Privacy Policy

1. Information We Collect

When you create an account, we collect your email address, name, and hashed password. We never store plaintext passwords. If you sign in via Google or GitHub, we receive your public profile information from those providers.

When you use our tunneling service, we collect metadata about tunnel sessions including subdomain, protocol, timestamps, request counts, and bandwidth usage for analytics purposes. We do not inspect or store the content of traffic passing through your tunnels.

2. How We Use Your Information

We use your information to:

• Provide and maintain the AI Tao Hoo service
• Authenticate your identity and manage your account
• Display usage analytics in your dashboard
• Enforce tier limits and billing
• Send important service notifications (e.g., trial expiration)

3. Data Storage and Security

Your data is stored in PostgreSQL databases hosted on Google Cloud Platform in the Asia Southeast (Singapore) region. All data is encrypted in transit using TLS 1.2+. Passwords are hashed using Argon2id. API keys are stored as SHA-256 hashes.

4. Third-Party Services

We use the following third-party services:

• Google Cloud Platform — Infrastructure hosting
• Stripe — Payment processing (we never see your full card number)
• Let's Encrypt — SSL certificate issuance
• GitHub / Google OAuth — Optional social login

5. Data Retention

Account data is retained as long as your account is active. Tunnel session metadata and request logs are retained for 90 days. You can request deletion of your account and all associated data by contacting us.

6. Your Rights

You have the right to access, correct, or delete your personal data. You can export your data from the dashboard or contact us for a full data export. To delete your account, contact support.

7. Contact

For privacy-related questions, contact us at itsared@gwintech.co.