Privacy & cookie policy
Last updated July 9, 2026
This policy covers the Tightly marketing website at tightly.io. It explains what personal data we collect when you visit or contact us, why, and the choices you have. Use of the Tightly product itself is governed by the agreement with your organization and our Data Processing Addendum.
Who we are
Tightly, Inc. (“Tightly”, “we”, “us”) is the controller of the personal data described here. Tightly is an AI inventory-planning platform for retail and DTC brands. If you have any question about this policy or your data, email privacy@tightly.io.
What we collect
Information you give us
- Demo & contact requests — your name, work email, company, and anything you write in a message when you book a demo or fill in a form.
- Resource downloads — the work email you give to access a gated whitepaper or datasheet.
- The assistant — questions you type into “Ask Tightly” on the site, used to answer you from our published content.
Information collected automatically
- Usage & device data — pages viewed, referrer, approximate location (from IP), browser and device type. Collected by our analytics only if you accept analytics cookies.
- Marketing attribution — the campaign, source or referral you arrived from (UTM parameters), stored in a first-party cookie only after you accept.
We do not knowingly collect data from anyone under 16, and we don’t ask for special-category data on this site.
How we use it & legal basis
- To respond to you — to schedule a demo, answer a question or send a resource you asked for. Basis: taking steps at your request / our legitimate interest in responding.
- To follow up about Tightly — relevant sales and product information, where you’ve expressed interest. Basis: legitimate interest; you can opt out any time.
- To understand and improve the site — aggregate analytics on what’s useful. Basis: your consent.
We do not sell your personal data, and we don’t use it to make decisions with legal effect about you.
Cookies
We use two kinds of cookies. Essential cookiesmake the site work and remember your cookie choice — these are always on and don’t need consent. Analytics cookies help us understand how the site is used and are set only after you accept. Nothing non-essential runs until you do.
| Cookie | Purpose | Type | Retention |
|---|---|---|---|
| tightly_consent | Remembers your cookie choice | Essential | 6 months |
| PostHog | Product analytics — page views, usage | Analytics (consent) | Up to 12 months |
| first-touch (UTM) | Remembers how you first found us | Analytics (consent) | 6 months |
You can change your mind at any time. reopens the choices, and clearing cookies in your browser resets everything.
Who we share it with
We share data only with service providers who process it on our behalf under contract, and never with data brokers. These include:
- Hosting & content — Vercel (site hosting) and Sanity (content management).
- Analytics — PostHog, on US infrastructure, only with your consent.
- Communications & scheduling — the tools we use to reply to you, send resources you request and book meetings.
We may also disclose data if required by law, or in connection with a merger or acquisition, with notice where required.
How long we keep it
We keep contact and demo-request data for as long as needed to follow up and for our legitimate business records, and then delete or anonymize it. Analytics data is retained for up to 12 months. You can ask us to delete your data sooner — see your rights below.
Your rights
Depending on where you live, you have some or all of these rights over your personal data:
- Access a copy of it, and correct it if it’s wrong.
- Ask us to delete it, or restrict / object to how we use it.
- Withdraw consent (for analytics) at any time — this won’t affect anything done before you withdrew.
- Receive it in a portable format, and lodge a complaint with your data protection authority.
If you’re in California, we do not sell or share your personal information as defined by the CCPA, and we won’t discriminate against you for exercising your rights. To exercise any right, email privacy@tightly.io and we’ll respond within the timeframe the law requires.
Security & transfers
We protect personal data with encryption in transit, access controls and the practices described on our security page. Tightly is a US company and data may be processed in the United States. Where we transfer data out of the UK or EEA, we rely on Standard Contractual Clauses or another lawful transfer mechanism.
Changes & contact
We’ll update this policy as our practices evolve and change the “last updated” date above. For anything privacy-related, or to exercise a right, email privacy@tightly.io.