Privacy Policy

Last updated: November 14, 2026

1. Scope and responsibility

WebTigers LLC (“WebTigers,” “we,” “us,” or “our”) provides the Tiger platform, hosting, software, and related services through webtigers.com and our other service domains and subdomains (the “Services”). This Policy explains how we handle personal information, why we handle it, and the choices available to you.

We are responsible for deciding how account, billing, support, marketing-site, and service-administration information is used for our own business purposes. For personal information our customers place in their hosted websites, applications, stores, databases, or communications, we generally act as a service provider or processor following the customer's lawful instructions. That customer is responsible for its own privacy notice and decisions about its users' information. Our applicable customer agreement and any data processing agreement govern that processing.

This Policy does not make WebTigers responsible for every independent website that uses Tiger software. Installing the open-source Tiger software on infrastructure we do not operate does not, by itself, give us access to the installation's data. If that installation connects to our licensing, support, hosting, or other Services, this Policy applies to information we receive through those connections. Independent third-party services have their own policies.

WebTigers accounts are for adults aged 18 and older only. People under 18 may not create or hold an account, purchase Services, or act as a customer-authorized user. Parental permission does not create an exception. Visitors to websites and applications our customers operate are those customers' users; each customer is responsible for its own privacy and age-related practices toward them.

2. Information we collect

The information involved depends on the features you use and the data you or a customer provide. We collect information directly from you, automatically through use of the Services, from the organization administering your account, and from providers you connect or use to complete a transaction.

Category	Examples and sources	Main purposes
Account and contact information	Name, email address, business or organization, account identifiers, account roles, and contact details you supply	Create and administer accounts, communicate, verify authority, and support customers
Authentication and security information	Authentication records, password verification data, security settings, optional verified mobile number, connection authorizations, and security logs	Sign-in, access control, account recovery, fraud prevention, and incident investigation
Billing and transaction information	Billing contact and address, purchased plans, invoices, payment status, processor references, and limited payment-method details returned by the processor	Process payments, renewals, refunds, tax records, and billing disputes
Customer Content	Hosted files, databases, messages, submissions, websites, prompts, outputs, and other material supplied through the Services	Deliver the customer's requested hosting and software functions and provide authorized support
Technical and usage information	IP address, browser and device attributes, approximate location inferred from IP, request times, referring pages, page and feature activity, errors, resource use, and security events	Operate, troubleshoot, secure, measure, and improve the Services
Support and correspondence	Requests, emails, attachments, feedback, complaint details, and information you provide during troubleshooting	Resolve requests, investigate concerns, maintain records, and improve support
Connected-service information	Account identifiers, authorization tokens, selected reports, and data returned by an integration you authorize	Provide the specific connection or feature you request
Analytics and advertising information	Cookie or similar identifiers, referral information, campaign interactions, conversion events, and associated device or usage information where tracking is enabled	Understand service use, measure campaigns, and, where enabled and permitted, deliver or evaluate advertising

Payments are handled through payment processors. We receive information needed to manage the transaction; you should not send full payment-card numbers or security codes to our support team or store them in ordinary hosted forms. Information you provide directly to a processor is also subject to that processor's privacy notice.

We may receive information about other people when a business customer creates accounts, submits support material, or hosts content. Customers must have the legal authority and notices needed to provide that information. Do not submit unnecessary sensitive information, identity documents, or secrets in support requests.

3. How we use information

We use personal information to:

Establish and administer accounts, verify access, and deliver purchased or requested Services.
Provision hosting, store and transmit content, manage licenses, execute authorized integrations, and provide available backup and recovery functions.
Process payments, subscriptions, refunds, taxes, and transaction records.
Respond to support requests, communicate about accounts, and provide service, security, and billing notices.
Detect and prevent fraud, unauthorized access, spam, attacks, misuse, and violations of our agreements.
Investigate complaints, protect rights, comply with legal obligations, and establish or defend legal claims.
Measure use and performance, diagnose problems, and improve the functionality and reliability of the Services.
Send permitted business or product communications and measure advertising where enabled, subject to applicable consent and opt-out requirements.

Customer Content processed for hosting is not an unrestricted source for our unrelated marketing. We do not use private hosted files, databases, or messages to target advertisements merely because we store them. Information that has been effectively deidentified or aggregated may be used for reporting and improvement, subject to applicable restrictions on reidentification.

