Privacy Policy

Information You Provide

• Account information: name, email address, password, and profile details when you create an account
• Payment information: billing address, payment card details (processed by our payment provider Stripe)
• Communication data: messages, feedback, and support requests you send to us
• User content: source code, configurations, and other content you deploy through our Service
• Professional information: company name, job title, and team information
• Contact requests: the email address or phone number, optional name, organization and message you send through the contact form, stored only after you tick the consent box, together with the consent text you saw, the page you sent it from and campaign parameters such as utm_source kept in your browser tab. We do not store a chat transcript or your IP address with the request
• Sign-up campaign labels: when you open the TOSE app from this site, campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content, ref) already in your browser tab are added to the link so the app can keep them as anonymous attribution when you create an account. They are never linked to a contact request automatically

Information from Third Parties

• Authentication providers: profile information from GitHub when you use OAuth sign-in
• Payment processors: transaction status and billing information from Stripe
• Analytics providers: aggregated usage data from Google Analytics
• Git repositories: repository metadata and deployment configurations from connected services

Automatically Collected Information

• Usage data: pages visited, features used, deployment logs, and interaction patterns
• Device information: browser type, operating system, device identifiers, and IP address
• Location data: general geographic location based on IP address
• Performance data: application metrics, error logs, and system telemetry
• Cookies and similar technologies: session cookies, authentication tokens, and analytics cookies

Service Operation

• Provide, maintain, and improve our cloud deployment platform
• Process your deployments and manage your projects
• Authenticate your identity and manage your account
• Process payments and manage subscriptions
• Provide customer support and respond to inquiries

Service Improvement

• Analyze usage patterns to improve features and user experience
• Develop new products, features, and services
• Train and improve our AI-powered features (with anonymized data)
• Conduct research and analytics to understand user needs
• Debug and fix issues in our Service

Communication

• Send service-related notifications (deployment status, security alerts)
• Provide product updates and announcements
• Send marketing communications (with your consent)
• Respond to your comments, questions, and requests

Security and Legal

• Detect, prevent, and address fraud, abuse, and security issues
• Enforce our Terms of Service and Acceptable Use Policy
• Comply with legal obligations and respond to lawful requests
• Protect the rights, property, and safety of TOSE and our users

AI Data Collection

• Code analysis data for intelligent suggestions and optimizations
• Deployment patterns for predictive scaling and performance recommendations
• Error logs and debugging information for automated issue detection
• User interaction data to improve AI model accuracy

AI Data Protection

• AI training data is anonymized and aggregated before processing
• Your source code is not used to train general AI models without explicit consent
• You can opt out of AI features through your account settings
• AI-processed data is subject to the same security measures as other personal data

Service Providers

• Cloud infrastructure providers for hosting and computing services
• Payment processors (Stripe) for billing and subscription management
• Analytics providers (Google Analytics) for usage analysis
• Customer support tools for managing support requests
• Email service providers for transactional and marketing communications

Business Transfers

If TOSE is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

Legal Requirements

• To comply with applicable laws, regulations, or legal processes
• To respond to lawful requests from public authorities
• To protect the rights, property, or safety of TOSE, our users, or others
• To enforce our agreements and policies

With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

Retention Periods

• Account information: retained while your account is active, deleted upon account closure
• Deployment logs: retained for 90 days for debugging and support purposes
• Payment records: retained as required by tax and financial regulations
• Analytics data: retained in aggregated form for up to 26 months
• Support communications: retained for 3 years for quality and training purposes
• Contact requests: deleted after 180 days, or sooner when you ask. The confirmation shown after you submit includes a code that deletes the request, and you can also email privacy@tose.sh

Deletion

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes.

Security Measures

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Regular security assessments and vulnerability testing
• Access controls and authentication requirements for employees
• Monitoring and logging of system access and activities
• Incident response procedures and breach notification protocols

Your Responsibilities

You are responsible for maintaining the confidentiality of your account credentials. Please use strong passwords and enable two-factor authentication when available.

Available Rights

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate or incomplete information
• Deletion: request deletion of your personal information
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing of your information for certain purposes
• Restriction: request restriction of processing in certain circumstances
• Withdrawal of consent: withdraw consent where processing is based on consent

Exercising Your Rights

To exercise these rights, please contact us at privacy@tose.sh or through your account settings. We will respond to your request within 30 days.

Types of Cookies

• Essential cookies: required for basic Service functionality and security
• Functional cookies: remember your preferences and settings
• Analytics cookies: help us understand how you use our Service (Google Analytics)
• Marketing cookies: track your activity for personalized advertising (with consent)

Cookie Management

You can manage cookie preferences through your browser settings or our cookie consent tool. Disabling certain cookies may affect Service functionality.