This Privacy Policy explains what information TooDesktop ("we", "us", "our") collects when you use our website, builder, and related services (the "Service"), how we use it, and the choices you have. By using the Service, you agree to this policy.
1. Information we collect
a. Account information
When you create an account, we collect:
- Your name and email address.
- A password (stored as a salted hash — we never store the plaintext) or, if you sign in with Google, the basic profile information Google shares with us (name, email, profile picture, Google account ID).
b. Project & build data
To build your desktop apps, we may store:
- Project configurations (app name, target URL, theme settings, window options, icons, branding assets you upload).
- Build artifacts and logs.
This data exists to operate the Service. You can delete projects at any time from your dashboard.
c. Payment information
If you subscribe to a paid plan, payments are processed by Stripe. We receive limited information from Stripe such as your subscription status, plan, billing country, and the last four digits of your card. We never receive or store your full card number. Stripe's own privacy policy applies to data they collect.
d. Usage & device data
When you use the website or the builder, we automatically collect:
- IP address (used for security, fraud prevention, and approximate location).
- Browser or app version, operating system, and screen size.
- Pages or features you interact with, and timestamps.
- Error reports and diagnostic logs.
e. Communications
If you email us or contact support, we keep a copy of that correspondence so we can help you.
2. How we use information
We use the information above to:
- Operate, maintain, and improve the Service.
- Build and deliver the desktop apps you create.
- Process payments and manage subscriptions.
- Authenticate you and protect your account.
- Detect, investigate, and prevent fraud, abuse, and security incidents.
- Respond to support requests and communicate about your account or the Service.
- Comply with legal obligations.
We do not sell your personal information, and we do not use it for advertising.
3. Service providers we share data with
We share the minimum information necessary with the following categories of providers:
| Provider | Purpose |
|---|---|
| Stripe | Payment processing & subscription billing |
| Google (OAuth) | "Sign in with Google" authentication |
| Hosting & cloud storage providers | Running the Service infrastructure |
| Email delivery provider | Transactional emails (receipts, password resets, etc.) |
| Product analytics & error monitoring | Understanding usage and fixing crashes |
These providers are contractually required to protect your data and use it only to provide services to us.
We may also disclose information if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of TooDesktop, our users, or the public.
4. Cookies & similar technologies
We use a small number of cookies and similar technologies for:
- Authentication — to keep you signed in.
- Preferences — to remember settings like theme.
- Security — to detect suspicious activity.
- Analytics — to understand which features are used (aggregated, no profile building).
You can clear cookies through your browser settings; doing so may sign you out and reset preferences.
5. Data retention
We keep your account information for as long as your account is active. When you delete your account, we delete or anonymize personal information within a reasonable period, except where we are required to keep it longer (for example, transaction records for tax and accounting purposes).
6. Security
We use industry-standard safeguards to protect your data, including encryption in transit (HTTPS), encryption at rest where appropriate, hashed passwords, access controls, and monitoring. No system is perfectly secure, but we work hard to keep yours safe and we will notify you of any incident that materially affects your data, as required by law.
7. Your rights
Depending on where you live, you may have rights to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete your personal information.
- Object to or restrict certain processing.
- Receive a portable copy of your data.
- Withdraw consent at any time, where processing is based on consent.
To exercise these rights, email us at privacy@toodesktop.com. We may need to verify your identity before acting on a request.
8. International transfers
TooDesktop may be operated from, and your data may be processed in, countries other than your own. Where required by law, we put in place appropriate safeguards (such as standard contractual clauses) for cross-border transfers.
9. Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us information, please contact us so we can delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make a material change, we'll update the "Last updated" date above and, where appropriate, notify you by email or in-app notice.
11. Contact
For privacy questions or requests, email privacy@toodesktop.com.