1. Who we are

Tono ("Tono," "we," "our," or "us") is a software service that helps local businesses communicate with their customers using AI-generated drafts in the business's own voice. Tono offers two products: Tono Quotes, which drafts price quotes from the owner's own rates and delivers them to the customer after the owner approves, and Tono Reviews, which drafts replies to Google reviews for the owner to approve and post. Tono is operated by Adar Agmon, an independent software provider based in Israel, and serves business users in the United States. This Service is designed to comply with applicable United States laws and the requirements of the third-party platforms we integrate with.

This Privacy Policy describes how we collect, use, and protect information about users of our website at tonovoice.com and our related services (collectively, the "Service").

2. What information we collect

Information you provide directly

• Business information: Business name, type of trade, city/state, and owner name
• Contact information: Email address and mobile phone number
• Voice profile data: Example replies you paste in, communication style preferences, custom phrases, and onboarding questionnaire responses
• Payment information: Processed exclusively by Paddle.com Market Limited ("Paddle"), our payment provider and Merchant of Record. We do not store credit card numbers or financial account data on our servers

If you are a homeowner using the cost estimator

Most of this policy describes data we hold about the businesses that use Tono. The cost estimator at Job estimator is different, and this is the part that applies to you.

• What you type into it stays on your device. The job description, your answers and any quote you paste are processed in your browser. We do not receive them and we do not store them.
• If you ask to be notified, we store your email address, the job you asked about and the date. That is the whole record.
• Your ZIP code is optional and is never stored next to your email. It is counted, so we can see which jobs people want priced in which areas, and the count carries no way to connect it back to you.
• We use that address for one message and nothing else. We do not sell your information and we do not use it for marketing. Service providers who store and send that message process it on our behalf and for no other purpose.
• We do not pass your details to any contractor. If we ever offer to put you in touch with a business, we will ask you at that point, in plain words, and it will be your choice. Nothing you give us today is used for that.

If you are trying the free demo

The demo at Try it free is a second free tool, and it does not work the way the Job estimator does. The estimator runs in your browser. The demo cannot: drafting a reply in a business voice, or pricing a sample job, happens on our server. So what you type there does leave your device, and this section says exactly where it goes.

• A sample reply is drafted by Anthropic. The review text you paste is sent to our server and on to Anthropic's API, which generates the draft. Anthropic does not train on it. Their standard retention applies, described in the section on AI processing below.
• A sample quote is not. The job description you type is matched against a price catalogue on our server. It is not sent to Anthropic and it is not used to train anything.
• Neither is kept. We do not write the review text or the job description to a file, and there is no record of your demo afterwards. If you leave an email address at the end, that address is stored, and only that.
• We count uses against your IP address to stop abuse. That counter lives in memory, resets on its own, is never written to disk, and is not connected to anything else about you.

Reviews data we collect automatically

• Review data: Customer review text, star ratings, reviewer names, review dates, and platform source, collected from your connected Google Business Profile on your behalf
• Reply data: AI-generated draft replies and your approved final replies
• Edit behavior: Differences between AI-generated drafts and your final approved text, used to improve your voice profile
• Usage data: Actions taken in the app, generation times, approval rates, and similar operational metrics
• Device and technical data: Browser type, IP address, operating system, and access timestamps

Quote requests and customer (lead) data

Tono Quotes gives each business a hosted quote link. When someone requests a quote through your link, we collect the information that person provides so we can draft and deliver the quote on your behalf:

• Requesting customer's contact details: Their name, mobile phone number, and email address (if they provide one)
• Job details: The job description they type, and the property ZIP code and property type they enter
• Attachments: photos or video of the job, if and when they choose to share them
• Quote data: The draft price quote we generate from your own rates, and the quote you approve, edit, or decline

We collect this information only to structure the job, draft a price quote in your voice from your own rates, and deliver the quote to the customer. We retain it only as long as needed for that purpose, and it is subject to the same deletion practices described in the Data retention section below.

Information from connected platforms

When you connect your Google Business Profile, we access it through the Google Business Profile API using OAuth 2.0. We request read access to your reviews and to the business details you publish on your own listing, and write access solely for the purpose of posting approved replies. We do not access any other Google account data, and we never access your personal Google account, your email, your contacts or your files.

