Privacy Policy

Beta draft, under legal review. Published for transparency; the reviewed version replaces it before general availability.

What we never see

Passthrough traffic is never decrypted at the relay. We route by TLS SNI without reading a single byte of your payload.

What we process

CategoryWhy
Account (email, hashed password, optional 2FA secret)Authenticate and secure your account
Organization & membershipMulti-tenant access control
Device & route metadataOperate tunnels and identity
Per-interval traffic summaries (counts, never content)Metrics and quotas
Audit logsSecurity and accountability

Retention

Account and configuration data live for the life of the account. After cancellation, data is kept briefly to allow reactivation, then deleted, except where longer retention is legally required.

Your rights

Subject to applicable law you may access, correct, export, or delete your data. Deleting an organization revokes its certificates, drops its routes, and de-links its audit trail. Contact support@tollan.ie.