Privacy Policy

totell.com ("totell", "we", "us") is an anonymous constructive-feedback service operated by Totell Inc., a Delaware corporation. This policy explains what we collect, why, and the choices you have.

What we collect

Account holders: your name, username, email address, optional password (stored only as a secure hash), and an avatar you choose. We also collect your birth month and year, only to enforce the minimum age of 16; we deliberately do not collect the day, and we record when you made the declaration. If you sign in with Google we receive your name and email from Google. If you sign in with Snapchat we receive a Snapchat identifier and display name; Snapchat does not share your email with us.

Feedback senders: you do not need an account to send feedback. We store the message you write and the card style and traits you pick. To prevent abuse we store a coarse, one-way fingerprint derived from your network connection. We do not store your name, account, or exact address with a message, and we designed the product so a message cannot be traced back to a specific person by its recipient.

Premium name claims: if you reserve a premium username we collect the email address you provide to complete the purchase. Card details go directly to our payment processor (Stripe) and never touch our servers.

How messages are processed

Anonymous cards, sealed messages, and public feed posts and replies are screened by an automated AI system before delivery or publication to filter insults, harassment, and unsafe content. Images are screened before they are stored; video uploads are not accepted at the moment. Text and images are sent to our AI processing providers (hosted on Microsoft Azure) solely for this screening and are not used by us to train AI models.

Private messages between accounts are not AI screened. Instead, a first message from someone you have no relationship with arrives as a message request: nobody can put a message in front of you without your agreement, and declining is never revealed to the sender.

Anonymity, honestly stated

Recipients never see who sent a message. Inboxes unlock only after several messages arrive, ordering is shuffled, and exact timestamps are hidden. Like any service, we may be required to disclose information we hold in response to valid legal process; we hold very little about senders by design.

Notes shared by recipients

Recipients can choose individual notes to publish on their public profile or export to social media. Profile publication does not include sender account details, contact information, or private replies. Recipients can remove a published note from totell; copies already saved or shared elsewhere are outside our control.

What we do not do

We do not sell your personal information. We do not show third-party advertising. We do not share your data with third parties except the service providers who run our infrastructure (Microsoft Azure hosting and AI, Stripe for payments, and our email delivery provider) under contracts limiting their use of it.

Text messages and mobile information

If you give us your phone number, we use it only to deliver the service: notifications that a sealed message is waiting for you, sign-in links you request, and password reset links. Message frequency varies with how the service is used. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. Carriers are not liable for delayed or undelivered messages.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, excluding the aggregators and providers of the text message services we use to deliver messages.

Cookies

We use a single first-party session cookie to keep you signed in, and short-lived cookies to secure sign-in flows. No tracking cookies.

Your rights

You can access and update your account details in Settings at any time. You can ask us to delete your account and its data, or to export it, by emailing hello@totell.com. We honor applicable rights under GDPR, CCPA, and similar laws.

Age

You must be at least 16 to hold a totell account, and we enforce this with the birth month and year collected at signup. totell is not directed to children, and we do not knowingly collect data from anyone under 16. If you believe someone under 16 uses totell, contact us and we will delete the account.

Data retention and security

Data is stored on Microsoft Azure in the United States, encrypted in transit and at rest. We keep account data while your account exists and delete it on request. Abuse-prevention fingerprints are periodically purged.

Changes and contact

We will post any changes to this policy here with a new effective date. Questions: hello@totell.com or our support page.