Privacy Notice for Toffu AI

At Toffu AI, Inc., a Delaware-based company, we value your privacy. This notice explains how we handle personal data in our chat-based AI service, which helps you perform marketing tasks by connecting to your tools (like analytics or CRM platforms). Questions? Email support@toffu.ai.

What We Collect and Why

• Account Data: Email and name to manage your account (to provide our service).
• Chat Data: Your prompts (e.g., "analyze my data") and conversation history to deliver AI responses and maintain context.
• Content Data: Website content or files you provide, processed to enable features like task execution or search.
• Connected Account Data: When you connect a Facebook Page, we read the posts on Pages you manage together with their like, comment and share counts, only to report post performance to you inside Toffu. See Facebook and Instagram Data.
• Payment Data: Billing info for subscriptions, handled securely by Stripe (we don't store this).
• Usage Data: Device info, IP addresses, and analytics to improve performance and security (some optional, with consent).
• Emails: Contact details for service emails (e.g., confirmations) or marketing (if you opt-in).

Why We Process Data

• To run our service (e.g., deliver AI answers, process payments).
• With your permission (e.g., for marketing or optional analytics).
• For basic needs like security, only when necessary.

Who We Share With

We use trusted providers (subprocessors) for things like cloud storage, AI processing, and payments. We only share data when necessary to provide our service. For a detailed and up-to-date list of these providers and their purposes, please see our dedicated page.

View our list of Subprocessors

These providers follow our instructions under strict agreements. We don't sell your data or use it to train AI.

No AI Training

We do not train the AI on customer data. The AI models used in our service are pre-trained and do not learn from your conversations or data. The model providers we send requests to may retain those requests and the responses they return for a limited period for abuse monitoring under their published API terms.

Where Your Data Goes

Data is stored and processed in the United States. For EEA users, we use agreements (Standard Contractual Clauses) to protect your data. European servers are available upon request.

Facebook and Instagram Data

When you connect Facebook or Instagram, you choose which Pages and accounts Toffu can access. For those Pages, Toffu reads your posts and their like, comment and share counts. We use this only to answer your requests, for example reporting how a post performed.

• We do not sell this data, use it for advertising or profiling, or use it to train AI models.
• We do not read your personal Facebook profile, friends or private messages.
• Your access token is stored encrypted. Data we fetch appears in your chat history and follows the Chat Data retention below.

Deleting Your Facebook and Instagram Data

1. In Toffu, open Integrations, find Facebook (or Instagram) and click Disconnect. If you connected it yourself, this deletes your access token immediately. If your agency connected it for you, this removes your workspace's access to the agency's connection; ask your agency to disconnect it to delete their token.
2. Optionally, remove Toffu AI from Facebook under Settings & privacy → Settings → Business integrations.
3. To delete chat history that contains Facebook or Instagram data, email support@toffu.ai from your account email. We delete it within 30 days and confirm by email.

How Long We Keep It

We retain your data only for as long as necessary to provide our service and fulfill the purposes described in this notice. Specific retention periods vary by data type:

• Account Data: Retained for the duration of your active account. Deleted within 30 days of account closure.
• Chat Data: Conversation history is retained while your account is active so you can access past sessions. Deleted within 30 days of account closure.
• Content Data: Files and website content you provide are retained while your account is active. Deleted within 30 days of account closure.
• Payment Data: Transaction records are retained for up to 7 years after account closure to comply with tax and financial reporting requirements.
• Usage Data: Aggregated, non-identifiable usage analytics may be retained indefinitely to improve our service. Identifiable usage data is deleted within 90 days of account closure.
• Email Logs: Service-related email logs may be retained for up to 90 days after account closure for troubleshooting and deliverability purposes.

When you close your account, we initiate deletion of your personal data within the timeframes above. Some data may be retained longer where required by law (e.g., tax records, fraud prevention) or where necessary to resolve disputes. You can request deletion of your data at any time by emailing support@toffu.ai.

Your Rights (EEA Users)

You can:

• See or correct your data.
• Delete your data.
• Get a copy in a standard format.
• Stop marketing or optional analytics.
• Limit certain uses or complain to a regulator (e.g., Ireland's Data Protection Authority).

Email support@toffu.ai. We'll respond within 30 days.

Cookies

We use cookies and similar tracking technologies to operate and improve our service. Some cookies are essential for our site to function, while others help us with analytics and performance.

For detailed information on the cookies we use, the purposes for which we use them, and how you can manage them, please see our full Cookie Policy.

Security

We use encryption, secure connections, and access limits to keep data safe. Our providers meet high standards.

Updates

We'll notify you if this notice changes significantly.

Contact

support@toffu.ai or Toffu AI, Inc., 651 North Broad Street, Middletown, Delaware 19709, United States. EEA users can contact their local regulator if needed.