Privacy Policy

1. Who We Are

TRIBOSIA ("we", "our", "us") operates the platform at tribosia.com. We comply with the Australian Privacy Act 1988, the EU GDPR, the California CCPA/CPRA, and all applicable data protection laws globally. Questions: privacy@tribosia.com

2. What We Collect

• →
  Email & name — for sign-in and report delivery.
• →
  Quiz responses & results — your 51 answers and resulting Tribal Trace. Stored to generate and retrieve your report.
• →
  Location (optional, consent required) — city-level only, to power the Tribe Map. Never precise location.
• →
  Payment metadata — handled by Stripe. We store only the session ID and status. We never see card details.
• →
  Cookie preferences — stored locally in your browser. Not sent to our servers.

3. How We Use It

• →Generating and delivering your personalised Tribal Trace report
• →Authenticating you via magic link (no passwords stored)
• →Processing payment and verifying access to paid features
• →Improving the Trace system through aggregate, anonymised analysis
• →Powering Tribe Map geographic clusters (only with consent)

We do not sell your data. We do not use it for advertising. We never share individual quiz results with third parties without your explicit consent.

4. Legal Bases (GDPR)

• →
  Contract — delivering your purchased report and maintaining your account.
• →
  Consent — location data and optional analytics/marketing cookies.
• →
  Legitimate Interest — security, fraud prevention, aggregate product improvement.
• →
  Legal Obligation — financial records retained 7 years.

5. Your Rights

You have the right to access, correct, delete, port, restrict, or object to processing of your data. California residents may opt out of data sales (we do not sell data). EU residents may withdraw consent at any time.

Email privacy@tribosia.com to exercise any right. We respond within 30 days.

6. Third Parties

• →
  Stripe — payments. We share only the minimum required.
• →
  Cloudflare — hosting and database (D1).
• →
  SMTP2GO — transactional email.
• →
  Mapbox — geographic visualisation (location consent required).

7. Cookies

We use functional cookies (required) for auth, quiz state, and preferences. Analytics and marketing cookies are optional and require your explicit consent via the banner. You may update preferences by clearing browser local storage or via the consent banner.

8. Governing Law

Governed by Australian law. We comply with GDPR, CCPA/CPRA, and all applicable frameworks. Complaints may be lodged with your local data protection authority.