TILETABLE LLC — PRIVACY POLICY
Effective Date: April 2, 2026
Last Updated: October 24, 2026
This Privacy Policy ("Policy") describes how TileTable LLC, a New York limited liability company ("TileTable," "we," "us," or "our") collects, uses, processes, stores, shares, and protects the personal information of individuals who access or use the TileTable platform, website, mobile application, or any related services (collectively, the "Platform"). This Policy is incorporated into and forms part of the TileTable Terms of Service ("Terms of Service").
By accessing or using the Platform and the Platforms’ Matching Algorithm, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree, you may not access or use the Platform.
1. Definitions
Capitalized terms used but not defined in this Policy shall have the meanings set forth in the Terms of Service. As used in this Policy, the following additional terms apply:
"Abstracted Signal" means a derived indicator produced by TileTable's systems from raw User inputs that captures a matching-relevant characteristic.
"Biometric Information" means data generated from the measurement or analysis of human body characteristics, including but not limited to fingerprints, voiceprints, retina or iris scans, and facial geometry, to the extent collected by the Platform.
"Controller" means the natural or legal person that determines the purposes and means of processing Personal Information. For purposes of this Policy, TileTable is the Controller of all Personal Information collected through the Platform.
"User-directed preferences" means a User-selected absolute matching preference.
"Matching Algorithm" means TileTable's proprietary algorithmic system to facilitate connections between Users for the purpose of organizing mahjong tables, events, and related social interactions.
"Personal Information" means any information or attribute that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to a particular individual or household.
"Private Information" has the meaning ascribed under the New York SHIELD Act (N.Y. Gen. Bus. Law § 899-aa), including any information consisting of personal information in combination with one or more data elements specified therein.
"Processing" means any operation or set of operations performed on Personal Information, whether or not by automated means, including collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, alignment, combination, restriction, erasure, or destruction.
"Sensitive Personal Information" means categories of Personal Information that receive heightened protection under applicable law and under this Policy.
"Shared If Mutual" means the Platform feature that allows a User to designate a tag for conditional visibility, such that the tag is displayed to another User only if that other User has independently selected the same tag.
"General Inputs" means a User-provided input or Platform determined indicator that influences matching probability.
2. Scope of This Policy
This Policy applies to all Personal Information collected by TileTable through the Platform, including information provided by Users during account creation and onboarding, profile building, event participation, class enrollment, payment processing, post-game feedback, and all other interactions with the Platform.
This Policy does not apply to the practices of third parties that TileTable does not own or control, including but not limited to third-party payment processors, venue operators, Teachers, Hosts, or other Users. TileTable is not responsible for the privacy practices of any third party, expressly disclaims any such responbility, and encourages you to review the privacy policies of any third party before providing your information.
3. Information We Collect
TileTable collects Personal Information through multiple channels and at multiple stages of User engagement. The categories of information collected are described below.
3.1 Account Registration Data
When you create an account, we collect:
(a) name, email address, and phone number;
(b) login credentials;
(c) date of birth or age range; and
(d) geographic location (city, zip code, or equivalent).
3.2 Profile Data — Stage 1 (Onboarding)
During initial onboarding, we collect player motivation, personal and play-related preferences, and other attributes and factors, which may comprise Sensitive Personal Information necessary for the Matching Algorithm to generate a first match.
3.3 Post Play Stages (Ongoing)
After your first game, we collect post-play information, which provides additional contextual and social information data which is used to further enhance a Player’s experience.
3.5 Profile Data — Stage 4 (Identity and Affinity)
On an ongoing, self-paced basis, you may choose to provide information about your lifestyle, personality and career and affinity to biological, social and societal orientation.
3.6 Post-Game Feedback Data
After every game, event, or class, we collect optional player experiential feedback, which, over time, the Platform may use in aggregated form to support system performance and overall user experience.
3.7 Activity and Re-Engagement Data
For Users who have not engaged with the Platform for six or more weeks, we may collect responses to a re-engagement prompt assessing current satisfaction and interest level.
3.8 Payment and Transaction Data
We collect information necessary to process payments, including name, billing address, payment method details, and transaction history. Payment card information is processed and stored by our third-party payment processor and is not stored on TileTable's servers.
3.9 Device, Usage, and Technical Data
We automatically collect certain information when you access the Platform, including: IP address; device type, operating system, and browser type; unique device identifiers; pages viewed and features used; referring URL; date and time of access; clickstream data; and general geolocation data derived from IP address.
3.10 Communications Data
We collect the content of communications you send to us, including customer support inquiries, feedback, and correspondence.
4. Sensitive Personal Information — Special Provisions
TileTable collects and processes categories of data that qualify as Sensitive Personal Information under applicable law. We recognize the heightened legal and ethical obligations that attach to this data and address them specifically in this Section.
