Privacy

We value privacy and collect only what’s needed to operate the service. This policy explains what we collect, how we use it, how long we keep it, and your choices.

What we collect

• Account data: email, password (hashed), and basic profile details you optionally provide.
• Service data: usage events (e.g., number of scans, token usage) needed for limits, billing, fraud prevention, and support.
• Content you submit for analysis: uploaded files, pasted text, or URLs. Files are processed to produce results.
• Technical data: server logs, error traces, and security telemetry used to keep the service reliable and secure. These are rotated and purged on a schedule.

Payments

We use Stripe to process payments. We do not store full card numbers on our servers. Stripe acts as an independent controller for payment data; their privacy policy applies to your payment information.

• Stripe Privacy Policy: https://stripe.com/privacy
• Stripe Services Agreement: https://stripe.com/legal

We store minimal references such as Stripe customer IDs, price IDs, subscription IDs, and payment intent/session IDs to manage your account and billing.

Advertising and analytics

We advertise Toren on third-party platforms. To measure whether those ads work, we use the Reddit Pixel and Reddit’s Conversions API. These record events such as visiting a page, running a scan, creating an account, starting checkout, and completing a purchase, together with a cookie or similar identifier.

• We do not send Reddit the contents of your scans, your uploaded files, your pasted text, or your scan results.
• Where we share an email address for conversion matching, it is hashed (SHA-256) before it leaves our servers. We never send it in plain text.
• Under some US state privacy laws this activity may be considered “sharing” or “targeted advertising.” We do not sell your personal information for money.
• Reddit’s handling of this data is governed by its own policy: Reddit Privacy Policy.

Your advertising choices

• Opt out at any time: use the button below. This sets a preference on this browser and stops advertising measurement from loading.
• Global Privacy Control: if your browser or extension sends a GPC signal, we honor it automatically as an opt-out. You do not need to do anything else.
• Region: we do not run advertising measurement for visitors in the EEA, UK, or Switzerland.

Affiliate program data

• Referral attribution data: when someone uses an affiliate link, we may store referral-click records such as the affiliate code, landing path, referrer host or URL, hashed technical identifiers, and attribution timestamps.
• Affiliate ledger data: if an attributed customer later makes a qualifying purchase, we store the affiliate commission, payout status, payout references, and related reconciliation records needed for fraud prevention, accounting, customer support, and disputes.
• Dashboard visibility: affiliates see summarized performance and commission data relevant to their own account. Toren admins may review the more detailed affiliate ledger when reconciliation or dispute handling is required.

How we use data

• Operate and secure the service, enforce limits, and prevent abuse.
• Provide support and respond to inquiries.
• Improve features and reliability.
• Comply with legal obligations (tax, accounting, fraud prevention).

Data retention

• Scan results: Your past scan results (metadata and derived outputs) are retained for up to 5 days, after which they are automatically deleted. Original uploaded files are deleted after processing and are not available for preview later.
• Usage and billing: Usage and billing records are retained as long as necessary for accounting, tax, fraud prevention, and legal compliance.
• Affiliate records: Referral-click records, affiliate commissions, payout history, and dispute-related reconciliation records may be retained as needed for accounting, fraud review, abuse prevention, payout support, and legal compliance.
• Support correspondence: Retained as needed to resolve issues and maintain service quality.

Your choices

• Access and update your account information from the Account page.
• Download, save, or screenshot your results before the retention window ends.
• Visit the account page to delete your account. Some records may be retained where required by law.

Contact

Questions about privacy? Reach us via the contact form.