Privacy Policy

This Privacy Policy explains how Appa Digital LLC ("Company," "we," "us," or "our"), operating as TonoDesk, collects, uses, and protects information when you visit tonodesk.com or use the TonoDesk service (the "Service").

What we collect

Account information

• Email address (required to sign in)
• Display name (if you set one)
• Tenant, brand, account, and campaign names you author
• Billing information (processed by Stripe; we never see or store card numbers)

Configuration data

• Monitor search targets (keywords, subreddits, X handles) you configure
• Keyword groups and their purposes
• Reply drafts you edit or approve

Third-party public content

TonoDesk collects public posts from social platforms and forums (X, Reddit, Hacker News, Product Hunt, Indie Hackers) matching search criteria you have configured. We retain each collected item with its public author handle, timestamp, and text, so your operator can review, score, and respond.

• We collect only publicly visible content.
• We never scrape private DMs, private accounts, or gated content.
• Items are retained while your subscription is active + 30 days after cancellation, then permanently deleted.

Usage telemetry (first-party analytics)

We fire first-party analytics events to understand product usage: page views, feature opens, inbox actions (open, view, reply, dismiss), draft rotations, and errors. Events are associated with your user ID and tenant ID. We do not sell, share with ad networks, or use this data for targeting.

Details of what fields each event carries are in our Cookie Policy §3 (First-party analytics).

What we do NOT do

• We do not sell your data.
• We do not share your data with ad networks.
• We do not embed third-party trackers (no Google Analytics, no Facebook Pixel, no Segment, no PostHog, no Amplitude, no Mixpanel).
• We do not auto-post, auto-DM, or auto-reply on your behalf. Every reply requires a human click.
• We do not train third-party AI models on your data. The AI-reply feature uses Anthropic's API with data-processing terms that prohibit using submitted content for model training.

How AI-drafted replies work

When you use the reply-suggester, TonoDesk sends the public source post and (optionally) your campaign's brand-voice anchor to Anthropic's Claude API. Anthropic's enterprise terms prohibit using API traffic for model training. The drafted reply is stored with your monitor item and shown to you for edit + approval. TonoDesk NEVER auto-sends.

How we protect your data

• Authentication via Supabase (Beatura's shared JWKS pool). Passwords are never stored by us — they live in Supabase's salted hash.
• Data at rest is encrypted in our database provider (Neon Postgres).
• Data in transit uses TLS.
• Access to production data is limited to founders on a need-to-debug basis, audited.

Your rights

Whatever jurisdiction you're in, you have the right to:

• Access the data we hold about you
• Export your data (CSV via the settings page, or by request)
• Delete your data (in-product cancellation triggers a 30-day retention window, then deletion)
• Correct inaccurate data
• Object to processing (email us; we will comply unless legally required to retain)

Requests: email privacy@beatura.com. We respond within 30 days.

International data

TonoDesk data lives on Neon Postgres (US regions) and on Vercel (US edge nodes). If you are in a jurisdiction that restricts international transfers, please email us before signing up so we can confirm whether TonoDesk fits your compliance requirements.

Children

TonoDesk is not intended for anyone under 16. We do not knowingly collect data from minors. If you believe a minor has signed up, email privacy@beatura.com and we will delete the account.

Changes to this policy

When we change this policy materially, we'll email active paying customers and post a notice in-product for 30 days. The "Last updated" date above reflects the most recent revision.

Contact

Questions: privacy@beatura.com.