4.1 Categories of Sensitive Personal Information Collected
The Platform collects the following categories of Sensitive Personal Information, all of which are provided voluntarily by and solely at the option of the User: racial and ethnic origin, religious and philosophical, sexual orientation, gender identification, health-related indicators (including neurodiversity), fertility and reproductive status, disability-adjacent life stage tags, and precise geolocation data — to the extent derived from device-level location services rather than User-provided zip code or city.
4.2 Purpose and Legal Basis
Sensitive Personal Information is collected and processed solely for the following purposes:
a) to operate the Platform and support connection functionality;
(b) to honor User-directed preferences and visibility choices;
(c) to enable Platform features, including conditional visibility features such as Shared If Mutual;
(d) to support system performance and overall user experience; and
(e) to maintain, secure, and refine Platform functionality.
4.3 Consent
By providing Sensitive Personal Information through the Platform, you expressly consent to its collection, processing, and use for the purposes described in this Section and this Policy. You may withdraw consent at any time by deleting the relevant data from your profile or by contacting us as described in Section 14. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.
4.4 Data Abstraction Commitment
Where technically feasible, TileTable stores Abstracted Signals derived from raw Sensitive Personal Information rather than the raw inputs themselves. Where technically feasible, TileTable stores Abstracted Signals derived from raw Sensitive Personal Information rather than the raw inputs themselves. These processes are designed to reduce reliance on underlying personal details and limit exposure of sensitive information while supporting Platform functionality.
The methods by which such signals are derived, combined, or applied are proprietary and not disclosed.
This commitment does not apply to data that the User has affirmatively opted to display on their public profile or to share through the Shared If Mutual feature, as such data requires retention in its original form to fulfill its intended purpose.
5. How We Use Your Information
TileTable uses the Personal Information it collects for the following purposes:
(a) Matching and Platform Operations: To operate the Platform and facilitate connections between Users with Events, Teachers, and Classes, and deliver the core functionality of the Platform.
(d) Post-Game Learning: To use aggregated feedback data to support Platform functionality and overall user experience.
(e) Profile Display: To display information that you have affirmatively opted to make public on your profile, including through the Shared If Mutual feature.
(f) Class and Teacher Matching: To connect Users with Teachers based on instruction level, availability, location, mahjong style, and other inputs.
(g) Re-Engagement: To deliver activity-triggered prompts to Users who have been inactive for six or more weeks.
(h) Communications: To respond to your inquiries, provide customer support, and send service-related communications.
(i) Payment Processing: To process transactions for Classes, Events, and Platform services.
(j) Safety and Integrity: To detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service.
(k) Legal Compliance: To comply with applicable laws, regulations, legal processes, and government requests.
(l) Service Improvement: To analyze usage patterns, maintain and enhance Platform features, develop new products, and conduct internal research and analytics.
(m) Aggregation and Anonymization: To create aggregated, de-identified, or anonymized data sets that do not identify you personally, which TileTable may use for any lawful purpose without restriction.
6. Privacy by Default — Visibility Controls
TileTable is built on a foundational privacy principle: every tag, preference, and data point a User provides is private by default.
6.1 Default State
All Profile Data — across all stages — is private unless you take affirmative action to change its visibility. The information you provide is used by the matching algorithm to facilitate connections. It is never shown to other Users, never surfaced to Hosts, and never displayed on your public profile unless you explicitly choose to add it.
6.2 Public Profile Opt-In
You may choose to add specific tags to your public profile, and enhance participation in the Platform. But TileTable will never nudge you toward more public disclosure. The default is always private. Opt-in is always your choice, on your timeline, with no prompting.
6.3 Shared If Mutual
Certain User options may be designated as "Shared If Mutual," meaning a tag is visible to another User only if that User has independently selected the same tag. This feature is designed to facilitate connection around shared identity without requiring unilateral public disclosure.
6.4 No Inference from Absence
TileTable does not draw any inference from a User's decision not to complete an optional screen or not to provide Sensitive Personal Information. Absence of data is entirely neutral.
6.5 Algorithmic Use of Private Data
Platform functionality relies on internally processed User data, including private inputs, to support connection features. Public profile information, where enabled by the User, may be used as part of general connection functionality but does not determine or control Platform outputs.
7. How We Share Your Information
TileTable does not sell your Personal Information. We share Personal Information only in the following circumstances:
7.1 With Other Users (Only as You Direct)
Information is shared with other Users only to the extent you have affirmatively opted to make it public or designated it as Shared If Mutual. Matching outcomes (e.g., being placed at the same table) are shared, but the underlying data inputs that generated the match are not.
