Privacy Notice for Toffu AI
Last Updated: November 1, 2026
At Toffu AI, Inc., a Delaware-based company, we value your privacy. This notice explains how we handle personal data in our chat-based AI service, which helps you perform marketing tasks by connecting to your tools (like analytics or CRM platforms). Questions? Email support@toffu.ai.
What We Collect and Why
- Account Data: Email and name to manage your account (to provide our service).
- Chat Data: Your prompts (e.g., "analyze my data") and conversation history to deliver AI responses and maintain context.
- Content Data: Website content or files you provide, processed to enable features like task execution or search.
- Connected Account Data: When you connect a Facebook Page, we read the posts on Pages you manage together with their like, comment and share counts, only to report post performance to you inside Toffu. See Facebook and Instagram Data.
- Payment Data: Billing info for subscriptions, handled securely by Stripe (we don't store this).
- Usage Data: Device info, IP addresses, and analytics to improve performance and security (some optional, with consent).
- Emails: Contact details for service emails (e.g., confirmations) or marketing (if you opt-in).
Why We Process Data
- To run our service (e.g., deliver AI answers, process payments).
- With your permission (e.g., for marketing or optional analytics).
- For basic needs like security, only when necessary.
Who We Share With
We use trusted providers (subprocessors) for things like cloud storage, AI processing, and payments. We only share data when necessary to provide our service. For a detailed and up-to-date list of these providers and their purposes, please see our dedicated page.
View our list of Subprocessors
These providers follow our instructions under strict agreements. We don't sell your data or use it to train AI.
No AI Training
We do not train the AI on customer data. The AI models used in our service are pre-trained and do not learn from your conversations or data. The model providers we send requests to may retain those requests and the responses they return for a limited period for abuse monitoring under their published API terms.
Where Your Data Goes
Data is stored and processed in the United States. For EEA users, we use agreements (Standard Contractual Clauses) to protect your data. European servers are available upon request.
Deleting Your Facebook and Instagram Data
- In Toffu, open Integrations, find Facebook (or Instagram) and click Disconnect. If you connected it yourself, this deletes your access token immediately. If your agency connected it for you, this removes your workspace's access to the agency's connection; ask your agency to disconnect it to delete their token.
- Optionally, remove Toffu AI from Facebook under Settings & privacy → Settings → Business integrations.
- To delete chat history that contains Facebook or Instagram data, email support@toffu.ai from your account email. We delete it within 30 days and confirm by email.
Google User Data
When you connect a Google service such as Gmail, Google Drive, Google Ads or Google Analytics, Toffu accesses only the data needed to answer your requests. If you connect Gmail, Toffu uses it only for the actions you ask for, such as drafting an email or reading the specific messages and attachments your request is about.
Toffu's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We use Google user data only to provide and improve the features you use in Toffu.
- We do not sell it, and we do not use it for advertising, retargeting or credit decisions.
- We do not use it to train generalized AI or machine learning models.
- People at Toffu do not read it unless you give us permission, it is needed for security or to investigate abuse, or the law requires it.
- We share it only with the service providers that process it on our behalf to run Toffu, such as the AI model provider that answers your request.
- Your access token is stored encrypted. Disconnecting the integration in Toffu deletes the token. You can also remove Toffu at myaccount.google.com/permissions.
YouTube Data
Toffu uses YouTube API Services. By using Toffu's YouTube features you agree to the YouTube Terms of Service, and Google processes data under the Google Privacy Policy.
- What we access: when you connect your YouTube channel, Toffu reads that channel's details, its videos and their public statistics, such as view counts.
- How we use it: to answer your questions in chat and to show the numbers in the reports and dashboards you build in Toffu. The data is visible to your workspace and to the people you choose to share a report with.
- What we store: your access token, stored encrypted, and the results that appear in your chat history and reports.
- Who we share it with: only the service providers that run Toffu on our behalf, such as the AI model provider that answers your request. We do not sell it or use it for advertising.
