Privacy Policy

What we hold

We hold only what the service needs to run. We never hold card details — payment happens on Stripe’s own page and only a customer reference and subscription state come back to us.

Your account

Name, email address, whether the address is confirmed, and a hash of your password. We never store the password itself.

Signing in

Your IP address and browser user agent against each session, and one-time values for email confirmation and password resets. Sessions expire after 7 days.

Abuse prevention

A counter keyed on your IP address and the path you called, so that sign-up and email endpoints cannot be flooded. Deleted after 1 hour.

Your organisation

Organisation name, language, time zone, billing currency, and the reference to your Stripe customer record.

Your diagnoses

The URLs you asked us to diagnose, the scores and findings, a digest of each page (see “What we send to AI”), and the suggested industries for each site. We keep these for the life of your account because tracking change over time is the point of the service.

AI live tests and comparisons

The questions you enter; your company’s name and domain and your competitors’ names, aliases and domains; each AI’s answer (up to 20,000 characters each) and the sources it cited; and the suggestions we generate from them. We keep these for the life of your account.

Billing

An append-only ledger of how your monthly allowance and any Extra allowance are granted and used, and your subscription state.

Records

An audit log of actions taken in your account, and any data export or deletion requests you make.

What we send to AI

What we send, and to whom, depends on the feature. No feature sends your account details (such as your password or email address) or other customers’ data.

Page AI analysis: we send a digest of the diagnosed page and its scores to Anthropic. The digest is the title and meta description, up to 1,500 characters of the main body, up to 12 headings, up to 12 navigation labels, and the list of structured-data types. We do not send the full HTML.

Site-wide AI analysis: we send the site’s URL and the name you gave it, the aggregated diagnosis results, and, for each of the main pages (8 to 24 pages), its title, description, headings and up to 1,500 characters of its main body, to Anthropic.

Suggested industries: for sites whose industry is not yet set, we send the home page’s title, description, headings, navigation labels and up to 1,500 characters of its main body to Anthropic, without waiting for you to ask, to suggest likely industries.

AI live test: we send the questions you enter to the AI models you choose (OpenAI, Anthropic, Google and Perplexity). If you turn on web search, each provider’s web search is used. We do not send your company’s name, your domain or competitors’ names. We store the answers and the sources they cite.

AI competitor comparison: we send the questions you register to the same providers as the AI live test. To summarise the results and suggest what to add to your site, we send Anthropic the questions, your company’s name and domain, competitors’ names, each AI’s answers, the relevant passages of the cited pages, and excerpts from your own pages. To suggest entries for the form, we send Anthropic your home page’s title, description, headings and navigation labels, and the competitors’ names and domains. We fetch cited pages with our own equipment and delete their text after 31 days.

How each provider handles the data we send (for example, how long it is kept and what it may be used for) is governed by that provider’s terms.

We can diagnose only public pages that can be viewed without signing in. The service has no way to fetch pages using cookies, passwords or other credentials.

Who processes data on our behalf

These are the only services we transmit data to. Where a provider is outside Japan, your data leaves Japan.

How long we keep it

Sessions expire after 7 days. Abuse-prevention counters are deleted after 1 hour. Application logs are kept for 7 days. Diagnoses, reports and the billing ledger are kept for the life of your account.

When you delete your own account, you can no longer sign in and we erase your sign-in details (such as your name and email address) straight away; the sites, diagnoses and reports belong to the organization and stay with it. When an owner deletes an organization, its members can no longer use it, and we erase its sites, diagnoses and AI analyses, and the profile of the owner who deleted it, 30 days later. Until then the deletion can be cancelled by replying to the confirmation email. Records we must keep by law (such as invoices), transaction records and the log of actions taken in the account are kept for as long as required. We may also use statistics derived from diagnoses and from the information registered for sites (such as the industry), in a form that identifies no user or site, to improve and study the service and to publish findings.

Getting your data out, or deleted

You can request an export of your data, or its deletion, from Settings. Both are recorded so you can see the status of a request.

You can also write to support@tooru.ai. If you are in the EU or the UK you have the rights the GDPR gives you, including access, rectification, erasure, restriction, portability and objection.

Cookies

The app (app.tooru.ai) uses cookies only for these purposes. Signing in: keeping you signed in, short-lived ones while you complete two-factor authentication, a passkey or a Google or Microsoft sign-in, and a device marker used to tell you when a new device signs in. Remembering your choices: display language, the organization you last opened, and the project you selected. Signing up: your browser’s time zone and whether you came from an invitation link (both removed after 7 days). The sign-in cookies are HttpOnly and Secure in production. All are SameSite=Lax and limited to app.tooru.ai, so they are never sent to tooru.ai. This site (tooru.ai) uses cookies from the tags loaded through Google Tag Manager (Google Analytics, Google Ads and Microsoft Clarity) to measure visits, see how pages are used and measure the results of our advertising. Visitors from the EEA, the UK and Switzerland get these cookies only after agreeing in the banner, and can change their choice at any time from “Cookie settings” at the bottom of the page; the choice is kept in your browser’s storage, not in a cookie. You can also turn Google Analytics off with Google’s opt-out browser add-on (tools.google.com/dlpage/gaoptout) or your browser’s settings.

The app (app.tooru.ai) uses no analytics or advertising cookies (its visit measurement, Vercel Web Analytics, works without cookies). If that changes, this page changes first.

Changes to this policy

When we change this document, we will announce the change and its effective date within the service or by email before it takes effect.