Privacy Policy
This policy explains what Tollan processes to operate secure device access,
what passthrough traffic it does not inspect, and how long data is kept.
What we never see
Passthrough traffic is never decrypted at the relay. We route by TLS SNI without reading a single byte of your payload.
What we process
| Category | Why |
|---|---|
| Account (email, hashed password, optional 2FA secret) | Authenticate and secure your account |
| Organization & membership | Multi-tenant access control |
| Device & route metadata | Operate tunnels and identity |
| Per-interval traffic summaries (counts, never content) | Metrics and quotas |
| Audit logs | Security and accountability |
Retention
Account and configuration data live for the life of the account. After cancellation, data is kept briefly to allow reactivation, then deleted, except where longer retention is legally required.
Your rights
Subject to applicable law you may access, correct, export, or delete your data. Deleting an organization revokes its certificates, drops its routes, and de-links its audit trail. Contact support@tollan.ie.