Privacy Policy

Who We Are

Toneeto, PBC is a Delaware Public Benefit Corporation based in Mountain View, California. We provide verified product intelligence so AI agents can give accurate answers about software products.

Information We Collect

Account Information

When you sign up, we collect your email address and, if you use Google Sign-In, your name and profile picture as provided by Google. We use this to create and manage your account.

Usage Data

We collect information about how you use Toneeto, including domain lookups, audit requests, and page visits. This helps us improve the product and detect abuse.

Domain Claims

If you claim ownership of a domain, we store the claim details and verification status. This information is used to establish publisher trust and is visible in your account.

How We Use Your Information

• To provide, maintain, and improve our services
• To authenticate your identity and manage your account
• To process domain ownership claims and verification
• To enforce rate limits and prevent abuse
• To send transactional emails related to your account
• To comply with legal obligations

Data Storage and Security

Your data is stored in Supabase (PostgreSQL) and AWS infrastructure, both in the United States. We use industry-standard security measures including encryption in transit (TLS), encrypted storage, and strict access controls. We do not sell your personal information.

Third-Party Services

We use the following third-party services:

• Supabase — authentication and database hosting
• Google — OAuth sign-in (when you choose "Continue with Google")
• Vercel — website hosting and analytics
• AWS — backend infrastructure and data processing

Each provider processes data under their own privacy policies. We only share the minimum information required for each service to function.

Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. A temporary cookie (toneeto_audit_return) may be set during the sign-in flow to redirect you back to your audit results.

Your Rights

You can:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Withdraw consent for Google sign-in by revoking access in your Google account settings

To exercise any of these rights, email us at privacy@toneeto.com.

Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal information within 30 days. Anonymized usage data and published product intelligence (Change Objects) are retained indefinitely as part of our public benefit mission.

Children's Privacy

Toneeto is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date.

Contact

Toneeto, PBC
Mountain View, CA
privacy@toneeto.com