Your AI conversations are valuable intellectual assets. Toffee is designed to protect them through local-first processing, enterprise-grade encryption, transparent data practices, and user-controlled privacy.
This Privacy Policy explains how Toffee collects, processes, stores, protects, and manages user information. We are deeply committed to transparency, user ownership, and compliance with global privacy regulations. This policy covers all Toffee products including the Browser Extension, Web Dashboard, Cloud Services, APIs, and future mobile applications.
Our core philosophy dictates that you own your AI data.
Name, email address, profile photo (if authenticated via OAuth), organization, and subscription tier.
Browser type, device OS, extension version, anonymized IP for security, and crash logs.
Feature usage, settings, storage usage, token analytics, and general performance metrics.
Subscription status, invoices, payment references, and billing history (processed securely via Stripe).
The following remains strictly on your device unless you explicitly opt into Cloud Sync:
Local processing is always our default.
The following data interacts with our secure cloud servers:
Our processing pipeline includes capture, semantic compression, entity extraction, token optimization, and bundle generation.
Important: Raw conversations never leave your device unless you specifically utilize a server-side compression API endpoint. Even then, processing is temporary, and raw transcripts are immediately discarded from memory after the `.toffee` bundle is generated.
Local data is stored in your browser's IndexedDB. Cloud data is stored securely in PostgreSQL and AWS S3 with strict data residency controls.
All data in transit is protected using TLS 1.3. Data at rest is encrypted using AES-256-GCM. For users with Cloud Sync enabled, we employ End-to-End Encryption with secure key management, meaning even Toffee engineers cannot read your synced conversations.
Local-Only Modeis one of Toffee's strongest differentiators. It requires no account, executes no cloud uploads, and provides complete privacy.
Cloud Sync is strictly an optional feature. It requires explicit user consent to synchronize `.toffee` bundles across multiple devices securely.
We distinguish between product analytics (performance, crash reports) and security analytics (abuse detection). We allow users to opt-out of product analytics directly from their dashboard.
We use essential cookies for authentication and session management. We do not use third-party tracking cookies for targeted advertising.
Toffee utilizes trusted third-party providers:
Under GDPR and CCPA, you have the right to access, correct, export, restrict, or permanently delete your data. You may withdraw consent at any time. Non-discrimination rules apply, meaning you will not be penalized for exercising your privacy rights.
You can instantly delete local data via the extension settings. Account deletion will permanently purge your data from our cloud servers within 30 days (including backups).
Toffee embraces data portability. You can export your entire library as a ZIP archive of `.toffee` files or raw JSON at any time.
Our architecture employs Zero Trust principles, rate limiting, continuous monitoring, and secure development lifecycles.
For privacy-related requests, data protection inquiries, or to contact our DPO, please email: abhaydonde2007@gmail.com.
Your AI knowledge belongs to you. Toffee is committed to protecting it through transparency, privacy-first engineering, and industry-leading security practices.
Designed & Developed by Abhay Sachin Donde