Privacy Policy

This Privacy Policy describes how Tochen.AI (“Tochen”, “we”, “us”) collects, uses, stores, and protects information when you visit tochen.ai, use our web application at app.tochen.ai, or use any product on our platform—including Google Reviews automation and other business automations we may offer.

By using our services, you agree to this policy. If you do not agree, please do not use the services.

This policy applies to businesses worldwide of every size that use Tochen.AI, including administrators and authorized users who connect a Google Business Profile or other third-party accounts on behalf of a business.

• Account information: name, email address, business name, billing details, and preferences you provide when registering or subscribing.
• Google Business data: when you connect Google, we access data you authorize through Google OAuth—such as business locations, reviews, ratings, review text, and metadata needed to draft and publish replies on your behalf.
• Usage and technical data: log data, device/browser type, IP address, pages visited, and product usage events to operate, secure, and improve the service.
• Communications: messages you send to support at info@tochen.ai.

• Provide, maintain, and improve Tochen.AI products, including automated review replies and related automations.
• Authenticate users, process subscriptions, and send service-related notices.
• Generate AI-assisted reply drafts tailored to your business settings and publish replies only according to your configuration (automatic or manual approval).
• Monitor security, prevent abuse, and comply with legal obligations.
• Respond to support requests and product feedback.

We do not sell your personal information or Google user data to third parties.

Our Google Reviews product uses Google APIs (including Google Business Profile APIs) only to help your business manage Google reviews: reading reviews you authorize, generating suggested responses, and publishing replies when you enable that behavior. We do not use Google user data for unrelated advertising, data brokerage, or building unrelated consumer profiles.

Tochen.AI's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

• We access Google review data solely to provide review management and automated or assisted replies on your behalf.
• Human access to Google user data is limited to support, security, legal compliance, or with your explicit permission.
• You may disconnect Google at any time through your account or Google account permissions; we stop new API access after disconnection, subject to retention described below.
• For Google's requirements, see the Google API Services User Data Policy at developers.google.com/terms/api-services-user-data-policy.

We share information only as needed to run the service:

• Infrastructure and subprocessors that host, process, or support the platform under contractual confidentiality and security obligations.
• Payment processors for billing (they receive payment data directly where applicable).
• Google, when you authorize API access, strictly for the connected product features.
• Authorities when required by law or to protect rights, safety, and security.

We do not sell or rent Google API user data or account data to marketers, data brokers, or unrelated third parties.

We use industry-standard safeguards such as encryption in transit, access controls, and least-privilege practices. No method of transmission or storage is 100% secure; we work to reduce risk and investigate incidents promptly.

We retain information while your account is active and as needed for billing, dispute resolution, security logs, and legal compliance. You may request deletion of account data subject to applicable law and legitimate business needs (for example, completed invoices).

• Update account details in the app or by contacting info@tochen.ai.
• Revoke Google access via Google account security settings or by disconnecting in Tochen.AI.
• Request access, correction, or deletion of personal data where applicable law provides those rights.
• Opt out of non-essential marketing emails using unsubscribe links or by contacting us.

Tochen.AI serves businesses globally. Your data may be processed in countries where we or our subprocessors operate. We take steps designed to protect data regardless of location.

Our services are intended for businesses and are not directed to children under 16. We do not knowingly collect children's personal data.

We may update this Privacy Policy from time to time. We will post the revised version on tochen.ai/privacy (and /en/privacy) with an updated effective date. Material changes may be communicated by email or in-product notice where appropriate.

Questions about privacy or Google user data: info@tochen.ai.