Privacy Policy

Toss ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our macOS application and related services.

We collect information that you provide directly to us, including:

• Account Information: When you create an account, we collect your email address and authentication credentials.
• Calendar Data: With your permission, we access your Google Calendar to sync upcoming meetings, display your schedule, and help you find available time slots. We read event titles, times, attendees, and meeting links.
• Meeting Data: When you use Toss to transcribe meetings, we process audio to generate transcripts, summaries, and action items. Audio is processed in real-time and is not stored after transcription.
• Integration Data: When you connect third-party services (Slack, Linear, Notion, etc.), we access only the data necessary to perform the actions you request.

We use the information we collect to:

• Provide, maintain, and improve our services
• Sync your calendar events and display upcoming meetings
• Transcribe meetings and generate summaries and action items
• Execute automations you configure (e.g., posting to Slack, creating Linear issues)
• Send you technical notices and support messages
• Respond to your comments, questions, and requests

Toss integrates with third-party services to provide its functionality. When you connect these services, you authorize us to access certain data from those services:

• Google Calendar: We access your calendar events to sync meetings and help with scheduling. We use the calendar.readonly and calendar.events scopes. Calendar data is used solely within the Toss application to display your schedule and is not shared with any other parties.
• Slack: We post messages to channels you specify and access workspace information to enable integrations.
• Linear: We create and update issues based on your instructions.
• Notion: We create and update pages in databases you specify.

Each third-party service has its own privacy policy, and we encourage you to review them.

We do not sell, rent, or trade your personal information or Google user data to third parties. We may share your information only in the following limited circumstances:

• Service Providers: We use trusted third-party services to help operate our application, including cloud hosting (for storing account data and meeting transcripts) and speech-to-text processing (for real-time transcription). These providers only process data as necessary to perform their services and are contractually obligated to protect your information.
• With Your Consent: When you configure automations (e.g., posting summaries to Slack or creating Linear issues), we share the specific data required to perform those actions with the services you have connected.
• Legal Requirements: We may disclose information if required by law, legal process, or government request.

Google user data (including Calendar information) is never shared with third parties for advertising, marketing, or any purpose unrelated to providing the Toss service.

We retain your information for as long as your account is active or as needed to provide you services:

• Account Data: Retained until you delete your account or request deletion.
• Google Calendar Data: Calendar events are cached locally on your device and synced in real-time. We do not permanently store your calendar data on our servers.
• Meeting Transcripts and Summaries: Stored on secure cloud servers to enable you to review past meetings. Audio is processed in real-time and is not retained after transcription is complete.
• Integration Tokens: OAuth tokens for connected services are stored securely and can be revoked at any time by disconnecting the integration.

All data is stored on servers located in the United States. You can request deletion of your data at any time by contacting us at hello@usetoss.com.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data is encrypted in transit using TLS and at rest using industry-standard encryption.

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Disconnect third-party integrations at any time
• Export your data in a portable format

Our services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

If you have any questions about this Privacy Policy, please contact us at: hello@usetoss.com