Privacy Policy

Recording, editing, transcription, the privacy scan, face tracking and background removal all run on your computer. We don’t upload, view or store your screen recordings, camera or microphone audio, transcripts or exported videos.

Where you save and share your exports is up to you. If you upload a video to another service, that service’s privacy policy applies.

Your account. Your email address, your name if you give it, a hashed password if you set one, and whether your email is verified. We send one-time sign-in codes by email and keep only a hash of each code.

Sessions and computers. When you sign in, we keep a session record (a hashed token, a device name, and when it was created and last used). To keep the free trial to one per person and computer, the app sends a hashed hardware identifier and the platform (macOS or Windows). We can’t turn the hash back into your hardware’s serial number. Each Pro period has a licence key, and we record which of your computers use it (that hashed identifier and the computer’s name) so a key works on up to two computers.

Subscriptions. If you buy Toom Pro, our payment partner Bachs handles checkout and your card details. We receive your customer ID, the plan, its status, renewal dates, amounts and any refunds. We never see or store your full card number.

The waitlist. If you join the waitlist or ask us to email you the download link, we store your email address, your name if you give it, the kind of computer you were browsing from, which button you used and the page that referred you.

This website. We use Google Tag Manager and the analytics tools it loads to understand how people find and use the site (pages viewed, buttons clicked, rough location and device type). These tools may set cookies. Our hosting provider also keeps standard server logs, including IP addresses. We pass your IP address to our API when you join the waitlist so we can limit abuse.

Background search. When you search for a background image in the app, your search terms go to Unsplash to fetch the results.

• To create your account, sign you in and keep it secure.
• To start, renew, cancel and refund Toom Pro, and to apply promo codes.
• To enforce one free trial per person and per computer, and to block abuse.
• To email you about your account, receipts, the waitlist and important changes to Toom. We don’t send marketing email without your consent.
• To understand how the website is used and improve it.
• To answer you when you contact support.

We don’t sell your personal data. We share it only with the service providers that help us run Toom, and only what each one needs:

• Bachs, for payments and billing
• Resend, to deliver our emails
• Google (Tag Manager and analytics), for website statistics
• Unsplash, for background image searches
• Our hosting and database providers, to run the website and API

We may also disclose data if the law requires it, or to protect Toom, our users or the public from fraud or harm.

We keep your account data for as long as your account is open. When you delete your account, we delete your personal data, except records we must keep for tax, accounting or legal reasons (such as invoices and refunds) and a hashed computer identifier used to prevent repeat free trials. Waitlist entries stay until you ask us to remove them. Expired sign-in codes and sessions are discarded.

You can ask us to see, correct, export or delete your personal data, to leave the waitlist, or to stop processing it. Email hello@trytoom.tech from the address on your account and we’ll reply within 30 days. Depending on where you live, you may also have the right to complain to your local data protection authority.

You can block or delete cookies in your browser settings. The site still works without them.

We hash passwords, sign-in codes and session tokens, use encrypted connections, and limit who on our team can reach user data. No system is perfectly secure, so if you think your account has been compromised, tell us right away.

Toom isn’t meant for children under 13, and we don’t knowingly collect their data. If you believe a child has given us data, contact us and we’ll delete it.

Our service providers may process data in countries other than yours. Where that happens, we rely on their contractual safeguards to protect it.

If we change this policy, we’ll update the date at the top. If a change is significant, we’ll also tell you by email or in the app before it takes effect.