Privacy Policy

This policy explains what Tollan processes to operate secure device access, what passthrough traffic it does not inspect, and how long data is kept.

What we never see

Passthrough traffic is never decrypted at the relay. We route by TLS SNI without reading a single byte of your payload.

What we process

CategoryWhy
Account (email, hashed password, optional 2FA secret)Authenticate and secure your account
Organization & membershipMulti-tenant access control
Device & route metadataOperate tunnels and identity
Per-interval traffic summaries (counts, never content)Metrics and quotas
Audit logsSecurity and accountability

Retention

Account and configuration data live for the life of the account. After cancellation, data is kept briefly to allow reactivation, then deleted, except where longer retention is legally required.

Your rights

Subject to applicable law you may access, correct, export, or delete your data. Deleting an organization revokes its certificates, drops its routes, and de-links its audit trail. Contact support@tollan.ie.