Security and data

Tierline is built for sales and category teams, so it holds little about you: who you are, your company’s states and watchlist, your briefing settings, and a record of what you did in the app. This page says how that is kept safe. The privacy policy says what is kept and for how long.

Where it runs

• Tierline runs in the United States. Your account and settings are kept in a database there, encrypted in transit and at rest.
• Every page is served over HTTPS. The site sends strict browser security headers: scripts run only from Tierline’s own address and only when the page asked for them, nothing can put Tierline inside another site’s frame, and the browser talks to Tierline’s address alone.
• The market data (labels, registrations, distributors) lives apart from accounts. The app reads it through an account that can only read, never write, and that never reaches a browser.

Your company’s own account

• Each person signs in with their own email address and a password of at least 8 characters with upper and lower case and a digit. Wrong passwords are counted per email address and per network address, and too many in a row means a wait.
• One person, one login. A person can be signed in on two devices at once; signing in on a third signs the oldest out and says why. An account used from places too far apart at once is looked at by us.
• Who may see what is decided in the database for every request, not in the pages: a member of your company sees your company’s account and nobody else’s. Owners and admins manage the team; a seat is one person.
• “Sign out everywhere” on your account page ends every session within the hour.

Payments

• Stripe takes the card, on Stripe’s own pages. Tierline never sees a card number. We keep which plan your company is on and whether it is paid, nothing more.

AI

• Ask answers from Tierline’s own data only. Your question goes to our AI provider to be answered; the answer comes back to you and is kept in your conversation until you delete it. Nothing of yours is used to train AI models.
• Label check sends the label pictures you upload to our AI provider, which deletes them within 30 days at most. Tierline keeps them privately in your company’s account for your company’s own use.

What we keep, and for how long

• Your settings, watchlist and conversations, for as long as you have an account.
• A record of sign-ins and of what each person did in the app, kept 13 months for security and support, then deleted. Owners and admins cannot read other people’s activity; Tandem can, to answer a support question or look into a problem.
• Delete your account by writing to us; everything listed above goes with it, except the activity record for the rest of its 13 months.

Where the market data comes from

• Public records only: TTB’s label approvals and permit list, and the brand registrations each state publishes. Every fact in the app links to its public source. Tierline is not affiliated with TTB or any state.

Telling us about a problem

Write to hello@tandem.bi, and a person at Tandem answers. Security researchers: the same address is in our security.txt. Please don’t test with other people’s accounts or data.

Who we are

Tierline is a product of Tandem, 222 Colonial Homes Dr, Atlanta, GA 30309. Write to us at hello@tandem.bi.