Privacy Notice

Last updated: May 2026

This notice explains what information we collect when you use Dear Toci and how we use and protect it.

Information we collect

  • Account information: name, email, and authentication data.
  • Content you provide: conversations with Toci, reflection letters, and portfolio entries.
  • Usage information: basic logs (timestamps, error data) to operate and improve the Service.
  • Payment information: handled directly by Stripe. We receive only limited metadata (e.g. customer ID, subscription status, last 4 digits of card). We never see or store full card numbers.

How we use your information

  • To provide and personalize the Service.
  • To process subscriptions and payments via Stripe.
  • To respond to support requests.
  • To maintain security and prevent abuse.

We do not sell your personal information, and we do not use the content of your reflections to train third-party AI models.

Service providers

We rely on a small number of trusted providers to operate Dear Toci, including:

  • Stripe — payment processing.
  • Supabase — authentication, database, and file storage.
  • AI model providers — to generate Toci's responses.

Your choices

You can request a copy of your data, correct it, or ask us to delete it by emailing support@leadershipandlearningcollective.org. You can cancel your subscription at any time from the Stripe customer portal.

Security

We use industry-standard safeguards (encryption in transit, row-level access controls, PCI-compliant payment handling via Stripe) to protect your information. No system is perfectly secure, but we work hard to keep your data safe.

Contact

Questions about this notice? Email support@leadershipandlearningcollective.org.

Return home