Privacy Policy
Last updated: May 19, 2026
1. What we collect
When you sign in with Google, we store your name, email address, and profile image. We use your email domain to identify your organization. When you upload HTML files, we store the file content in Amazon S3 and metadata (title, visibility settings, view counts) in our database. We log page view counts and analytics events (referrer, user agent, country) to power story analytics.
2. How we use your data
We use your account information solely to authenticate you and provide the Tellnest service. Your HTML stories are stored to serve them at your shareable links. We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your content to train AI models.
3. Data storage and security
Your account data is stored in a PostgreSQL database hosted on Fly.io in Singapore. HTML story files are stored in Amazon S3 (ap-southeast-1). Both are encrypted at rest. Access is restricted to authenticated users with valid session tokens or API keys. We use HTTPS for all data in transit.
4. API keys and third-party access
You may generate API keys to access Tellnest programmatically (e.g., via MCP integrations with Claude). API keys are stored as SHA-256 hashes — we cannot recover the plaintext. You can revoke keys at any time from your Settings page. Third-party integrations (such as Claude) only access data you explicitly authorize through your API key or OAuth token.
5. Cookies and sessions
We use a session cookie (next-auth.session-token) to keep you signed in. This cookie is httpOnly and secure. We also use short-lived httpOnly cookies to gate password-protected story access. We do not use tracking cookies or third-party analytics cookies.
6. Data retention
Your account and stories remain until you delete them. When you delete a story, the HTML file is removed from S3 and all associated metadata is deleted from our database. When you delete your account (contact us at the email below), all your data is permanently removed within 30 days.
7. Your rights
You may request a copy of your data, correction of inaccurate data, or deletion of your account and all associated data at any time. Contact us at the address below. We will respond within 30 days.
8. Children
Tellnest is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us immediately.
9. Changes to this policy
We may update this policy. We will notify users of material changes via email or a notice on the platform. Continued use after changes constitutes acceptance.
10. Contact
Questions about this policy? Contact us at: hello@tellnest.com