4. Cookies, in-house analytics, and advertising technologies

We use cookies and similar browser or device technologies for functions such as maintaining sessions, remembering preferences, preventing abuse, and measuring activity. Our analytics may be provided through our own platform. Depending on the page, feature, or campaign, third-party analytics or advertising technologies may also be enabled.

Essential technologies support functions you request, such as sign-in and security. Optional measurement technologies help us understand traffic and feature use. Advertising technologies, where enabled, may measure conversions or associate activity with a browser, device, or advertising profile. A technology's treatment depends on what it does and the information it transmits, not simply whether it is described as first-party or in-house.

Where third-party advertising tools are enabled, their operators may receive identifiers, IP and device information, page or campaign activity, and conversion events. They may combine information with activity on other services under their own policies. The providers, purposes, and available choices for optional tools should be identified in the relevant consent or privacy controls when those tools are presented. This Policy does not mean that every possible analytics or advertising provider is installed on every page.

Where consent is required, optional tracking must not operate before valid consent, and you may withdraw that consent. You can also use browser controls to block or delete cookies, although blocking necessary cookies may prevent some functions. Blocking browser cookies alone may not stop server-side data sharing or tracking on another device.

Contact privacy@webtigers.com to request information about tracking on a particular page or to exercise applicable opt-out rights. We honor legally recognized opt-out preference signals, including Global Privacy Control where applicable, for the browser or device transmitting them and linked accounts when required. “Do Not Track” browser headers do not have a uniform response standard and are not treated as a substitute for legally recognized opt-out signals.

We do not sell personal information for money. However, disclosure through advertising technologies may constitute a “sale,” “sharing,” or processing for “targeted advertising” under some privacy laws even when no money changes hands. Where those activities occur and the relevant law applies, you may opt out. We do not treat acceptance of the Terms as consent to optional advertising tracking.

We disclose personal information only for the purposes described in this Policy and as permitted by law:

Operational providers. Infrastructure, hosting, storage, security, payment, communications, support, and other providers receive information needed to perform their functions. Where they act on our behalf, they are subject to appropriate contractual restrictions. Some providers, such as payment processors or registrars, also have independent legal responsibilities.
Your organization and authorized users. Account administrators may manage users and access information within their organization's permissions. Consider the administrator's authority before using an organization-managed account.
Services you connect. Integrations and AI providers receive the information needed for features you enable or actions you request, subject to the feature's disclosures and permissions.
Analytics and advertising recipients. Where enabled, these recipients may receive the limited activity and identifier categories described in Section 4, subject to applicable choices and restrictions.
Recipients you select. Publishing a page, sending a message, syndicating a listing, or sharing a file exposes the selected information to its intended audience. Public material can be copied, indexed, or retained by others.
Legal, security, and rights matters. We may disclose information to comply with valid legal process, mandatory reports, or other legal obligations; investigate fraud or abuse; protect people and systems; and establish or defend rights. We evaluate the legal basis and scope of requests rather than treating every request as automatically sufficient.
Business transfers. Information may be disclosed to advisers and potential or actual successors in a merger, financing, reorganization, or sale, subject to appropriate confidentiality and legal protections. A successor must handle information consistently with applicable commitments and law or provide required notice and obtain required permission before materially different use.
Your direction or consent. We may make another disclosure when you direct or validly authorize it.

The categories disclosed depend on the task. For example, a payment provider needs billing and transaction information, an infrastructure provider processes hosted data, and a messaging provider needs the recipient address or number and message content. We do not provide all categories to every recipient.

6. AI features and automated tools

When you enable an AI feature or connect an agent, prompts, selected files, code, content, and relevant context may be transmitted to the provider needed to fulfill your request. Responses, usage, and diagnostic information may be processed to supply the feature, maintain security, and troubleshoot it. Review the selected provider's terms, retention settings, and permissions before sending sensitive information.

We do not acquire a general right to train AI models on private Customer Content merely because it is hosted with us. Any optional use of private Customer Content for general-purpose model training requires a separate, clear authorization; it is not a condition hidden in acceptance of these policies. Third-party providers' independent processing is governed by their applicable terms and settings, subject to our contractual and legal responsibilities. We do not promise that every external provider has identical retention or training practices.

Security and anti-abuse systems may automatically flag activity or restrict a session. You may contact Support to request review of an account restriction. Where law gives you rights concerning a solely automated decision with legal or similarly significant effects, you may request information, contest the decision, and seek human review through our privacy contact.

