How we handle your data

If you use toro4n without signing in, your models never leave your browser and we store nothing about you. If you sign in, we store your email address and the models you choose to save online. Everything we store stays within the EU.

Who is responsible

toro4n is run by Lantz Hedström Consulting AB (company registration number 559215-6557), Fiskarfjärdsstranden 36, 127 41 Skärholmen, Sweden. We're the data controller for the personal data described on this page. You can send any request about your data to this postal address or to hello@toro4n.com.

If you don't sign in

Your models stay in your browser and in any files you save. Nothing about them is sent to our server, no cookie is set, and we store nothing about you. Signed in or not, there are no analytics, no tracking, and no ads.

If you sign in

We store the following:

• Your email address and the time your account was created. We use your email address to sign you in, to send you sign-in codes, and to show who has access when a model is shared. If you continue with Google, Google gives us your email address and confirms it's yours; we ask for nothing else from your Google account and store nothing else from it.
• Your sign-ins: for each browser you're signed in on, a hash (an irreversibly scrambled form) of the key that keeps you signed in, plus when you signed in and when the sign-in was last extended. Signing out of a browser deletes its sign-in.
• The models you save online: their name and everything in them, when they were created and last changed, and who changed them. A model can be opened only by you, the people you share it with, and AI assistants that any of you have connected. We can technically access models stored online, but we don't open or read them unless you ask us to or the law requires it. Models you don't save online stay in your browser.
• Earlier versions of those models, which you can view and restore. With each version, we store the time of its last change and the email addresses of the people who changed the model since the previous version.
• Your folders: the names of the folders you create in My models and which online models you've put in each one. Only you can see your folders.
• Who you share a model with: the email addresses you invite, and whether each person can edit or only view. Each person you invite receives one email letting them know you've shared a model with them, so please invite only people who expect to hear from you.
• AI assistants you connect: the name each assistant gives itself, the web addresses we send you back to after you allow it, when you allowed it, when it was last used, and hashes of the keys it uses. An assistant you allow works with your permissions: it can view your online models and the models shared with you, create models, and change the ones you can edit. Whatever it reads goes to the company behind the assistant (for example, Anthropic for Claude or OpenAI for ChatGPT) and is handled under that company's terms. We never send anything to that company except in answer to the assistant's requests. You can disconnect an assistant under Account.
• Abuse-prevention counters: how many sign-in codes were recently requested, how many sign-in attempts were made, and how many invitations were sent. They're stored under a hash of the email address or IP address, never the address itself, and they're deleted within two days.

Your account has no password, and we don't store your IP address, details about your browser, or how you use the app. When several people have the same model open, they see each other's selections and pointers live; we relay those but never store them.

If you buy a plan

Paid plans are sold through Paddle.com Market Ltd (Paddle), our reseller, which is the seller of record and handles the payment, VAT, and invoices. You enter your card or other payment details, billing address, and any VAT number on Paddle's pages; they go to Paddle and never reach us. If your company pays by invoice, the company details you enter in toro4n are passed straight on to Paddle and not stored by us. Paddle processes them under its own privacy notice.

We store which plan you have, whether it's billed monthly or yearly, whether it's paid by invoice, its status, when a payment became overdue, the number of seats, when it renews or ends, Paddle's identifiers for the subscription and for you as a customer, and, for a Team, the email addresses you give seats to. We use them only to give you and your team the plan you've paid for. When you delete your account, we cancel your plan at Paddle and delete these records; Paddle keeps the records of payments and invoices that the law requires it to keep.

If you have a seat in a Team, the models you save online while you have it belong to the team: the person who manages the Team can open, share, and delete them, and if your seat is removed or you delete your account, they move to that person. Models you saved before you had the seat stay yours.

Why we store your data, and on what legal basis

We store your email address, your sign-ins, your online models and their earlier versions, your folders, your sharing settings, the AI assistants you connect, and the details of any plan you buy because we need them to provide the service you signed in for (GDPR Article 6.1 b). We keep the abuse-prevention counters on the basis of our legitimate interest in protecting the service and the people whose addresses could otherwise receive unwanted email (Article 6.1 f). We don't use your data for anything else, we never sell it, and we share it only as this page describes.

Cookies

When you sign in, we set a cookie called __Host-toro4n_session. It keeps you signed in, can't be read by scripts, and is sent only to toro4n.com. Signing in doesn't work without it. While you're signing in with Google, a second cookie, __Host-toro4n_google, links Google's answer to your browser. It's deleted as soon as Google answers, or after ten minutes at the latest. We don't use any other cookies.

Where your data is stored

toro4n runs on Cloudflare, which stores your data for us under its data processing agreement, in data centers within the EU. Sign-in codes and sharing notifications are sent from hello@toro4n.com through Cloudflare's email service, which receives each recipient's address and the message in order to deliver it. If you continue with Google, you sign in on Google's page in a separate window, and Google handles that step under Google's privacy policy. Our pages never load anything from Google. Everything is sent over encrypted connections, and Cloudflare encrypts everything it stores.

How long we keep your data

• A sign-in code can be used for 10 minutes and is then deleted.
• A sign-in stops working 30 days after it was last extended and is then deleted.
• A model saved online is stored until you delete it. A deleted model moves to “Recently deleted” in “My models”, where you can restore it for 30 days. After that, it's deleted for good. You can also delete it for good right away.
• A folder is stored until you delete it or delete your account.
• Earlier versions: every version from the last 24 hours, the last one of each day for the past 30 days, and the last one of each week before that, up to 100 per model. We delete the others. A model's versions are deleted when the model is deleted for good.
• An AI assistant's access is stored until you disconnect the assistant, or until 30 days after it last used toro4n, whichever comes first.
• Your account is stored until you delete it.
• In case something goes wrong, we keep backups of every account and every model saved online in separate Cloudflare storage within the EU. Models are backed up shortly after they change, and accounts every night. Each backup is deleted after 35 days, so anything that's deleted for good can remain in backups for up to 35 days, and in Cloudflare's recovery data for up to 30 days. After that, it can't be restored.

Your choices and rights

• Delete. You can delete an online model in “My models” (and delete it for good under “Recently deleted”), and delete your whole account under Account in the app. Deleting your account removes your email address, your sign-ins, your folders, every online model you own (Team models move to the person who manages the Team), your access to models others have shared with you, and every AI assistant's access.
• Take your data with you. You can save any model as a file, or copy an online model to your browser with “Copy to this device”.
• Ask. You have the right to know what is stored about you, to have it corrected or deleted, to have its use restricted, and to object to its use. To exercise these rights, email hello@toro4n.com or write to the address above.
• Complain. If you believe your data is being handled improperly, you can file a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

More detail

IT and security staff can find a detailed technical description in the app: click the help button (?) and open the Security tab.