Privacy Policy

Last updated: June 30, 2026

This Privacy Policy explains how Toastly ("we," "us") collects, uses, and protects your information when you use Toastly (the "Service").

1. Information we collect

• Account information — your email address, used to sign you in via a magic link.
• Speech content — the answers you provide (names, memories, traits, wishes) and the speeches we generate for you.
• Payment information — processed by Stripe. We do not store your card details; we receive a payment confirmation and a transaction reference.
• Technical & usage data — IP address, request timestamps, and generation counts, used for security, abuse prevention, and rate limiting.
• Local storage — we store your in‑progress draft and sign‑in session in your browser so you can return to it. We do not use third‑party advertising or tracking cookies.

2. How we use your information

• To provide the Service — generate, save, edit, and deliver your speech.
• To process your one‑time purchase and provide receipts.
• To secure the Service — detect abuse, enforce rate limits, and control costs.
• To communicate with you about your account or purchase.

3. AI generation

To create your speech, the inputs you provide are sent to our AI provider, Anthropic, via its API. Anthropic does not use API inputs or outputs to train its models. We send only what is needed to generate your speech.

4. Service providers (subprocessors)

We share data only with providers that help us run the Service:

• Supabase — database & authentication. Privacy
• Stripe — payment processing. Privacy
• Anthropic — AI text generation. Privacy
• Vercel — hosting. Privacy

We do not sell your personal information.

5. Data retention

We keep your account and speech data while your account is active and for up to 24 months after your last activity, unless you delete it sooner. Security and request logs (e.g., IP and usage records) are kept for up to 90 days. Payment records are retained as required by law (typically up to 7 years for tax and accounting purposes).

6. Your rights

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. You can delete your speeches from within the app, or email getrecallapp@gmail.com and we'll respond as required by applicable law.

7. Security

We protect data with encryption in transit, access controls, server‑side authorization, and rate limiting. No system is perfectly secure, but we work to safeguard your information.

8. International transfers

Our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for international transfers.

9. Children

Toastly is not intended for anyone under 16, and we do not knowingly collect data from children.

10. Changes

We may update this policy. We'll post the new date above and, for material changes, take reasonable steps to notify you.

11. Contact

Questions about this policy or your data? Email getrecallapp@gmail.com.