Privacy Policy

If you have questions about this Privacy Policy or want to exercise privacy-related rights, contact us at [email protected].

We collect information in several ways, including information you provide directly, information collected automatically, information received from third parties, and information derived from your use of the Service.

Information you provide directly may include:

• name, display name, handle, and profile information;
• email address and account login details;
• profile images, persona images, board settings, and appearance selections;
• content you create, upload, publish, link, embed, or otherwise make available through the Service, including boards, tablets, cards, features, links, text, images, and media;
• communications you send to us, including support messages, feedback, and survey responses;
• billing-related details such as plan selection, subscription status, and limited payment-related metadata.

Information collected automatically may include:

• device, browser, and operating system information;
• IP address, approximate location derived from IP, and network information;
• usage and interaction data, including pages viewed, features used, navigation patterns, clicks, uploads, errors, and performance information;
• log data, timestamps, request metadata, and security-related events;
• cookie, local storage, session, and similar identifier data.

We may receive information from:

• authentication providers, such as Google, Facebook, or other login providers, subject to their settings and policies;
• payment processors and subscription providers;
• hosting, storage, analytics, customer support, email, and infrastructure vendors;
• third-party services that provide embedded or linked content, metadata, previews, or enrichment.

If you publish content publicly through the Service, information you choose to make public may be accessible to other users and the public, including search engines or third-party crawlers where applicable.

We use information for purposes such as:

• providing, operating, maintaining, and improving the Service;
• creating and managing accounts and authentication;
• displaying, hosting, processing, and distributing content according to user settings;
• processing subscriptions, purchases, renewals, cancellations, and billing-related workflows;
• personalizing the user experience;
• enabling uploads, media handling, content previews, embeds, and link enrichment;
• communicating with you, including service notices, support responses, and transactional messages;
• monitoring performance, debugging errors, and improving reliability;
• enforcing our Terms, policies, entitlements, and usage limits;
• detecting, investigating, and preventing fraud, abuse, spam, security incidents, and unlawful activity;
• complying with legal obligations and resolving disputes.

If you are in a jurisdiction requiring a legal basis for processing, our legal bases may include performance of a contract, legitimate interests, consent where required, and compliance with legal obligations.

We share information with vendors and service providers that help us operate the Service, such as providers for hosting, infrastructure, object storage, CDN delivery, authentication, email delivery, payment processing, analytics, logging, monitoring, error tracking, customer support, and operational tooling.

Information you choose to publish publicly or share through the Service may be visible to others, including followers, public visitors, or third parties depending on the content and settings involved.

If you use third-party embeds, links, or external content, those third parties may collect information directly from users interacting with that content, subject to their own privacy policies and practices.

We may disclose information when we believe it is reasonably necessary to comply with law, regulation, legal process, or governmental request; enforce our Terms or policies; protect the rights, property, or safety of TomoTab, our users, or others; or detect or prevent fraud, abuse, or security issues.

We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction.

We use cookies and similar technologies to keep you signed in, remember preferences and settings, maintain sessions and security controls, understand usage and performance, and improve the Service.

You can control cookies through your browser or device settings. Some features may not function properly if cookies or similar technologies are disabled. If required by applicable law, we will request consent for certain non-essential cookies or tracking technologies.

Payment transactions are processed by our payment providers. We do not store full payment card numbers on TomoTab servers.

We may store limited billing and subscription information such as:

• customer identifiers;
• subscription identifiers;
• plan or price identifiers;
• subscription status;
• renewal and cancellation state;
• limited transaction metadata needed for support, operations, reconciliation, fraud prevention, or legal compliance.

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain accounts and published content, process subscriptions and support requests, detect and prevent fraud or abuse, comply with legal, tax, accounting, and regulatory obligations, resolve disputes, and enforce our agreements.

Retention periods may vary depending on the type of information and the reason it was collected. Some information may persist temporarily in backups, logs, caches, or operational systems even after deletion requests are processed. Security, abuse-prevention, or operational records may be retained for a limited period after account deletion where reasonably necessary.

You may request deletion of your account through the Service or by contacting us, subject to applicable law.

When you delete your account, we will take steps to remove or anonymize your information, but some information may be retained temporarily or longer where necessary for legal compliance; billing, tax, or accounting records; fraud, abuse, and security prevention; dispute resolution and enforcement; backup and operational recovery systems; or limited tombstone or integrity records where reasonably necessary to preserve system consistency.

Additional details may be provided in our Data Deletion materials.

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction.

However, no method of transmission, storage, or security control is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials and for using secure devices and networks when accessing the Service.

Depending on your location, you may have rights such as the right to access personal information we hold about you; correct inaccurate information; delete certain information; object to or restrict certain processing; withdraw consent where processing is based on consent; receive a portable copy of certain information; or appeal a denial of a privacy request where required by law.

You may update certain account information directly through the Service. We may need to verify your identity before fulfilling certain requests.

If you are a resident of a U.S. state with applicable privacy rights, you may have rights relating to access, deletion, correction, portability, and opt-out rights depending on the law that applies to you.

If California law applies, you may have rights relating to the categories of personal information collected, purposes of use, disclosure practices, and certain requests regarding access, deletion, correction, and limits on certain disclosures.

If you are in the EEA, UK, or another jurisdiction with similar laws, you may have additional rights, including the right to lodge a complaint with a supervisory authority.

The Service is intended for adults and is not intended for individuals under 18 years old, or the age of majority in their jurisdiction if higher.

We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, or otherwise in violation of applicable law, we will take reasonable steps to delete it.

If you believe a child has provided us personal information in violation of this Privacy Policy or applicable law, contact us so we can investigate and take appropriate action. If local law requires a different age threshold or additional protections for minors, those requirements may also apply.

We may process and store information in countries other than your own, including countries that may not provide the same level of data protection as your home jurisdiction. Where required, we will use appropriate safeguards for cross-border data transfers.

Some content and profile information on TomoTab may be public depending on your settings and how the Service works. Public information may be visible to other users, followers and visitors, search engines, and third parties that access or cache public pages.

You are responsible for deciding what content you publish publicly.

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by law or through the Service.

Your continued use of the Service after an updated Privacy Policy becomes effective means you acknowledge the revised policy.

For privacy questions or requests, contact us at [email protected].