Privacy Policy

• Account: your name, email address and password (stored only as a secure hash), or the name and email a social sign-in (such as Google) shares with us.
• Phone number for M-Pesa: the number you pay from, the amount, the M-Pesa reference and the payment status.
• Your chats and files: the messages you send, the files you upload, and the answers, decks, documents and spreadsheets Toso makes for you.
• Your balance and activity: top-ups, prices, charges and refunds.
• Usage analytics: which pages and buttons are used, the device and browser type, and approximate location from your IP address. We use PostHog for this. On the landing page, sign-up and first-run screens we also record anonymous screen replays to find what confuses people; every text field and all text on the screen are masked, so replays do not show what you type or read.
• Error reports: technical details when something breaks, so we can fix it.

• To run your account and do the tasks you ask for (to perform our agreement with you).
• To take M-Pesa payments, keep accurate records of your balance and prevent fraud, including making sure each M-Pesa number gets the first top-up bonus only once (our agreement with you, legal obligations and our legitimate interest in preventing abuse).
• To send account emails: confirming your email, resetting your password, welcome and payment receipts.
• To understand how Toso is used and make it better (our legitimate interests). You can block analytics in your browser.

We do not sell your personal information. We do not use your chats or files for advertising.

We share information only with the services that run Toso for us:

• AI providers: to answer a request, Toso sends your message and the relevant conversation or file content through OpenRouter to the AI provider that handles it (for example Anthropic, OpenAI, Google or DeepSeek). These providers process requests on servers in other countries, including the United States.
• Payments: IntaSend and Safaricom process your M-Pesa payment.
• Hosting and storage: Vercel (the website), Railway (the app server and database) and Cloudflare (files and email routing), which may store data outside Kenya.
• Email: Resend sends account emails and receipts.
• Analytics: PostHog, on servers in the European Union.

When your information is processed outside Kenya, we rely on the safeguards the Data Protection Act allows for such transfers.

We keep your account, chats and files while your account is open, so your saved work stays available.

When you ask us to delete your account, we delete your account, chats and files. We keep payment and balance records for as long as tax and accounting law requires, then delete them.

Analytics and error reports are kept only as long as they help us run and improve Toso.

Under the Data Protection Act, 2019 you have the right to:

• be told how your personal information is used;
• get a copy of the personal information we hold about you;
• have false or misleading information corrected or deleted;
• object to processing, including processing for analytics;
• receive your information in a portable format;
• ask us to delete your account and personal information.

To use any of these rights, including deletion, email hello@tosoai.org from the address on your account. We may ask you to confirm it is you before acting.

If you are unhappy with how we handle your information, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

Data is sent over encrypted connections, passwords are stored only as hashes, and access to production systems is limited. We never ask for your M-Pesa PIN and never see it. No system is perfectly secure; tell us at once if you think your account has been misused.

Toso is for people aged 18 and over. We do not knowingly collect information from children. If you think a child has given us information, contact us and we will delete it.

We date every version of this policy and tell you about material changes before they take effect.