Privacy

We value privacy and collect only what’s needed to operate the service. This policy explains what we collect, how we use it, how long we keep it, and your choices.

What we collect

• Account data: email, password (hashed), and basic profile details you optionally provide.
• Service data: usage events (e.g., number of scans, token usage) needed for limits, billing, fraud prevention, and support.
• Content you submit for analysis: uploaded files, pasted text, or URLs. Files are processed to produce results.
• Technical data: server logs, error traces, and security telemetry used to keep the service reliable and secure. These are rotated and purged on a schedule.

Payments

We use Stripe to process payments. We do not store full card numbers on our servers. Stripe acts as an independent controller for payment data; their privacy policy applies to your payment information.

• Stripe Privacy Policy: https://stripe.com/privacy
• Stripe Services Agreement: https://stripe.com/legal

We store minimal references such as Stripe customer IDs, price IDs, subscription IDs, and payment intent/session IDs to manage your account and billing.

Affiliate program data

• Referral attribution data: when someone uses an affiliate link, we may store referral-click records such as the affiliate code, landing path, referrer host or URL, hashed technical identifiers, and attribution timestamps.
• Affiliate ledger data: if an attributed customer later makes a qualifying purchase, we store the affiliate commission, payout status, payout references, and related reconciliation records needed for fraud prevention, accounting, customer support, and disputes.
• Dashboard visibility: affiliates see summarized performance and commission data relevant to their own account. Toren admins may review the more detailed affiliate ledger when reconciliation or dispute handling is required.

How we use data

• Operate and secure the service, enforce limits, and prevent abuse.
• Provide support and respond to inquiries.
• Improve features and reliability.
• Comply with legal obligations (tax, accounting, fraud prevention).

Data retention

• Scan results: Your past scan results (metadata and derived outputs) are retained for up to 5 days, after which they are automatically deleted. Original uploaded files are deleted after processing and are not available for preview later.
• Usage and billing: Usage and billing records are retained as long as necessary for accounting, tax, fraud prevention, and legal compliance.
• Affiliate records: Referral-click records, affiliate commissions, payout history, and dispute-related reconciliation records may be retained as needed for accounting, fraud review, abuse prevention, payout support, and legal compliance.
• Support correspondence: Retained as needed to resolve issues and maintain service quality.

Your choices

• Access and update your account information from the Account page.
• Download, save, or screenshot your results before the retention window ends.
• Visit the account page to delete your account. Some records may be retained where required by law.

Contact

Questions about privacy? Reach us via the contact form.