- Uploads: Toffu does not upload videos to your channel. Toffu AI, Inc. uses the YouTube API to publish its own videos to its own channel.
- Revoking access: disconnect YouTube under Integrations in Toffu, or remove Toffu at Google security settings. We delete stored YouTube data within 30 days after you revoke access, or sooner on request to support@toffu.ai.
- We use cookies as described in our Cookie Policy. Our YouTube features do not place additional cookies on your device.
ChatGPT and Other AI Assistants
You can connect Toffu to ChatGPT, Claude, Cursor and other AI assistants that support the Model Context Protocol (MCP). You sign in to Toffu, choose a workspace and approve the connection, or you let the assistant create a new workspace for you. The assistant can then ask Toffu for data from that workspace and, if you allow it, propose and apply changes to your ad accounts.
What the assistant receives
When you ask the assistant for something, Toffu can return:
- Workspace names: The name of your workspace and of its agency or parent workspace. On agency accounts, results can also name each client workspace. A workspace name can be a person's name.
- Connected accounts: The names, ids and currencies of connected ad accounts. An account name can include a person's name. For example, Meta personal ad accounts default to the owner's name.
- Campaign data: Campaign, ad set and ad names and ids, their settings, the times Meta campaigns, ad sets and ads were created and last updated, and performance metrics such as spend, clicks and conversions, including delivery breakdowns such as age or gender if the assistant asks for them.
- Ad content: Ad copy, destination URLs with their query parameters, and creative thumbnails. Ad content can quote or show people, for example in a testimonial.
- Workspace content: Rules, custom instructions and skills written in the workspace or by its agency, and the titles, descriptions and URLs of knowledge documents. This content contains whatever its authors wrote. Sentences that mention a password, API key or token are withheld.
- Proposed changes: A preview of a change, its current and new values, and the result after it is applied or undone.
- Error messages: Messages from ad platforms when an action fails.
- Links: A link to connect a platform (valid for 24 hours) and, for a workspace an assistant created, a link to claim it (valid for 7 days). Both are encrypted and contain no readable identifiers.
Toffu does not return email addresses, internal Toffu user ids, Toffu session ids, or debug and trace ids to ChatGPT. Email addresses that appear in the content above are replaced with "[email withheld]". Platform error messages are returned with their request and trace ids removed. An id in a platform's free text with no label can remain. Ids inside destination URLs and in text written in the workspace also remain.
Assistants other than ChatGPT work differently. Email addresses in the content above are not removed for them. They can also send messages to the Toffu agent and receive its answers and a session id. Those answers can include data from any integration connected to the workspace, and they are saved as Chat Data. If you connect through our raw access address, or your workspace is set up for direct tool access, the assistant can also read data from any platform connected to the workspace and, if writes are turned on, propose changes to it. With direct tool access it can also read and edit stored scripts.
Why we use this data
- To answer the requests you make through the assistant, and to make the changes you approve.
- To authenticate the connection and limit it to the workspace you approved.
- To diagnose errors and keep the service secure.
- For workspaces an assistant created and no person has claimed yet, to see what was asked and what came back.
Who receives it
- The AI assistant you connected: For example, OpenAI for ChatGPT. That provider handles the data under its own policy, not this notice.
- The platforms you connected: Toffu sends them the requests needed to fetch data or apply a change.
- Our service providers: As listed on our Subprocessors page. For example, error reports sent to Sentry carry the user id, workspace id, tool name and session id of the call that failed.
- Toffu staff: For unclaimed workspaces, a summary of each visit is posted to an internal Slack channel. It includes the name or email of the login used to connect a platform, the connected platforms, what was pulled, and what failed.
We do not sell this data or use it to train AI.
What we keep and for how long
- Connection records: The assistant's registered name and redirect addresses, and the user and workspace that approved it. Deleted when the workspace is deleted.
- Connection tokens: Stored only as SHA-256 hashes. An access token lasts 30 days. A refresh token lasts 90 days and renews with use, so a connection unused for 90 days must be approved again. API keys do not expire. Tokens are deleted when the workspace is deleted.
