Privacy Policy

totell.com ("totell", "we", "us") is an anonymous constructive-feedback service operated by Totell Inc., a Delaware corporation. This policy explains what we collect, why, and the choices you have.

What we collect

Account holders: your name, username, email address, optional password (stored only as a secure hash), and an avatar you choose. If you sign in with Google we receive your name and email from Google. If you sign in with Snapchat we receive a Snapchat identifier and display name; Snapchat does not share your email with us.

Feedback senders: you do not need an account to send feedback. We store the message you write and the card style and traits you pick. To prevent abuse we store a coarse, one-way fingerprint derived from your network connection. We do not store your name, account, or exact address with a message, and we designed the product so a message cannot be traced back to a specific person by its recipient.

Premium name claims: if you reserve a premium username we collect the email address you provide to complete the purchase. Card details go directly to our payment processor (Stripe) and never touch our servers.

How messages are processed

Every message is screened by an automated AI system before delivery to filter insults, harassment, and unsafe content. Message text is sent to our AI processing providers (hosted on Microsoft Azure) solely for this screening and is not used by us to train AI models.

Anonymity, honestly stated

Recipients never see who sent a message. Inboxes unlock only after several messages arrive, ordering is shuffled, and exact timestamps are hidden. Like any service, we may be required to disclose information we hold in response to valid legal process; we hold very little about senders by design.

What we do not do

We do not sell your personal information. We do not show third-party advertising. We do not share your data with third parties except the service providers who run our infrastructure (Microsoft Azure hosting and AI, Stripe for payments, and our email delivery provider) under contracts limiting their use of it.

Cookies

We use a single first-party session cookie to keep you signed in, and short-lived cookies to secure sign-in flows. No tracking cookies.

Your rights

You can access and update your account details in Settings at any time. You can ask us to delete your account and its data, or to export it, by emailing hello@totell.com. We honor applicable rights under GDPR, CCPA, and similar laws.

Age

totell is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child under 13 uses totell, contact us and we will delete the account.

Data retention and security

Data is stored on Microsoft Azure in the United States, encrypted in transit and at rest. We keep account data while your account exists and delete it on request. Abuse-prevention fingerprints are periodically purged.

Changes and contact

We will post any changes to this policy here with a new effective date. Questions: hello@totell.com or our support page.