Skip to content

Privacy Policy

Effective date:

1. About this policy

This Privacy Policy explains how TOFO LLC (“TOFO”, “we”, “us”, or “our”), based in Dubai, United Arab Emirates, collects, uses, shares, and protects personal data when you visit our websites, communicate with us, or use our software, AI tools, integrations, and related services (collectively, the “Services”).

This policy applies where TOFO determines why and how personal data is processed. When a business customer uses TOFO to handle personal data on its behalf, that customer generally determines the purpose of the processing and TOFO processes the data under the customer’s instructions. In that situation, the customer’s privacy notice also applies.

2. Personal data we collect

Depending on how you interact with TOFO, we may collect:

  • Contact and account data, such as your name, work email, organization, role, account identifiers, and authentication information.
  • Business and billing data, such as plan details, transaction records, billing contacts, and tax information. Payment-card details may be handled directly by a payment provider rather than TOFO.
  • Customer Content, including instructions, configurations, files, knowledge sources, support messages, and conversation content submitted through the Services.
  • Integration data that you authorize a third-party service to provide to TOFO.
  • Technical and usage data, such as IP address, device and browser information, requested pages, timestamps, referral information, feature activity, and diagnostic or security logs.
  • Communications, including enquiries, feedback, support requests, and records of our correspondence.

3. Where data comes from

We collect personal data directly from you, automatically when you use the Services, from the organization that gives you access, from customers that use TOFO to communicate with their own users, and from integrations or service providers you authorize. We may also receive business contact information from public or professional sources where permitted by law.

4. How we use personal data

We use personal data to:

  • provide, operate, maintain, and support the Services;
  • create and manage accounts, authenticate users, and process transactions;
  • follow customer instructions and deliver AI-assisted conversations and outputs;
  • secure the Services, prevent abuse, investigate incidents, and enforce our terms;
  • communicate about the Services, support requests, security, and important updates;
  • understand performance and improve reliability, usability, and features; and
  • comply with law, resolve disputes, and protect the rights and safety of TOFO, our users, and others.

Where applicable law requires a legal basis, we rely on performance of a contract, your consent, compliance with legal obligations, and legitimate interests such as securing and improving the Services, provided those interests are not overridden by your rights.

5. AI and customer-directed processing

The Services may process prompts, conversation history, business knowledge, and related data to generate AI-assisted responses or other outputs. Business customers are responsible for deciding what data they submit, providing required notices, establishing an appropriate legal basis, and configuring their agents and integrations. TOFO uses Customer Content to provide and secure the Services in accordance with customer instructions and applicable agreements.

6. Cookies and local technologies

This public website uses browser local storage to remember whether you selected light or dark appearance. Other parts of the Services may use strictly necessary cookies or similar technologies for sign-in, security, session continuity, and core functionality. If we add optional analytics or advertising technologies that require consent, we will provide the appropriate notice and controls.

7. How we share personal data

We may share personal data with:

  • vendors that provide hosting, security, communications, payment, support, analytics, or AI infrastructure under appropriate obligations;
  • third-party services and integrations when you or a business customer directs us to connect them;
  • professional advisers, auditors, insurers, and potential transaction counterparties where reasonably necessary;
  • authorities or other parties when required by law or necessary to protect rights, safety, and security; and
  • a successor in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate safeguards.

We do not permit service providers to use personal data for their own unrelated purposes.

8. International transfers

TOFO and its service providers may process personal data in countries other than the country where it was collected. Where required, we use recognized safeguards for cross-border transfers and take steps designed to provide an appropriate level of protection consistent with applicable law.

9. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including to provide the Services, comply with legal and accounting requirements, resolve disputes, and enforce agreements. Retention periods depend on the type of data, the relationship, customer instructions, legal requirements, and security needs. We delete or anonymize data when it is no longer required, subject to lawful exceptions and backup cycles.

10. Security

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. No system is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your credentials and using the security features available to you.

11. Your privacy rights

Depending on applicable law, you may have rights to request access to personal data, correction of inaccurate or outdated data, deletion, restriction or cessation of processing, transfer of data, objection to certain processing, withdrawal of consent, and information about automated processing. You may also have the right to complain to the relevant data-protection authority.

To make a request, email hello@tofoapp.com. We may need to verify your identity. If TOFO processes your data for one of our business customers, please contact that customer first; we will assist them as required. Rights may be limited by lawful exceptions.

12. Children

The Services are designed for businesses and are not directed to children under 18. We do not knowingly collect personal data directly from children without appropriate authorization. If you believe a child has provided personal data to us improperly, contact us so we can review and address it.

13. Changes to this policy

We may update this Privacy Policy as our Services, practices, or legal obligations change. We will post the revised policy and update the effective date. Where required, we will give additional notice of material changes.

14. Contact us

Questions, requests, or concerns about this policy may be sent to hello@tofoapp.com.

TOFO LLC
Dubai, United Arab Emirates