Privacy Policy

This Privacy Policy explains how Tillo ("we", "us", or "our") collects, uses, discloses, and protects your information when you use our email service, website, and related offerings (the "Service"). By using the Service, you consent to the practices described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Account and profile information. When you create an account, we collect:

• Email address (including your Tillo email and the external email you use for verification)
• First and last name
• Password (stored in encrypted form)
• Profile picture or avatar URL, if you choose to add one

Email content. To provide the email service, we store and process the emails you send and receive through Tillo, including sender and recipient addresses, subject lines, and body content. We may use this data to deliver messages, display your inbox, provide features such as search and spam filtering, and improve the Service (for example, generating summaries where applicable).

Usage and technical data. We automatically collect information about how you use the Service, such as when you sign in, which features you use, and device or browser information (e.g. IP address, type of device). We may use cookies and similar technologies as described below.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Service
• Authenticate you and manage your account
• Deliver, store, and display your emails and related features (e.g. folders, search)
• Process and prevent spam, abuse, and security issues
• Send you service-related notices (e.g. account or security updates)
• Comply with legal obligations and enforce our Terms of Service
• Analyse usage in an aggregated, non-personally identifiable way to improve our products

3. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

• Service providers. With vendors who help us operate the Service (e.g. hosting, email delivery, authentication). These providers are contractually required to protect your data and use it only for the purposes we specify.
• Legal and safety. When required by law, court order, or government request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, or to detect and prevent fraud or security issues.
• Business transfers. In connection with a merger, sale of assets, or acquisition, in which case the successor will continue to honour this Privacy Policy where applicable.

4. Data Retention

We retain your account and email data for as long as your account is active. If you close your account, we may delete or anonymise your data within a reasonable period, except where we are required to retain it for legal, regulatory, or security purposes.

5. Security

We use industry-standard measures to protect your data, including encryption in transit and at rest where applicable, access controls, and secure infrastructure. You are responsible for keeping your password confidential. Please report any suspected unauthorised access or security issue to us promptly.

6. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling them may limit some features of the Service.

7. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, or to object to or restrict certain processing. You can update your profile and account settings within the Service. To request access, correction, deletion, or to exercise other privacy rights, please contact us. We will respond in accordance with applicable law. You may also have the right to lodge a complaint with a supervisory authority.

8. Children

The Service is not directed at children under 13 (or the applicable age of consent in your country). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us so we can delete it.

9. International Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place so that your data remains protected in accordance with this Privacy Policy and applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. For material changes, we may provide additional notice (e.g. by email or in the Service). Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

For questions about this Privacy Policy or our privacy practices, or to exercise your rights, please contact us through the support options available in the Service or on our website.