Privacy Policy

Your account

Your name, email address and sign-in credentials, handled by our sign-in provider, Clerk. We keep your email so we can sign you in and tell you when a report is ready. If you applied for access, we also keep what you wrote on the application form: company, role, website, monthly ad spend, your biggest challenge. That is how we decide who to let in and what to build next.

If you ask for a demo

What you type on the demo form: your name, work email, company website, role, monthly ad spend and how many ads and landing pages you test a month. We use it to answer the request, prepare the call and see who asks for demos. If you book a call, the booking is made in Cal.com (section 5).

What you submit for a report

The ad creatives you upload or point us to (images, videos, text), the landing page address, and anything you paste. This is the whole point of the product: the report is a judgement on exactly this material.

What Toniqe gathers while making the report

When Toniqe visits a landing page for you, it keeps a screenshot of each step, the page text it read, and what the site's cart showed (product, price, discount), because that is the evidence the report quotes. The visit is built never to type personal details into those pages and never to send them your account details. For market research, it collects public posts about the brand from sites such as Reddit, Quora and YouTube, and public ads from the Meta Ad Library.

How you use the product

Which pages you open and which features you use, tied to your account, so we can see what helps and what does not. In the European Union, the rest of the European Economic Area and the United Kingdom this runs only if you accept it on the cookie banner; elsewhere you can turn it off at any time (section 9). We never record your screen and never capture what you click automatically, because the pages you look at contain other people's advertising.

Your answers

Fifteen and thirty days after a report we may email to ask whether you ran the fixes, what you changed and whether it improved. Your answer is kept against that one report. Section 4 says what it is used for.

Technical records

Our hosting provider keeps short-lived server logs with your IP address and browser details. Our abuse protection keeps a count of your requests, with your account id or IP address, for up to 90 days. Our cost ledger records which outside services each report used; it holds no personal details (for emails, only the domain of the address, never the address itself). When you answer the cookie banner, we keep a record of that answer: when, which choice, the version of the question, the IP address and browser it came from, and your account if you are signed in. That record is how we can show what you agreed to (section 9).

Payment

Dodo Payments sells our paid plans as the merchant of record (section 5). Your card details go straight to them; we never see or store your card number. We keep which plan and billing term you pay for, when you started paying, and the customer reference Dodo gives us.

If you connect Figma

A read-only access token, stored encrypted, so you can pick a design frame as the landing page. Disconnecting in Settings deletes the token.

Lawful bases (EU, UK and similar laws)

• Contract — running your account and your reports, and answering a demo request you sent.
• Legitimate interests — keeping the service secure; improving how it judges, using public material and de-identified results; reading public posts and public ads about a brand you asked about. You can object (section 8).
• Consent — usage measurement (the cookie banner), connecting Figma, and answering the check-in email. Withdraw at any time.
• Legal obligation — consent records, lawful requests.

What Toniqe does learn from, in plain terms

Toniqe gets better by keeping records of what works. Here is what goes into those records, and what stays out.

• Public ads and public pages. Ads anyone can see in the Meta Ad Library, and landing pages anyone can visit, including how long an ad has been running. These are not your private data and never were.
• Patterns from every report, never words. When a report reads a brand's public page, Toniqe keeps the patterns it found against that page's address, with no account identifier: the kinds of angle the ads use, the type of page, the kinds of trust signal it shows, and the scores they earned. Headlines, button text, product names and anything else in your or your ad's own words are never kept there. These patterns stay when you delete your account. Private uploads — designs, screenshots, Figma frames — are kept against your account only, are never shared, and go when you go.
• Your check-in answers (did you run it, what changed, did it improve), kept against the report they are about, so we can tell which judgements turned out right. Only accounts that are real customers go on this record; our own and test accounts are excluded by design.
• Aggregated results. Figures such as "pages of this type score 62 on average", made from many reports, from which no customer or client can be identified.

What stays out: your uploads and your words are never shown or passed to another customer; one customer's results are never shown to another; no customer's material is ever used to train a third-party model.

By uploading, you confirm that you own what you upload or have permission to use it this way, including material that is not public yet, and you agree to Toniqe learning from your reports as described here. If you would rather your future reports added nothing, write to privacy@toniqe.com and we will mark your account so. Deleting your account or opting out removes your data and stops future contributions; what Toniqe has already learned stays, because it is kept as patterns across many reports, not as your material.

Automated decisions

A Toniqe score is a judgement about an ad and a page. It makes no decision about you, has no legal or similar effect on you, and every report can be questioned with a person at the address above.

European Economic Area, United Kingdom and Switzerland

The lawful bases are in section 3 and the transfer safeguards in section 6. You can complain to your local data protection authority at any time; we would rather you wrote to us first so we can fix it. Where the law requires a representative in the EU or UK for a company established outside them, we will name one here before serving customers there.

California and other US states (state privacy laws)

In the last twelve months we have collected the categories listed in section 2 (identifiers, commercial information about your reports, internet activity, and professional information from the application form). We do not sell personal information and do not share it for cross-context behavioural advertising, so there is nothing to opt out of; we honour Global Privacy Control signals regardless. We collect no sensitive personal information. You have the rights in section 8, including the right not to be discriminated against for using them, and an authorised agent may act for you with your written permission.

India

Under the Digital Personal Data Protection Act, 2023, Toniqe Labs Private Limited is the data fiduciary. You may access, correct and erase your data, nominate someone to exercise your rights if you cannot, and withdraw consent as easily as you gave it. Our grievance officer is reachable at privacy@toniqe.com; if we do not resolve a grievance, you may approach the Data Protection Board of India.

Canada, Australia, Brazil and elsewhere

Your data is stored outside your country (section 6). You have the rights in section 8 and may complain to your privacy regulator (in Canada the Office of the Privacy Commissioner, in Australia the OAIC, in Brazil the ANPD).