Privacy policy

Last updated: October 17, 2026

Tonoman Cloud is run by Axiplex LLC ("Tonoman", "we"). This policy says what we keep when your organization uses Tonoman Cloud (cloud.tonoman.com and the agents it runs) or visits tonoman.com, why we keep it, who else handles it, and how to have it deleted. The open-source runtime, run on your own compute, sends us nothing.

What we keep, and why

• Your account. Your name and email address, to sign you in (we email you a sign-in link; there is no password) and to tell you about your account.
• Your organization. Its name, its members and their roles, its agents and their settings — so the right people can manage the right agents.
• Conversations and files. The messages and files people send an agent in Slack, Telegram or another connected channel, and what the agent answers — so the agent can do the work asked of it. An agent's long-term memory (its "brain") is a git repository your organization chooses.
• Connections. The keys and sign-in tokens for services your organization connects (for example a chat workspace, a calendar or a YouTube channel), kept encrypted and used only for the agent's work in that service.
• Usage. What each agent did and how much — turns, minutes of audio, website edits — to run the service, bill it and keep it healthy.
• Billing. Your plan and invoices. Card details are held by our payment processor, Stripe; we never see the full number.

The AI model

Every agent answers on your own ChatGPT or Claude subscription. To answer, the content of a conversation is sent to that provider (OpenAI or Anthropic) under your organization's account and its terms. We do not resell a model and do not send your content to any other AI provider.

What we never do

• We do not sell your data or share it for advertising.
• We do not use your conversations, files or connected data to train any AI model.
• tonoman.com sets no tracking or advertising cookies. The Hub uses cookies only to keep you signed in.

Google and YouTube

When an admin connects your organization's YouTube channel, Tonoman Cloud asks Google for two permissions:

• Upload videos (youtube.upload): to put a video an admin sends the agent onto your channel, at their request.
• See your channel (youtube.readonly): to show which channel is connected and to check a video's privacy setting after upload.

We use this access only to do what your organization's admins ask, and for nothing else. Videos pass from your chat workspace to YouTube without being kept by us; we keep only the video's link, the lesson it was put on, and the connection's tokens (encrypted). Data from Google is never sold, never used for advertising, never used to train an AI model, and never read by a person at Tonoman except with your permission, for security, or as the law requires.

Tonoman Cloud's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Using the YouTube upload means you agree to the YouTube Terms of Service, and YouTube's handling of your data is governed by the Google Privacy Policy. You can remove Tonoman's access at any time in your Google account's security settings, or by asking the agent or us to remove the connection; we then delete its tokens.

Who else handles your data

• Your AI provider (OpenAI or Anthropic), under your own account, as above.
• The services you connect (Slack, Telegram, Google, and others), each under its own terms.
• Stripe, for payments.
• Our hosting and email providers, who store and deliver data for us and may not use it for anything else.

Audio sent for transcription is transcribed on servers we operate.

How long we keep it

As long as your organization uses Tonoman Cloud. When you remove a connection, its tokens are deleted. When your organization closes its account, or asks us to, we delete its data within 30 days, and backups age out after that. Billing records are kept as long as the law requires.

Your choices

You can see and change your account and organization in the Hub. To get a copy of your data, correct it or delete it, email admin@rodnavarro.com. We answer within 30 days.

Security

Data travels encrypted (HTTPS), connection tokens are encrypted at rest, and each organization's data is kept apart from every other's.

Children

Tonoman Cloud is for organizations and is not meant for anyone under 16.

Changes

When this policy changes we update the date above, and for a change that matters we tell organization owners by email before it applies.

Contact

Axiplex LLC — admin@rodnavarro.com