Privacy Policy

1. What Tono processes

When you use Tono, the service may process:

• the message you enter and the generated output returned to you
• selected situation, tone, language, action, and output length
• approximate input and output length
• timestamp and success or failure status
• moderation, cache, rate-limit, and abuse-prevention status
• anonymous or hashed session and network identifiers
• basic technical information, such as device category

Tono processes your message and selected options at your request to produce the tuned versions you ask for.

2. Message and generated-output handling

Tono is not designed to store your original full message as permanent conversation or account history. Your message is sent through a secure server endpoint for moderation and generation.

When response caching is enabled, generated outputs may be stored temporarily for up to 24 hours to improve reliability, handle repeated requests, and control operating costs. The cache is addressed using a one-way hash derived from the request and expires automatically. It is not intended to function as saved message history.

Because generated outputs may reflect details from your message, avoid submitting information you are not comfortable processing through an online AI-assisted tool.

3. Metadata retention

Tono may retain limited operational and analytics metadata for up to 30 days to maintain the service, prevent abuse, monitor reliability, and understand basic usage. This may include timestamp, selected options, approximate input and output length, model and prompt version, device category, and generation status.

Operational metadata does not include the original message or generated output text. Rate-limit records expire sooner, usually within 24 hours, and moderation counters are retained for up to 7 days. The separate temporary output cache is described above.

4. Cookie used by Tono

Tono uses a random, secure, httpOnly session cookie named tono-sid for rate limiting, abuse prevention, and fair-use enforcement. The cookie is not used to store your message and expires after 30 days unless removed sooner by your browser.

5. Third-party service providers

Tono currently relies on providers for specific purposes:

• OpenAI processes message text for moderation and generation.
• Cloudflare Turnstile processes verification information and may receive your IP address to help detect automated abuse.
• Upstash Redis stores rate-limit records, limited metadata, analytics counters, and temporary cached outputs.
• Vercel hosts and delivers the Tono web application and server endpoints.

These providers process information under their own terms, privacy practices, and infrastructure policies. Payment or support providers process information independently when you choose to use their services.

6. How information is used

Tono uses processed information to:

• generate the requested message versions
• apply the selected tone, situation, action, and output length
• prevent spam, abuse, automated misuse, and excessive usage
• maintain reliability and monitor errors
• understand basic product usage without keeping full conversation history
• improve product safety and user experience

7. Information you should not submit

Do not paste passwords, API keys, private credentials, bank or payment details, medical records, government identification numbers, confidential legal documents, business secrets, or other highly sensitive personal information. You are responsible for deciding what information you submit.

8. Security and proportional use

Tono uses reasonable technical measures, including server-side API calls, secure cookies, hashed identifiers, rate limits, moderation, limited retention, and bot verification. Data collection is limited to what is reasonably necessary to operate and protect the service. No online service can guarantee absolute security.

9. Your privacy requests

You may ask about access, correction, deletion, objection, or restriction of service data that can reasonably be associated with you. Because Tono does not require accounts and stores primarily anonymous or hashed metadata, it may not always be possible to connect a record to a specific person.

Tono may request reasonable information to verify or locate relevant data, such as an approximate date of use or session-related details. To make a request, email hello@byant.dev.

10. Children's privacy

Tono is a general-audience tool and is not designed to knowingly collect personal information from young children. If you believe a child submitted personal information through Tono, contact hello@byant.dev so the matter can be reviewed.

11. International processing

Tono and its service providers may process information using infrastructure located in different countries. This means information may be processed outside your country of residence under the provider arrangements described above.

12. Changes to this policy

This Privacy Policy may be updated as Tono changes or adds features. The latest version and revision date will be posted on this page.

13. Contact

For privacy questions, requests, or concerns, email hello@byant.dev or use the Support page.