Legal

Privacy Policy

How tidaltree handles personal data, under the GDPR. Plain language, then the detail.

Who is responsible

The controller for data processed through tidaltree is Andre Schweighofer, Baumannstraße, 1030 Vienna, Austria. Contact: hello@tidaltree.com.

Note for graduates invited by a training school: your school decides to enroll you and provides your email. For that enrollment data your school is the controller and tidaltree acts as its processor under a Data Processing Agreement (see our DPA). Your school sees whether you've joined and which of four milestones you've reached: held a first session, set a price, have a page or website, have a paying client. It never sees your people, your prices or anything you write.

What we collect and why

• Your account: email address, and a display name if you set one. Basis: performance of our contract with you (Art. 6(1)(b) GDPR).
• What you build in the app: your offer, bio, price, contacts you add, quotes and testimonials you save, an optional photo, and your published page. Basis: contract (Art. 6(1)(b)).
• Your people: the names of people you work with and, if you add them, their email address and phone number; what happened with them (an invite sent, a session held, a payment); and their words about your sessions. You are the controller of their details and need a basis to store them, usually their consent or your agreement with them; we process them for you (see section 7 of our terms). tidaltree never contacts them: messages open in your own email or WhatsApp.
• Reminder emails: if you haven't changed anything for a while, we email you who's due a follow-up: up to three times, after 7, 14 and 30 quiet days, then never again until you're back. Basis: our legitimate interest in helping you use what you paid for (Art. 6(1)(f)). Every reminder has a link that turns them off in one click.
• Sign-in and technical data: session records, IP address, and user agent, to keep you signed in and secure the service. We also read which country your connection comes from, to show prices in your currency; we don't store it. Basis: legitimate interest (Art. 6(1)(f)).
• Payments: handled by our reseller (Polar). We receive confirmation of your order, not your card details.

Health data

tidaltree doesn't ask for health data, about you or your clients, and has no place for notes about anyone's health. The client form (health screen and consent) is a template you print or send as a PDF and keep yourself. It never goes through tidaltree, and you are the controller for anything your clients write on it.

What clients say about a session can touch on how they feel. Save their words only if they agreed, and mark them okay to share only if they agreed to that too.

Who we share it with (processors)

We use a small number of processors to run tidaltree. Our current subprocessors are listed on our subprocessor list. Broadly:

• Hosting and database: Render Services, Inc. (USA), servers in Virginia.
• Email delivery: Plus Five Five, Inc., trading as Resend (USA), for sign-in, invite and reminder emails.
• Payments: Polar Software, Inc. (USA), our reseller and merchant of record. Polar handles your payment details as its own controller.

Render and Resend are certified under the EU-U.S. Data Privacy Framework, which the European Commission recognized as adequate in July 2023; their terms also include the EU Standard Contractual Clauses. Our fonts and scripts are served from tidaltree.com itself, so your browser doesn't load anything from Google, social networks or advertisers when you use tidaltree.

Visitor statistics

We count visits to our public pages ourselves, on our own server. We set no cookies for this and store no IP addresses. To count how many different people visit on a given day, we combine your IP address and browser type with a random value that changes every day, and keep only the resulting code. Once the day's value is gone, the code can't be traced back to anyone. We also note which site linked to us. We see totals only. No third party is involved. Basis: our legitimate interest in knowing how people find tidaltree (Art. 6(1)(f)).

How long we keep it

We keep your account and its contents while your account is active. If you ask us to delete your account, we remove your personal data except where we must keep records (for example, tax records tied to a purchase) for a legally required period. Sign-in links stop working after 30 minutes, invite links after 14 days.

Your rights

You have the right to access, correct, delete, restrict, and port your data, and to object to certain processing. To exercise any of these, email hello@tidaltree.com. You also have the right to lodge a complaint with a supervisory authority (in Austria, the Datenschutzbehörde).

Cookies

tidaltree uses a single essential cookie to keep you signed in. We do not use advertising, tracking or analytics cookies.

Last updated 25 October 2026.