7. Google account connections and Google API data

Connecting Google is optional. For the Google Analytics reporting connection, we request read-only access using the https://www.googleapis.com/auth/analytics.readonly scope to retrieve and display the reports you request in your Tiger dashboard. Connection information and authorization credentials are used to maintain the connection you authorize; report information is processed to provide that feature.

WebTigers' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements where applicable.

Google API user data is used only for the disclosed, authorized user-facing functionality and permitted improvements to it. It is not sold, used for advertising or advertising profiles, or used to train or improve generalized AI or machine-learning models. Transfers are limited to those permitted by the applicable Google policy, such as processing necessary for the authorized feature, security purposes, legal compliance, or a qualifying business transfer with the required prior consent.

Human access is limited to circumstances allowed by the applicable Google policy, such as your affirmative permission to view specific data, necessary security investigations, legal compliance, or permitted internal operations involving appropriately aggregated and anonymized data. General permission to use our Services is not blanket permission for a person to read your Google data.

You may disconnect the integration through its available connection controls and revoke access through your Google Account third-party connections. Revoking access stops further authorized retrieval; it does not itself erase every previously retrieved record or security log. You may request deletion of retained connection or report data at privacy@webtigers.com, subject to applicable legal exceptions. We retain authorization credentials and retrieved information only as necessary for the authorized feature, security, and applicable legal requirements, and do not use retained data to continue a revoked connection.

8. Mobile information and SMS

If you voluntarily supply and verify a mobile number and opt into account messages, we use it for transactional security codes and account alerts. Message frequency varies with your activity and account events. Message and data rates may apply. Our account-notification program does not send marketing texts.

We do not share mobile numbers, SMS opt-in information, or text-message consent with third parties or affiliates for their marketing or promotional purposes. We disclose information to messaging providers, carriers, and support providers only as needed to deliver and administer the program, and for legally required disclosures. SMS consent is not transferred as permission for another business to market to you.

Reply STOP to opt out or remove your number through your account security settings. We also honor other legally effective revocation requests. Reply HELP for help, or contact support@webtigers.com. An opt-out may be retained on a suppression record so that it remains effective. Further program details appear in the Terms of Service.

9. Retention and deletion

We retain personal information only as long as reasonably necessary for the purposes described here, subject to applicable contracts and law. Retention depends on the information and context:

Account and operational records are retained while needed to administer the account, provide Services, and resolve related matters.
Billing, tax, consent, and transaction records may be retained after account closure for applicable legal, accounting, audit, and dispute obligations.
Security and technical records are retained based on operational need, investigation requirements, risk, and applicable law.
Customer Content is retained according to service configuration, customer instructions, the applicable agreement, and necessary backup cycles, unless a legal obligation requires otherwise.
Support correspondence and complaint records are retained as needed to address requests, document resolutions, and establish or defend rights.
Marketing preferences and suppression records may be kept to honor opt-outs even after other information is deleted.

Account closure does not require immediate deletion of records we must or may lawfully retain. Deletion from active systems may precede expiration from protected backups. Residual backup data remains restricted and is deleted through the applicable cycle; if restored, applicable deletion instructions must be reapplied. Information subject to a valid legal hold is retained for that obligation rather than unrelated use.

You may ask about retention applicable to your information by contacting our privacy address. Export needed content before terminating Services; our retention of a legal or backup copy does not mean it remains available for customer restoration.

10. Security and incidents

We use reasonable technical and organizational measures intended to protect personal information from unauthorized access, loss, alteration, and disclosure. No system, transmission, backup, or security measure eliminates every risk.

Your own permissions, credentials, software, devices, and integrations also affect security. Use strong authentication, protect API keys, maintain appropriate independent backups, and notify Support promptly of suspected compromise. Do not send passwords or full payment credentials by ordinary email.

If a security incident triggers a legal or contractual notification obligation, we will notify the affected parties as required by that obligation. We do not treat this Policy's security limitations as a waiver of breach-notification duties or other mandatory protections.

11. International processing

WebTigers operates in the United States. Your information may be processed in the United States and other locations where the providers involved in your Services operate. Those locations may have different privacy laws from your home jurisdiction.

Where a transfer requires a particular legal safeguard, we must put an applicable safeguard in place, such as an authorized adequacy mechanism or appropriate contractual transfer terms, before relying on that transfer route. Using the Services or accepting this Policy does not by itself waive transfer protections or constitute consent to every international transfer. Contact privacy@webtigers.com for information about the locations and safeguards relevant to your Services.