7.2 With Teachers
If you enroll in a Class, certain information necessary to facilitate the Class may be shared with the Teacher, including your name, contact information, instruction level, and scheduling details. Teachers are bound by the Teacher Agreement, which restricts their use of Student personal information.
7.3 With Service Providers
We share Personal Information with third-party service providers who perform services on our behalf, including payment processing, hosting, analytics, customer support, and background check providers. These providers are contractually required to use Personal Information solely for the purposes of providing services to TileTable and to maintain appropriate security measures.
7.4 With Law Enforcement and Legal Process
We may disclose Personal Information if required by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to: (a) comply with applicable law or respond to valid legal process; (b) protect the rights, property, or safety of TileTable, our Users, or the public; (c) detect, prevent, or address fraud, security, or technical issues; or (d) enforce our Terms of Service.
7.5 In Connection with a Business Transaction
In the event of a merger, acquisition, reorganization, bankruptcy, asset sale, or similar transaction, Personal Information may be transferred to the acquiring or successor entity. We will provide notice of any such transfer to the extent required by applicable law.
7.6 Aggregated and De-Identified Data
We may share aggregated, de-identified, or anonymized data that does not identify you personally with third parties for any lawful purpose, including research, analytics, marketing, and business development. Such data is not subject to the restrictions of this Policy.
8. Data Retention
TileTable retains Personal Information for as long as reasonably necessary to fulfill the purposes described in this Policy, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements.
Specific retention practices include:
(a) Active Account Data: Retained for the duration of your account.
(b) Post-Game Feedback Data: Retained indefinitely in anonymized or aggregated form to support Platform functionality and system performance, even after account deletion.
(c) Abstracted Signals: May be retained after deletion of raw inputs, as they do not contain personally identifiable information.
(d) Payment Data: Retained in accordance with applicable tax and financial reporting requirements.
(e) Account Deletion: Upon account deletion, TileTable will delete or anonymize your Personal Information within a commercially reasonable period, except to the extent retention is required by law or is necessary for legitimate business purposes (e.g., fraud prevention, enforcement of Terms of Service). Anonymized and aggregated data derived from your account may be retained indefinitely.
9. Data Security
TileTable implements and maintains reasonable administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, acquisition, disclosure, alteration, destruction, and other forms of unlawful processing.
These safeguards include, but are not limited to:
(a) encryption of Personal Information in transit and at rest;
(b) access controls limiting Personnel access to Personal Information on a need-to-know basis;
(c) regular security assessments and vulnerability testing;
(d) incident response procedures for suspected or confirmed security incidents; and
(e) contractual obligations on service providers to maintain comparable security standards.
No method of transmission over the Internet or method of electronic storage is completely secure. TileTable cannot and does not guarantee absolute security. TileTable shall not be liable for any unauthorized access to or acquisition of Personal Information except to the extent such liability cannot be disclaimed under applicable law.
10. Data Breach Notification
10.1 Notification Obligations
In the event of a data security incident involving unauthorized access to, acquisition of, or disclosure of Personal Information, TileTable will:
(a) assess the nature and scope of the incident;
(b) take reasonable steps to contain and remediate the incident;
(c) notify affected individuals and applicable regulatory authorities in accordance with the requirements of applicable breach notification laws, including the New York SHIELD Act (N.Y. Gen. Bus. Law § 899-aa et seq.) and any other applicable state notification statute; and
(d) provide notification within the timeframes required by applicable law, taking into account the needs of law enforcement and any measures necessary to determine the scope of the breach and restore the integrity of the system.
10.2 Scope of Notification
Notification content and format will be determined based on statutory requirements and the nature of the data affected. TileTable reserves the right to determine the method of notification (e.g., email, postal mail, conspicuous posting on the Platform) consistent with applicable law.
10.3 Limitation of Liability for Data Breaches
To the fullest extent permitted by applicable law, the limitations of liability set forth in Section 17 of the Terms of Service apply to any claims arising from a data security incident, including claims related to unauthorized access to, acquisition of, or disclosure of Personal Information. Without limiting the foregoing:
(a) TileTable shall not be liable for indirect, incidental, special, consequential, or punitive damages arising from any data security incident;
(b) TileTable shall not be liable for any breach attributable to third-party service providers, Teachers, Hosts, or other Users, except to the extent TileTable failed to exercise reasonable care in the selection or oversight of such parties;
(c) TileTable's aggregate liability for any data breach claim shall not exceed the limitations set forth in Section 17(d) of the Terms of Service; and
(d) Users who voluntarily opted to make Personal Information public through the Platform's opt-in disclosure features or the Shared If Mutual feature acknowledge that such disclosure carries inherent risk and that TileTable's liability with respect to data that was publicly visible at the time of a breach is further limited accordingly.
