Privacy Policy

We keep data collection to what the service actually needs to work:

• Account information. If you create an account, we store your email address and authentication identifiers through our authentication provider, Supabase.
• Content you submit. Prompts, documents, resumes and images you upload to tools such as the summarizer, resume analyzer or prompt generator are processed to return your result.
• Payment information. Paid plans are processed by Stripe. Card numbers never reach our servers — we only receive a subscription status and a customer reference.
• Usage data. Standard request logs (IP address, browser type, pages visited, timestamps), used for security, rate limiting and diagnosing errors.

We use the information above to:

• Deliver the AI tools you request and return their output to you.
• Authenticate you, keep your session active and apply your plan's entitlements.
• Protect the service from abuse, including per-IP rate limiting on our API routes.
• Understand which pages and tools are used so we can prioritise improvements.
• Send service messages such as billing receipts and account notices.

We do not sell your personal information, and we do not use the content you submit to train our own models.

TomatoAi does not train or host its own large language models. When you use a tool, your prompt and any attached content are forwarded to the model provider that powers it — which may include OpenAI, Anthropic, Google, or models routed through OpenRouter and Replicate.

Each provider handles that data under its own privacy policy and retention schedule. Because your content leaves our systems when a request is made, please do not submit confidential, regulated or personally sensitive material to any AI tool on this site.

We use two categories of cookies:

• Essential cookies keep you signed in and remember your theme preference. The site cannot function without them.
• Analytics cookies from Google Analytics give us aggregate traffic statistics. You can block these in your browser settings or with any standard content blocker without losing functionality.

Account records are retained for as long as your account is open. Files you upload for one-off processing (such as a resume or PDF) are held only for the duration of the request and are not stored afterwards. Request logs are rotated on a short cycle. When you delete your account, we remove your account record and associated history, apart from anything we are required to retain for tax or accounting purposes.

Depending on where you live, you may have the right to access, correct, export or delete the personal data we hold about you, and to object to certain processing. To exercise any of these, email support@tomatoai.in from your account address and we will respond within 30 days.

TomatoAi is operated from India. If you access the service from elsewhere, your data will be processed in India and in the regions where our infrastructure and model providers operate.

TomatoAi is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy as the service changes. The “last updated” date at the top of this page always reflects the current version, and material changes will be announced on the site. Continuing to use TomatoAi after a change means you accept the revised policy. See also our Terms of Service.