Privacy Policy
Beta draft, under legal review. Published for transparency;
the reviewed version replaces it before general availability.
What we never see
Passthrough traffic is never decrypted at the relay. We route by TLS SNI without reading a single byte of your payload.
What we process
| Category | Why |
|---|---|
| Account (email, hashed password, optional 2FA secret) | Authenticate and secure your account |
| Organization & membership | Multi-tenant access control |
| Device & route metadata | Operate tunnels and identity |
| Per-interval traffic summaries (counts, never content) | Metrics and quotas |
| Audit logs | Security and accountability |
Retention
Account and configuration data live for the life of the account. After cancellation, data is kept briefly to allow reactivation, then deleted, except where longer retention is legally required.
Your rights
Subject to applicable law you may access, correct, export, or delete your data. Deleting an organization revokes its certificates, drops its routes, and de-links its audit trail. Contact support@tollan.ie.