Privacy Policy

When you create a Tollcast account we ask for your name, email address, and a password. The password is hashed at rest by the better-auth library; we do not store the cleartext. Inside the app we ask for the creator handle per platform, the primary platform you lead with, and the timezone we should use when scheduling the Monday brief. Nothing about your account is sold to a third party.

Voice training is optional and lives entirely on the page at /voice: posts, captions, or audio transcriptions you paste in. We use those inputs to derive a voice profile (cadence, phrasing, banned phrases, signature openers). The posts never leave Tollcast. We do not train a third-party model on them.

Tollcast is a thin service. Three processors handle creator data in any meaningful way, and each is mapped to a single job.

• better-auth — sign-in, sessions, and account state. Holds email and authentication credentials only.
• stripe-billing — subscription billing, invoices, and receipts. Card details are handled by Stripe directly; Tollcast never stores card numbers.
• Polsia AI proxy— routes model calls for draft generation. Receives the mention signal and the voice-profile parameters needed for the response; the proxy is documented as not training on our traffic. We make no claim about a third-party provider's transient caching — if a route is sensitive, treat the system as best-effort and never rely on it for PII persistence.

Hosting, storage, and transport are provided by Polsia's managed runtime. Traffic is HTTPS. We do not currently claim disk-encryption-at-rest — that depends on the underlying host and is not part of this product's contract. If you need verified at-rest encryption for a regulated workload, write to us first.

Every generated reply is a draft. A draft lives in the queue at /queue until you approve, edit, or reject it. Nothing ships without you. Drafts you don't approve are kept for the Monday brief and then aged out.

Mentions you bring in via /draft or /inboxare scored against the voice profile and the queue. The voice-profile parameters used to draft a reply are not the user's PII — they describe phrasing, cadence, and tone, not the creator's name or email.

We do not train Tollcast-owned models on your posts. The Polsia AI proxy is documented as not training on Tollcast traffic. We make no claim about incidental third-party caching that may happen at a model provider; if that's a concern, treat the voice-training inputs you paste at /voice as material you do not want cached elsewhere.

We do not use creator email, name, or other contact info beyond delivering the Monday brief, sign-in alerts, and product announcements. We do not sell that data.

Account data is deleted within 30 days of an account-deletion request. Backup snapshots are aged out within the same window. Voice-training samples, mention logs, and unused drafts are removed in the same cascade. See Retention & delete for the per-data-class table.

Tollcast is a US-hosted product. We honor access, correction, and deletion requests. The fastest path is the in-app delete at /profile; for export or correction, write to tollcast@polsia.app and we respond within two business days.

COPPA / GDPR / CCPA: Tollcast is a B2B creator tool. We don't knowingly collect data from anyone under 16. Where GDPR or CCPA applies to a given visitor, the same access/correction/delete rights apply and requests are honored in the same window.