- Tool call log: We log tool calls only for workspaces an assistant created and no person has claimed. Each entry holds the workspace, user, assistant, tool name, the arguments sent, success or error, duration, result size, a summary of the result and its first 4,000 characters. Entries are deleted after 90 days. Calls from other workspaces are not added to this log.
- Change records: Each proposed or applied change is stored with who initiated it, its before and after values and its result, as an audit record. Deleted when the workspace is deleted.
- Agent answers: For assistants that message the Toffu agent, the conversation follows the Chat Data retention below, and a separate copy of the final answer is stored so the assistant can collect it. The copy is deleted when the workspace is deleted.
- Unclaimed workspaces: A workspace an assistant created is deleted after 90 days without a claim.
- Server logs and error reports: Our servers log the workspace and user id each time a connection token is verified. Server logs are kept for 365 days. Error reports in Sentry are kept for 90 days. Slack summaries are kept for 30 days.
Your controls
- Approval: You choose the workspace on the Toffu approval screen, and you can deny the request.
- Changes: Assistants cannot change your ad accounts until writes are turned on for the workspace or its agency, in AI Settings. Each change is proposed first and applied in a separate step. In assistants other than ChatGPT, budget and status changes made this way can be undone for 24 hours.
- Disconnect the assistant: Remove the Toffu connector in your assistant's settings. Toffu is not notified when you do this. The assistant stops using its token, and the token stays valid on our side until it expires.
- End a connection: Email support@toffu.ai to end a connection. We delete its tokens, and the assistant must then be approved again.
- API keys: Generating a new MCP API key in Integrations replaces the old key.
- Disconnect a platform: Disconnect it in Integrations. The assistant can then no longer reach it through Toffu.
- Claim a workspace: Open the claim link while signed in to Toffu to become the owner of a workspace an assistant created.
- Delete your data: Email support@toffu.ai. See How Long We Keep It below. Data already sent to an assistant is held by that provider, so delete it there.
How Long We Keep It
We retain your data only for as long as necessary to provide our service and fulfill the purposes described in this notice. Specific retention periods vary by data type:
- Account Data: Retained for the duration of your active account. Deleted within 30 days of account closure.
- Chat Data: Conversation history is retained while your account is active so you can access past sessions. Deleted within 30 days of account closure.
- Content Data: Files and website content you provide are retained while your account is active. Deleted within 30 days of account closure.
- Payment Data: Transaction records are retained for up to 7 years after account closure to comply with tax and financial reporting requirements.
- Usage Data: Aggregated, non-identifiable usage analytics may be retained indefinitely to improve our service. Identifiable usage data is deleted within 90 days of account closure. Server logs are kept for 365 days for security and troubleshooting, and they hold workspace and user ids.
- Email Logs: Service-related email logs may be retained for up to 90 days after account closure for troubleshooting and deliverability purposes.
When you close your account, we initiate deletion of your personal data within the timeframes above. Some data may be retained longer where required by law (e.g., tax records, fraud prevention) or where necessary to resolve disputes. You can request deletion of your data at any time by emailing support@toffu.ai.
Your Rights (EEA Users)
You can:
- See or correct your data.
- Delete your data.
- Get a copy in a standard format.
- Stop marketing or optional analytics.
- Limit certain uses or complain to a regulator (e.g., Ireland's Data Protection Authority).
Email support@toffu.ai. We'll respond within 30 days.
Cookies
We use cookies and similar tracking technologies to operate and improve our service. Some cookies are essential for our site to function, while others help us with analytics and performance.
For detailed information on the cookies we use, the purposes for which we use them, and how you can manage them, please see our full Cookie Policy.
Security
We use encryption, secure connections, and access limits to keep data safe. Our providers meet high standards.
Updates
We'll notify you if this notice changes significantly.
Contact
support@toffu.ai or Toffu AI, Inc., 651 North Broad Street, Middletown, Delaware 19709, United States. EEA users can contact their local regulator if needed.