netherlands. If you connect your Tiptap account with your GitHub account, GitHub provides us with certain personal data from your GitHub account, namely your email address and profile information (such as your GitHub name and profile picture). We only process this data to provide access to the private Tiptap repositories on GitHub. The legal basis is your consent (Art. 6 (1) a GDPR).

1.6. LinkedIn

We use LinkedIn to communicate with you and to advertise our work. The legal basis is our legitimate interest in corporate communications (Art. 6 (1) f) GDPR). LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland is the controller under GDPR and therefore responsible for processing of your personal data related to your usage of the service. For more information see "https://www.linkedin.com/legal/privacy-policy".

LinkedIn provides us with statistics and analytics on the use of our social media offerings. These statistics do not contain any names or other identifying information about individual users. With the help of these statistics, we can analyse and improve our social media activities. The legal basis for this processing is our legitimate interest in using these statistics (Art. 6 (1) f) GDPR).

When processing personal data on our LinkedIn page, we and LinkedIn act as so called "Joint Controllers" pursuant to Art. 26 GDPR. We have therefore concluded a separate Joint Controller Addendum delineating LinkedIn's and our responsibilities. For any further processing of your data, LinkedIn is the sole controller. If you wish to exercise your rights to information, deletion, etc., LinkedIn is responsible for the fulfillment of your rights as part of our Joint Controllership.

We do not use any social media share plugins by which information is automatically transferred to the provider of social media services when you visit our website. Any forwarding from our website to LinkedIn takes place exclusively via a link.

1.7. X (formerly known as Twitter)

We offer an X (formerly known as Twitter) channel, which you can access via a link on this page. Our X channel provides you and us with the opportunity to communicate with you, respond to our and your posts, comment on them, retweet them, and send private messages. We use the data you provide in this context and which may be accessible to us (e.g. X username, images, content of tweets, interests if applicable, contact details) exclusively for the purpose of communication. The legal basis for processing personal data when using the X channel is our legitimate interest in corporate communications (Art. 6 (1) f) GDPR). Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland is the controller under GDPR and therefore responsible for processing of your personal data related to your usage of the service. For more information see X's Privacy Policy.

We do not use any social media share plugins by which information is automatically transferred to the provider of social media services when you visit our website. Any forwarding from our website to X takes place exclusively via a link.

1.8. Payment service provider

We use Paddle as our payment service provider for your subscriptions. Paddle provide us with an API to handle your subscription. In addition to your IP address and browser data, they have access to your payment data (esp. credit card number). The service provider is Paddle.com Inc., 3811 Ditmars Blvd, #1071 Astoria, New York, 11105-1803, USA ("Paddle"). The legal basis is Art. 6 (1) b) GDPR. For more information, see Paddle’s Privacy Policy.

1.9. Contact form

In order to get in contact with Tiptap to learn about options for custom services and custom pricing you need to click on “Contact Sales” on our website https://tiptap.dev/ and fill out the contact form. We only use your data submitted in the contact form to respond to your inquiry and to provide you with customized information and/or an offer regarding your request. You are not legally or contractually required to provide personal data when you contact us. However, please note that we cannot address your inquiry if the information marked as required is not provided in the contact form.

We use HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin, Germany as our service provider for contact form. The data you submit in the contact form will be transferred to and stored by HubSpot and made available to Tiptap for the response to your inquiry. To address your inquiry your data is stored until the inquiry has been completely processed, then it is deleted. The legal basis for our data processing is Art. 6 (1) b GDPR.

1.10. YouTube

This website embeds YouTube videos. The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the Privacy Enhanced Mode of the YouTube embedded player. According to YouTube, this mode means that YouTube does not store any information about visitors of our website before they watch the video. As soon as you start a YouTube video on our website, a connection to the YouTube servers is established. This tells the YouTube servers which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile on YouTube. You can prevent this by logging out of your YouTube account. After starting a YouTube video, further data processing operations may be triggered on which we have no influence.

If you have given your consent and start a YouTube video embedded on our website, various YouTube cookies will be stored on your end device after the start of the video. This allows YouTube to obtain information about visitors of this website. This information is used, among other things, to gather video statistics or to improve user-friendliness. Further information on cookies can be found below.

The legal basis for this data processingis your consent (Art. 6 (1) lit. a GDPR).

1.11. Other purposes for which we process your personal data

We process your personal data:

2. Recipients of personal data

In addition to the recipients of personal data mentioned above, we also use other companies to process personal data on our behalf, for example for hosting, technical support of our website, for analysis and advertising purposes. Such service providers only process the data on our behalf as so-called processors (Art. 28 GDPR). This applies to Hetzner Online GmbH and Webflow Inc., who are hosting providers of our website.

Furthermore, we transmit personal data to third parties if this is required by law, if this is necessary for the exercise and defense of legal claims or if third parties provide certain services for us (e.g., lawyers, tax consultants).

Insofar as we transfer personal data to third countries outside the European Economic Area (“EEA”), we ensure to a country which provides a different level of data protection, we will make sure that it has arranged the same level of data protection as within the EEA. For this purpose, we mainly use Standard Contractual Clauses ("SCC") and in individual cases other appropriate guarantees. You can request a copy of the SCC or other contract ensuring the appropriate level of data protection by contacting us by the contact methods described in section 6.

3. Cookies use

In addition to the processing purposes mentioned above, we also use cookies if this is technically necessary to offer our website or certain content or if we are obliged to do so. The legal base for the use of necessary cookies is § 25 (2) No. 2 TTDSG.

Cookies that are not technically necessary (e.g. for analysis purposes) are only processed with your consent. The legal basis for this is § 25 (1) 1 TTDSG.

Unless otherwise stated in this privacy policy, cookies remain stored as long as necessary to fulfill the respective processing purposes. You can object to the storage of cookies by browser preferences and delete them manually in your browser settings. Please note, however, that some cookies may be mandatory for the use of our website or individual functions.

We use the service Cookiebot to manage cookies.

Cookie declaration

4. Deletion of personal data

Unless a specific duration of data storage is specified in this Privacy Policy, we will only process your data as long as this is necessary for the respective purposes or as long as there are legal retention obligations. After the respective processing purpose ceases to apply and retention obligations end, your data will be routinely deleted. In particular, the personal data used to create and maintain a Tiptap account is generally stored for as long as the account is not deleted. You can also delete your account on your profile page by scrolling down to the bottom, clicking “delete account” and following the instructions. Your data will be completely deleted from our database.

5. Your rights

You can request information about your stored data. If you have provided personal data on the basis of a contract or consent, you have the right to receive this data in a standard and machine-readable format.

To the extent allowed under GDPR, you can also request the deletion, correction or restriction of the processing of your data.

You can revoke your consent at any time without affecting the lawfulness of processing based on your consent before its withdrawal.

You can object to the processing of data processed on the basis of our legitimate interests at any time under the conditions of the GDPR.

6. Contact; complaint to supervisory authority

Please address your questions or concerns regarding the processing of your personal data to:

Tiptap GmbH
Kurfürstenstraße 56
10785 Berlin

humans@tiptap.dev

In case of questions and in case of possible concerns about the data processing, you can also contact a supervisory authority. The responsible supervisory authority for Tiptap is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin

mailbox@datenschutz-berlin.de