This Privacy Policy describes the policies of Nordic Landing OÜ, Harju maakond, Kuusalu vald, Männimäe/1, Estonia 74626, email: [email protected], on the collection, use, and disclosure of your information when you use our website (https://tailkits.com), the Tailkits UI library, and our Model Context Protocol (MCP) integrations (collectively, the “Service”).
By accessing or using the Service, you consent to the collection and use of your information in accordance with this policy.
1. Information We Collect
We collect the following personal information to provide and manage your subscriptions:
Identity Data: Name and Email address.
Financial Data: Payment history, subscription tier (Quarterly, Yearly, or Lifetime), and billing status. (Note: We do not store credit card numbers; these are handled by our secure payment processors).
Technical Data: License keys, IP addresses, and login timestamps.
Integration Data: When using the Tailkits UI MCP server, we may collect minimal diagnostic logs (such as component request counts) to improve our library, though the content of your private AI prompts remains local to your machine.
2. How We Use Your Information
We use your information for the following purposes:
Subscription Management: To process recurring payments for Quarterly/Yearly plans and maintain Lifetime access.
MCP Support: To authenticate your AI assistant’s access to our premium component library via the Model Context Protocol.
Customer Support: To verify your license when you request technical assistance.
Marketing & Updates: To notify you of new component releases, changelogs, and service updates.
Site Protection: To prevent unauthorized sharing of license keys or library scraping.
3. Model Context Protocol (MCP) & AI Privacy
Tailkits UI is built for AI-first development. Our MCP integration functions as follows:
Local Processing: The MCP server typically runs locally on your machine or within your IDE (Cursor, Claude, etc.).
Data Security: We do not see, store, or train on the code you write in your editor or the specific prompts you send to your AI. The MCP server only fetches the required Tailkits UI component code to your local environment.
Usage Analytics: We may monitor which components are most frequently requested via MCP to prioritize future updates, but this data is anonymized and not linked to your private project code.
4. Weekly Email (Digest)
You can sign up for the Tailkits weekly email in the site footer or below a blog post. Sign-up uses double opt-in: we send one confirmation email, and we only send the weekly email after you click the link in it.
What we store: your email address, where you signed up (for example the footer or a specific blog post), the time you signed up, the time you confirmed, the time we last sent you a confirmation email, the time you unsubscribed (if you do), and a hashed token used for your confirmation and unsubscribe links. The token itself is not stored.
Unsubscribe anytime: every email has an unsubscribe link, including one-click unsubscribe in supporting email apps. After you unsubscribe we keep your address and the unsubscribe time so that we do not email you again. To have the record deleted entirely, contact us.
Processor: these emails are sent through ZeptoMail (Zoho), our email delivery provider.
5. Tailkits UI Accounts
When you sign in to or buy Tailkits UI, we process the following:
Account: your email address and, if provided, your name.
One-time code login: there is no password. We email you a one-time code through ZeptoMail. We store only a hash of the code, it is valid for 10 minutes, and the number of attempts is limited.
Session cookie: after you sign in, we set a cookie named
tk_session. It is strictly necessary to keep you signed in, is not readable by scripts on the page (HttpOnly), is only sent over HTTPS, and lasts 30 days from your last visit. We store only a hash of its value. Signing out deletes it.Payments: Stripe processes payments as our payment processor. We do not see or store your card number. We store the Stripe customer, subscription and checkout identifiers needed to link a payment to your account.
Entitlements: which plan you have (Solo or Team; subscription or Lifetime), its status, and the end of the current billing period, so we can grant access to the library and the MCP server. For Team plans we also store which accounts the owner has added as members.
MCP tokens: we store only a hash of each access token, with when it was created, last used and revoked.
Abuse protection: to limit abuse, we count login and checkout attempts per email address and IP address in short time windows. These counters store a one-way hash, not the address itself, and are short-lived.
6. Product Submissions and Sponsorship Inquiries
Launch submissions: when you submit a product, we store the details you enter (product name, website, tagline, description, categories, tags, pricing model and logo URL), your email address, the amount and payment status, and the Stripe checkout reference. Stripe processes the payment. An editor reviews the submission; once approved, the product details are published on a public product page. Your email address is never published.
Sponsorship inquiries: when you request a sponsorship package on the sponsor or submit page, we store your email address, the product name and website, the package, term and category you chose, the quoted price, your optional note and, from the submit page, the product details you entered. The request is emailed to [email protected] (sent through ZeptoMail) so we can reply. Nothing is charged by sending an inquiry.
Retention: we keep submissions and inquiries for as long as needed to review and answer them and as the record of any resulting order or booking; payment records follow the Financial Records rule below. You can ask us to delete an inquiry that did not lead to a booking at any time.
7. Data Retention
We have updated our retention policy to accommodate our various membership tiers:
Subscription Users: We retain your data for the duration of your active Quarterly or Yearly subscription.
Lifetime Users: We retain your account information indefinitely to ensure you maintain access to the library and future updates as promised.
Financial Records: We retain transaction data for as long as required by Estonian tax law (typically 7 years).
Inactive Accounts: If an account is inactive and has no active subscription, we may anonymize or delete the data after 24 months, unless a Lifetime license is attached.
8. Sharing of Information
We do not sell your data. We only share information with third parties necessary to operate the Service:
Payment Processors: (e.g., Stripe/LemonSqueezy) to manage billing.
Email Service Providers: To send you library updates and receipts.
Email delivery: ZeptoMail (Zoho) sends login codes, weekly email confirmations and sponsorship inquiry notifications.
Analytics Providers: To understand website traffic and improve user experience.
9. Your Rights
Depending on your location (specifically under GDPR), you have the right to access, rectify, or erase your personal data. You may also withdraw consent for marketing emails at any time. To exercise these rights, please contact us at [email protected].
10. Security
The security of your information is important to us. We use industry-standard encryption and security measures to protect your data. However, as the Service involves the use of third-party AI tools and local server integrations, we encourage users to maintain secure local environments.
11. Changes to This Policy
We may modify this Privacy Policy at any time. Changes will be posted on this page with an updated "Effective Date." For significant changes (such as changes to how we handle subscription data), we will notify you via the email associated with your account.