Privacy Policy

The Platform is operated by:

• Remote Leads OÜ — osaühing (private limited company)
• Registry code: 14487589
• VAT number: EE102069554
• Registered address: Väike-Paala tn 1, Lasnamäe linnaosa, 11415 Tallinn, Harju maakond, Estonia
• Email: support@tribefunnels.com

Remote Leads OÜ is registered in Estonia and its central administration is in Cyprus. We are the data controller for the data described in Section 2. For funnel-visitor data we are a processor instead — see Section 4. For any question about this Policy or your personal data, contact us at support@tribefunnels.com.

We collect: account data — your email address, a hashed password (we never store passwords in plain text), your language preference, and your timezone; business and briefing content — the information about your business, offers, and audience that you provide, including files you upload; generated content — the funnels, pages, copy, images, and other assets created on the Platform; payment metadata — records of your purchases and subscription status received from our payment processor (we never see or store your card numbers); usage and activity logs — records of actions taken in your account, used to operate and improve the Platform; consent records — which version of our Terms you accepted and when, with a hashed IP address, kept as evidence that the agreement was formed; and hashed IP addresses and technical signals used for security and abuse prevention. We do not collect more data than we need to run the service.

We use your data to: provide and operate the Platform (contract performance); generate marketing materials from your briefing content using AI (contract performance); process payments and deliver purchased products (contract performance); send transactional emails such as verification, receipts, and product delivery (contract performance); secure the Platform and prevent abuse and fraud (legitimate interest); keep records of contract formation and consent (legitimate interest and legal obligation); and comply with legal obligations such as accounting rules. We do not sell your personal data and we do not use it for third-party advertising.

Funnel pages published through the Platform may collect data from visitors and buyers — typically an email address, a hashed IP address, browser user-agent, and UTM campaign parameters — on behalf of the user who owns the funnel. For that data, the funnel owner is the data controller and Tribe Funnels acts as a data processor: we store and process it only to provide the service to the owner (for example, delivering the purchased product and showing the owner their leads and sales).

That processing is governed by our Data Processing Agreement at /dpa, which meets the requirements of Article 28 of the GDPR and forms part of our Terms. If you submitted your details on a published funnel page, direct privacy requests to the business that operates that page; we will assist the owner in fulfilling them.

We use a small set of service providers to run the Platform, each bound by its own data-protection commitments. For AI generation, the briefing and business content you provide is sent to the AI providers listed below to generate your marketing materials.

• Supabase — Database and file storage
  Location: EU region
• Vercel — Application hosting and content delivery
  Location: United States / global edge · Transfer mechanism: EU Standard Contractual Clauses
• Stripe — Payment processing
  Location: Ireland / United States · Transfer mechanism: EU Standard Contractual Clauses
• Resend — Transactional and product-delivery email
  Location: United States · Transfer mechanism: EU Standard Contractual Clauses
• Self-managed automation server (n8n) — Workflow automation, operated by us on our own infrastructure
  Location: EU
• OpenAI — AI generation of marketing materials
  Location: United States · Transfer mechanism: EU Standard Contractual Clauses
• Anthropic — AI generation of marketing materials
  Location: United States · Transfer mechanism: EU Standard Contractual Clauses
• Google — AI generation of marketing materials
  Location: United States / EU · Transfer mechanism: EU Standard Contractual Clauses
• DeepSeek — AI generation of marketing materials
  Location: People's Republic of China · Transfer mechanism: No adequacy decision and no Standard Contractual Clauses offered by this provider — see "Transfers to China" below

Some of our providers process data outside the European Economic Area. Where that happens, we rely on the European Commission’s Standard Contractual Clauses together with supplementary technical and organisational measures, and we assess each transfer before relying on it.

Transfers to China. We use DeepSeek, an AI provider established in the People’s Republic of China, for part of our content generation. Briefing and business content you submit for those generations is processed and stored in China.

We want to be straightforward about how this differs from our other providers. China is not covered by a European Commission adequacy decision. DeepSeek’s published API terms are governed by the law of the PRC and do not offer the EU Standard Contractual Clauses or an equivalent safeguard, so this transfer does not carry the contractual protections we rely on elsewhere. PRC law can require local providers to give authorities access to data. DeepSeek’s own privacy policy also states that submitted content may be used to train and improve its models, while giving users in the EEA a right to opt out of that training use directly with DeepSeek.

We limit what is sent to the minimum the generation needs: DeepSeek receives your briefing text, and never your account identifiers, email address, password, payment data, IP address, or any personal data collected by your published funnel pages. We have assessed and documented this transfer, and we are actively changing how it works. If this matters to you, email support@tribefunnels.com and we will tell you where we have got to.

We keep your account data for as long as your account exists. Accounts that are never verified are removed automatically. When you delete a funnel, it is retained for 30 days (so it can be restored) and then permanently purged. Consent records and payment records are kept for as long as needed to defend a legal claim or to satisfy accounting rules, whichever is longer. You can request full deletion of your account and all associated data at any time by contacting support@tribefunnels.com; we will complete the deletion unless we are legally required to retain specific records.

Subject to applicable law, you have the right to access the personal data we hold about you, to have it corrected or erased, to receive a copy in a portable format, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, email us at support@tribefunnels.com. We respond within one month.

You also have the right to lodge a complaint with a data-protection supervisory authority — normally the authority in the country where you live or work. Because we are registered in Estonia and administered from Cyprus, the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) and the Office of the Commissioner for Personal Data Protection of Cyprus are both relevant authorities for us.

The Platform uses strictly functional cookies only: a session cookie to keep you signed in, a cookie storing your language preference, and a short-lived state cookie used during OAuth sign-in. We do not use advertising or cross-site tracking cookies on the Platform. Published funnel pages may include analytics or advertising pixels configured by the funnel owner; those are the owner’s responsibility and are governed by the owner’s own privacy disclosures.

We protect your data with technical and organisational measures appropriate to the risk: data is encrypted in transit, stored in access-controlled infrastructure, and passwords are hashed with bcrypt. No system is perfectly secure, but we work to protect your data against unauthorised access, alteration, and loss, and we will notify you and the relevant authorities of a personal-data breach where the law requires it.

We may update this Policy from time to time; if we make material changes, we will take reasonable steps to notify you, and the “Last updated” date above will always reflect the current version. Questions, requests, or concerns about your personal data? Contact us at support@tribefunnels.com, or write to Remote Leads OÜ, Väike-Paala tn 1, Lasnamäe linnaosa, 11415 Tallinn, Harju maakond, Estonia.