11. Your Rights and Choices
11.1 Profile and Visibility Controls
You may at any time:
(a) edit, update, or delete any Profile Data through the Platform's profile settings;
(b) change the visibility of any tag from public to private, or from Shared If Mutual to private;
(c) withdraw any optional Sensitive Personal Information; and
(d) delete your account through the Platform or by contacting us as described in Section 14.
11.2 Rights Under Applicable Law
Depending on your jurisdiction of residence, you may have additional rights with respect to your Personal Information, including:
(a) Right to Know / Access: The right to request that TileTable disclose the categories and specific pieces of Personal Information we have collected about you, the sources of that information, the purposes for which it is used, and the categories of third parties with whom it is shared.
(b) Right to Delete: The right to request that TileTable delete your Personal Information, subject to applicable exceptions (e.g., legal compliance, fraud prevention, completion of transactions).
(c) Right to Correct: The right to request that TileTable correct inaccurate Personal Information.
(d) Right to Opt Out of Sale: TileTable does not sell Personal Information. To the extent any future data sharing arrangement constitutes a "sale" under applicable law, you will have the right to opt out.
(e) Right to Non-Discrimination: TileTable will not discriminate against you for exercising your privacy rights.
(f) Right to Data Portability: Where required by applicable law, the right to receive your Personal Information in a structured, commonly used, machine-readable format.
11.3 Exercising Your Rights
To exercise any of the rights described above, please contact us using the information in Section 14. We will verify your identity before processing any request. We will respond to verifiable requests within the timeframes required by applicable law.
11.4 Authorized Agents
You may designate an authorized agent to make requests on your behalf. We may require the agent to provide proof of authorization and may independently verify your identity.
12. Children's Privacy
The Platform is not directed to individuals under eighteen (18) years of age. TileTable does not knowingly collect Personal Information from anyone under eighteen. If we become aware that we have collected Personal Information from an individual under eighteen, we will take reasonable steps to delete such information promptly. If you believe a minor has provided us with Personal Information, please contact us as described in Section 14.
13. New York-Specific Compliance and State Law Provisions
13.1 New York SHIELD Act
TileTable endeavors to comply with the New York Stop Hacks and Improve Electronic Data Security Act (N.Y. Gen. Bus. Law § 899-aa et seq.), including:
(a) implementation of a data security program that includes reasonable administrative, technical, and physical safeguards for the protection of Private Information of New York residents;
(b) compliance with breach notification requirements applicable to Private Information as defined under the SHIELD Act, including notification to affected individuals and, where required, to the New York Attorney General, the Department of State, and the Division of State Police; and
(c) reasonable data disposal practices for Private Information that is no longer needed for business purposes.
13.2 New York Human Rights Law and New York City Human Rights Law
TileTable is committed to operating in compliance with the New York Human Rights Law (N.Y. Exec. Law § 290 et seq.) and the New York City Human Rights Law (N.Y.C. Admin. Code § 8-101 et seq.) to the extent applicable to its operations. User-directed User-directed preferences that reflect a User's personal preference regarding the composition of their table (e.g., table gender preference) are applied at the User's explicit direction and do not reflect TileTable's own editorial judgment or discriminatory intent.
13.3 Other State Laws
TileTable monitors and endeavors to comply with applicable state privacy and data protection laws in all jurisdictions where it operates. To the extent any state law provides rights in addition to those described in this Policy, TileTable will honor those rights as required by law.
14. Contact Information
If you have questions about this Policy, wish to exercise any privacy rights, or need to report a data security concern, please contact:
TileTable LLC
800 Third Avenue FRNT, New York, NY 10022, USA
Email: [email protected]
For data privacy requests, please include "Privacy Request" in the subject line and provide sufficient information for us to verify your identity and process your request.
15. Changes to This Policy
TileTable reserves the right to modify this Policy at any time, in its sole discretion. If we make material changes, we will provide notice through the Platform or by other reasonable means prior to the changes taking effect. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you must discontinue use of the Platform.
16. Dispute Resolution
Any dispute arising out of or relating to this Policy shall be subject to the binding arbitration provision, class action waiver, and mass arbitration waiver set forth in Section 15 of the Terms of Service, which are incorporated herein by reference.
17. Miscellaneous
Severability. If any provision of this Policy is found to be unenforceable or invalid, that provision shall be enforced to the maximum extent permissible, and the remaining provisions shall remain in full force and effect.
Governing Law. This Policy shall be governed by and construed in accordance with the laws of the State of New York, without regard to its conflict of laws provisions.
Entire Agreement. This Policy, together with the Terms of Service and any other policies or agreements expressly referenced therein, constitutes the complete statement of TileTable's privacy practices with respect to the Platform.
BY USING THE PLATFORM, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THE PRACTICES DESCRIBED IN THIS PRIVACY POLICY.