Privacy Notice
Last updated: May 2026
This notice explains what information we collect when you use Dear Toci and how we use and protect it.
Information we collect
- Account information: name, email, and authentication data.
- Content you provide: conversations with Toci, reflection letters, and portfolio entries.
- Usage information: basic logs (timestamps, error data) to operate and improve the Service.
- Payment information: handled directly by Stripe. We receive only limited metadata (e.g. customer ID, subscription status, last 4 digits of card). We never see or store full card numbers.
How we use your information
- To provide and personalize the Service.
- To process subscriptions and payments via Stripe.
- To respond to support requests.
- To maintain security and prevent abuse.
We do not sell your personal information, and we do not use the content of your reflections to train third-party AI models.
Service providers
We rely on a small number of trusted providers to operate Dear Toci, including:
- Stripe — payment processing.
- Supabase — authentication, database, and file storage.
- AI model providers — to generate Toci's responses.
Your choices
You can request a copy of your data, correct it, or ask us to delete it by emailing support@leadershipandlearningcollective.org. You can cancel your subscription at any time from the Stripe customer portal.
Security
We use industry-standard safeguards (encryption in transit, row-level access controls, PCI-compliant payment handling via Stripe) to protect your information. No system is perfectly secure, but we work hard to keep your data safe.
Contact
Questions about this notice? Email support@leadershipandlearningcollective.org.
