Privacy Policy

Last updated: January 15, 2025

At Tomas Agent, we are committed to protecting your privacy and ensuring transparency about how we collect, use, and protect your personal information.

1. Introduction

This Privacy Policy explains how Tomas Agent ("we," "our," or "us") collects, uses, discloses, and safeguards your information when you use our AI agent platform and services (collectively, the "Service"). By using our Service, you agree to the collection and use of information in accordance with this policy.

We are committed to transparency and compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Information We Collect

2.1 Account Information

When you create an account or register for our Service, we collect information such as your name, email address, password (encrypted), and any other information you choose to provide.

2.2 Usage Data

We automatically collect information about how you interact with our Service, including:

  • AI conversation history and interactions
  • Goals, execution plans, and tasks you create
  • Knowledge base entries and insights
  • Feature usage and preferences
  • Device information, browser type, and IP address
  • Access times and dates

2.3 Integration Data

When you connect third-party services to Tomas Agent, we collect and process data necessary for integration functionality:

  • Shopify: Store information, product data, order information, and analytics data you authorize us to access
  • Google Search Console: SEO performance data, search analytics, and property information
  • Other integrations: Data as authorized by you for each connected service

2.4 Payment Information

If you subscribe to a paid plan, our payment processors collect billing information, including credit card details. We do not store full credit card information on our servers.

2.5 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage patterns, and improve our Service. See Section 8 for more details.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, maintain, and improve our AI agent platform and related services
  • AI Functionality: To process your requests, execute tasks, manage goals, and generate insights through our AI systems
  • Integration Management: To connect with and manage your authorized third-party services and tools
  • Communication: To send you service-related notifications, updates, and respond to your inquiries
  • Personalization: To customize your experience and provide relevant features and content
  • Analytics: To analyze usage patterns, monitor performance, and improve our Service
  • Security: To detect, prevent, and address technical issues, fraud, or security threats
  • Legal Compliance: To comply with legal obligations and enforce our terms of service

4. Third-Party Integrations and Services

Tomas Agent integrates with various third-party services to extend functionality. When you connect these services:

  • We access only the data you explicitly authorize
  • Data is processed according to each service's privacy policies
  • You can revoke access at any time through your account settings
  • We use industry-standard OAuth and API security protocols

Third-Party Services We Use:

  • Vercel Analytics: Website analytics and performance monitoring (see Vercel's privacy policy)
  • Payment Processors: Secure payment processing for subscriptions
  • Cloud Infrastructure: Secure hosting and data storage services

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: With trusted third-party service providers who assist in operating our Service, subject to confidentiality agreements
  • Legal Requirements: When required by law, court order, or governmental authority
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to users
  • Protection of Rights: To protect our rights, property, or safety, or that of our users or others
  • With Your Consent: When you explicitly authorize us to share information

6. Security Measures

We implement industry-standard security measures to protect your information:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Secure authentication and access controls
  • Regular security audits and vulnerability assessments
  • Limited access to personal data on a need-to-know basis
  • Secure cloud infrastructure with reputable providers
  • Regular backups and disaster recovery procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request access to your personal information we hold
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal information (subject to legal retention requirements)
  • Portability: Request a copy of your data in a structured, machine-readable format
  • Opt-Out: Opt out of certain data processing activities, including marketing communications
  • Withdraw Consent: Withdraw consent for data processing where consent is the legal basis
  • Object to Processing: Object to certain types of data processing

To exercise these rights, please contact us at privacy@tomasxyz.com. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

Types of Cookies We Use:

  • Essential Cookies: Required for basic functionality and security
  • Analytics Cookies: Help us understand how you use our Service (e.g., Vercel Analytics)
  • Preference Cookies: Remember your settings and preferences
  • Functional Cookies: Enable enhanced features and personalization

You can control cookies through your browser settings. However, disabling certain cookies may limit functionality of our Service.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

  • Account data: Retained while your account is active and for a reasonable period after account closure
  • Usage data: Retained for analytics and service improvement purposes
  • Integration data: Retained according to the terms of each integration
  • Legal requirements: Some data may be retained longer to comply with legal obligations, resolve disputes, or enforce agreements

When you delete your account, we will delete or anonymize your personal information, except where retention is required by law.

10. Children's Privacy

Tomas Agent is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information, including standard contractual clauses and other mechanisms approved by data protection authorities.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our Service after such changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@tomasxyz.com

Website: https://tomasxyz.com