12. Privacy rights and choices

Depending on your location, our role, and applicable legal thresholds and exceptions, you may have rights to:

Learn whether we process your personal information and obtain information about its sources, purposes, categories, and recipients.
Access or receive a portable copy of information you provided or that the law covers.
Correct inaccurate information or request deletion.
Restrict processing, object to certain processing, or withdraw consent where consent is the basis for processing.
Opt out of a sale, sharing for cross-context behavioral advertising, targeted advertising, or certain profiling, as defined by applicable law.
Limit specified uses of sensitive personal information where applicable.
Appeal a denied request, obtain qualifying human review, or complain to an appropriate regulator.

To make a request, email privacy@webtigers.com with the subject “Privacy request” and describe what you want us to do. You may also submit it through Support. Use an account email where possible, but you need not create an account merely to make a privacy request. We may request proportionate information to verify identity or an agent's authority when necessary. We do not require verified identity for an opt-out where the law prohibits that requirement.

We respond within applicable legal time limits and explain a denial or permitted extension. If an appeal right applies, reply to the decision or email the privacy address with the subject “Privacy appeal.” You may use an authorized agent as permitted by law. We do not unlawfully discriminate or retaliate for exercising privacy rights. A requested deletion or restriction may prevent us from providing a function that genuinely requires the information.

If your request concerns data controlled by a customer site, contact that site's operator. If you contact us, we will assist or route the request as appropriate to our processor role and legal obligations. We will not disclose another customer's private data to you merely because you ask for it.

You may unsubscribe from marketing email through its unsubscribe mechanism or by contacting us. Necessary account, security, transaction, and legal notices may continue. SMS choices are described separately above.

EEA, United Kingdom, and Switzerland

Where the relevant data protection law applies, our lawful grounds depend on the purpose: performance of a contract for requested account and service functions; compliance with law for tax, legal-process, and mandatory records; legitimate interests for proportionate security, fraud prevention, support, service improvement, and business administration, subject to your rights; and consent where required for optional tracking or other optional processing. If you are a business contact rather than the contracting individual, related account administration may rely on legitimate interests instead of a contract with you.

You may object to processing based on legitimate interests, including direct marketing, and withdraw consent without affecting prior lawful processing. Where providing information is necessary to enter or perform a contract, failure to provide it may prevent that service. You may complain to your local data protection authority. Request details of applicable transfer safeguards through our privacy contact.

United States state privacy rights

Where a state privacy law applies to our processing, its rights, verification rules, opt-out mechanisms, appeal rights, deadlines, and exceptions control. Section 2 describes information categories and sources, Sections 3–5 describe purposes and recipient categories, and Section 9 explains retention criteria. Advertising disclosures described in Section 4 may fall within statutory sale, sharing, or targeted-advertising definitions; eligible individuals may opt out through the available privacy controls, a legally recognized preference signal, or our privacy contact.

We do not knowingly sell or share information about people under 18. Account security and other sensitive information is used for the service, security, and other legally permitted purposes described here; any additional use requiring consent or an applicable limitation mechanism must meet those requirements first. Nothing in this Policy asks you to waive a state privacy right.

13. People under 18

We do not knowingly permit anyone under 18 to hold an account or act as an authorized user, or knowingly collect personal information from underage account holders. Customers decide who may use the sites and applications they host with us and are responsible for complying with the age-related and children's-privacy laws that apply to them. If we learn that an underage person holds an account or authorized-user access, we will take appropriate steps to restrict access and delete the person's information, subject to lawful preservation and safety requirements.

If you believe a minor has provided information or obtained access, contact privacy@webtigers.com. Provide enough information to identify the account or page, without sending unnecessary sensitive documents. A parent or guardian cannot authorize underage use as an exception to the age requirement.

14. Changes to this Policy

We may update this Policy to reflect changes in Services, practices, or law. The date above identifies the latest revision. For material changes, we provide notice appropriate to the change, such as an account email or prominent website notice, and obtain consent where required before applying a new use. A new policy does not retroactively authorize a use inconsistent with a binding prior commitment or applicable law.

15. Contact

WebTigers LLC

Privacy inquiries and requests: privacy@webtigers.com
Support: support@webtigers.com
Support portal: https://webtigers.com/support
Website: https://webtigers.com

Contact us for mailing details. Where applicable law requires additional public contact or representative information, that requirement remains applicable.