Filling in your business details. Once you have connected, you can ask us to read the details you already publish on your Google listing, your business name, address, phone number, website, opening hours and category, so you do not have to type them again. We show you exactly what we found and what would appear on the quotes your customers receive. Nothing is saved until you confirm it, and nothing is shown to a customer that you have not approved. If your listing is a service-area business, one that does not receive customers at an address, we do not offer your address for display unless you choose to add it yourself. Once you confirm these details they are stored as your own business information, which you can edit or remove at any time. We do not keep a separate copy of your Google listing and we do not re-read it in the background.

3. How we use your information

• Generate AI-drafted reply suggestions for your customer reviews
• Generate AI-drafted price quotes from your own rates when a customer requests a quote, and deliver the quote you approve to that customer by SMS and email on your behalf
• Send you SMS and email alerts when a new review is detected or a new quote request comes in
• Build and continuously improve your voice profile so replies and quotes sound more like you over time
• Post approved replies to connected review platforms on your behalf
• Process payments and manage your account and subscription
• Provide customer support and respond to your inquiries
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

4. Who we share data with

Before any of that, two things your browser does on its own. Our pages load their typefaces from Google Fonts, so opening any page on this site sends your IP address and browser details to Google, in the same way that loading any image from another site would. It carries nothing you typed and nothing about your account, and it happens whether or not you have a Tono account or are signed in.

The two pages where you set up payment also load the checkout software from Paddle, our payment provider, for the same reason and with the same effect: your IP address and browser details reach Paddle when one of those pages opens. Those are the only two companies any page on this site contacts, and nothing else on it is fetched from anywhere but us.

We share your information only with the following categories of service providers, and only as necessary to provide the Service:

• Anthropic, Inc., AI reply and quote generation. The content needed to generate a draft is sent to Anthropic's API: for reviews, the review text and your business name; for quotes, the job description and the property ZIP and type the customer entered, along with your business context and rates. Anthropic's privacy policy governs their use of this data. We do not send personally identifiable contact information beyond what is needed to produce the draft.
• Paddle.com Market Limited, Payment processing and Merchant of Record. Subject to Paddle's privacy policy.
• Twilio, Inc., SMS delivery of review and quote alerts to you, and delivery of approved quotes to your customers on your behalf. Subject to Twilio's privacy policy.
• Google LLC, Google Business Profile API for reading reviews, posting approved replies, and reading the business details you publish on your own listing when you ask us to fill them in for you. Subject to Google's API Terms of Service.
• Hosting and infrastructure providers, Cloud hosting services that store and process data on our behalf under data processing agreements.

We do not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes.

5. AI processing and third-party AI providers

Tono uses AI models provided by Anthropic to generate reply and quote drafts. When you generate a review reply, we send the following information to Anthropic's API:

• The review text (as written by your customer)
• Your business name, trade type, and owner first name
• Your communication style preferences and example replies (including the past replies read from your Google Business Profile when you first connect, kept no longer than 30 days)

When a quote is drafted, we send the job description and the property ZIP and type the customer entered, your business context, and your own rates, so the draft quote reflects your pricing in your voice.

Anthropic processes this data to generate a draft. This data is sent over encrypted connections. Anthropic's terms prohibit training their models on API inputs by default. Under Anthropic's standard API retention policy, API inputs and outputs are automatically deleted from Anthropic's backend within 30 days of receipt or generation, subject to Anthropic's published exceptions, including Usage Policy enforcement and legal requirements. We do not currently have a Zero Data Retention agreement with Anthropic, so the standard retention policy applies to the content described above. For more information, see Anthropic's Privacy Policy at anthropic.com/privacy.

Important: You are responsible for ensuring that any review or quote content sent through our Service complies with applicable privacy laws. Content that contains sensitive personal information (medical details, financial data, etc.) should be handled with care.

6. SMS and phone communications

When you provide your mobile number during signup, you are opting in to receive automated SMS alerts from Tono. These alerts notify you when a new review arrives or a new quote request comes in, and include a link or one-tap action to view and approve the AI-generated draft.

Tono Quotes also sends SMS to the person who requested a quote, on your behalf as the business. That customer provides their mobile number on your quote form specifically to receive their quote, and we use it only to deliver the quote you approve, a confirmation if they accept, and directly related follow-up. STOP to opt out and HELP for help apply to these messages as well.

We honor all opt-out requests immediately. When you reply STOP, we will send one final confirmation and cease all SMS communications. We comply with the Telephone Consumer Protection Act (TCPA) and CTIA messaging guidelines. We obtain express consent before sending any messages, and we use a number only to send messages related to that person's own account or requested quote.

7. Google Business Profile data

When you connect your Google Business Profile, we use the Google Business Profile API to:

• When you first connect, do a one-time read of the reviews you have already replied to, and use up to 50 of your past replies to learn your writing style. We never keep that Google-sourced content beyond 30 days.
• Fetch your new customer reviews on a regular polling schedule
• Post approved reply text to Google on your behalf
• When you ask us to, read the business details you publish on your own listing, your business name, address, phone number, website, opening hours and category, and offer them to you to confirm so that your settings and the quotes your customers receive do not have to be typed out again

Business details are a starting point, not a copy. We read your published listing details only when you ask, and only to fill in a form you then confirm. From the moment you confirm them they are your own business information, held and edited by you in Tono. We do not retain a Google-sourced copy of them, we do not re-read your listing in the background, and if you change something in Tono your version is the one we use. This is separate from review content, which is Google-sourced and deleted within 30 days as described below.

Your authorization. By connecting your Google Business Profile, you expressly authorize Tono to read your reviews and to post replies on your behalf, only after you have personally approved each one by text. Nothing is ever posted automatically. You can withdraw this authorization at any time by disconnecting your Google account from Settings, which immediately revokes our access.

We access only the minimum data necessary. We store your Google OAuth tokens (the access and refresh tokens) in encrypted form. You can disconnect your Google account at any time from your Settings page, which immediately revokes our access. Tono is not affiliated with or endorsed by Google LLC.

8. Data retention

• Estimator notification list (homeowners): Your email address and the job you asked about are deleted within 30 days after we successfully send you the update, or within 12 months of collection if we never send one, whichever comes first. The optional ZIP code is never stored beside your email; it is only counted. If we discontinue the estimator or this notification service, we delete the remaining list rather than repurpose it
• Account data: Kept while your account is active. When you delete your account it is erased from our live systems immediately; any residual copies in our rotating encrypted backups are purged within 30 days
• Google review and reply content: Retained no more than 30 days, then automatically deleted, in line with Google's Business Profile API policy
• Quote request and customer (lead) data: The customer's contact details, job description, property ZIP and type, and any photos or video are retained no more than 30 days after the quote is resolved or expires, then automatically purged. You can delete a lead sooner from your account. After that purge we keep a transaction record only for 12 months: the date, the amount you approved, the kind of quote it was, and whether it was accepted or declined. It holds no customer name, phone number, email address or job description, and it exists so a question about what was quoted and when can be answered. It is deleted automatically at 12 months
• Voice profile (derived writing-style metrics, not your raw Google or quote content), edit history, and replies and quotes you approve in Tono: Retained while your account is active
• SMS consent records: Retained for up to 5 years so we can demonstrate consent if it is ever questioned
• Payment records: Retained by Paddle as required by applicable tax laws

You can delete your account and all associated data at any time from your account settings, which takes effect immediately. You can also email support@tonovoice.com, and emailed requests are processed within 30 days.

9. Your rights (CCPA and state privacy laws)

If you are a resident of California or another US state with applicable privacy legislation, you may have the following rights:

• Right to know: Request information about the categories and specific pieces of personal information we collect, use, and disclose
• Right to delete: Request deletion of your personal information, subject to certain exceptions
• Right to correct: Request correction of inaccurate personal information
• Right to opt-out of sale: We do not sell personal information, so this right does not apply
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at support@tonovoice.com. We will respond within 45 days. We may need to verify your identity before processing requests.

Note on CCPA thresholds: The CCPA applies to a business that meets any one of three thresholds: annual gross revenue above $26,625,000; buying, selling or sharing the personal information of 100,000 or more California consumers or households a year; or deriving 50 percent or more of annual revenue from selling or sharing personal information. As a small business, we may not currently be subject to CCPA, but we follow these standards as best practice.

10. Security

We implement technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS) and at rest
• Secure, server-side storage of API keys and OAuth tokens
• No storage of Anthropic API keys or other secrets in frontend code
• Rate limiting and abuse prevention on all API endpoints
• Access controls limiting data access to authorized personnel

No security system is perfect. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

11. Children

Tono is intended for use by business owners and operators aged 18 or older. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us immediately at support@tonovoice.com.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the effective date at the top of this page. Your continued use of the Service after the effective date constitutes your acceptance of the updated policy.

13. Contact us