Privacy

Who is responsible?

Maxime Tolos, trading as Tolos AI, is the controller of personal data in enquiries received through this website and by email. For questions or to exercise your rights, contact max@tolos.ai.

What you provide

When direct sending is available on the Contact page, your name, email address and a description of your request are required to identify your enquiry and respond. Without them, the form cannot be submitted. Your sector, current tools and the service you are interested in are optional; the selected language determines the acknowledgement language.

The form accepts text, with no attachments. A general description is enough: avoid passwords, sensitive data and other people’s personal information.

Why the information is used

• Discuss a project or prepare a quote you request on your own behalf: steps taken at your request before entering a contract, under GDPR Article 6(1)(b).
• Respond to other enquiries, including when you represent a company: the legitimate interest in managing business correspondence, under Article 6(1)(f).
• Limit spam, abuse and duplicate submissions: the legitimate interest in protecting the service and its users, under Article 6(1)(f).

Your message does not subscribe you to a newsletter and is not sent to an AI model. Abuse checks may prevent a submission; you can use the direct email address instead.

Direct sending or a draft in your browser

With direct sending, the contact service forwards your enquiry to max@tolos.ai through Proton Mail and sends a standard acknowledgement to the address provided. The application processes the message for delivery without saving its content in an enquiry database.

If direct sending is unavailable, the email draft helper remains available. It prepares the draft in your browser without sending it to the contact service or saving it in browser storage. You can copy it or open your email app, then decide whether to send it.

Who receives the data, and where?

Maxime Tolos reads enquiries. The website and contact service run on infrastructure he administers. Cloudflare delivers and protects requests. Proton AG, a Swiss company, provides email services; its Proton Mail policy describes storage in Switzerland, Germany or Norway.

When direct sending is enabled, Cloudflare Turnstile checks connection and browser signals, including IP address, to limit bots. Cloudflare also acts as a controller to improve detection, as explained in its Turnstile notice. The widget does not load when the sending service is disabled.

Processing may take place outside the European Economic Area. Switzerland benefits from an EU adequacy decision. For applicable transfers, Cloudflare’s data-processing terms provide safeguards including EU standard contractual clauses. You can request information about these safeguards at max@tolos.ai.

How long is information kept?

Enquiries that do not become a project: correspondence is kept in the mailbox for up to 12 months after the last meaningful exchange, then deleted. A monthly review applies this retention period. Records needed for a contract, a legal obligation or a dispute have a separate retention period limited to what is necessary.

Form protection: pseudonymous fingerprints, counters and delivery states help detect abuse and duplicates for 24 hours, then are automatically deleted. Cleanup runs every minute while the service is running and when it restarts. The application does not store message content, your name or your email or IP address in readable form in these records; its logs contain operation codes only.

Technical data processed by Cloudflare and email-provider backups follow the providers’ own rules, separately from these application retention periods. See the Cloudflare policy and Proton Mail policy.

Browsing and website protection

Tolos AI adds no advertising or audience analytics. Fonts and visuals are served with the website. Delivery and security services process technical information needed to operate; any security cookies are described in Cloudflare’s cookie policy.

Your rights

You may request access, correction, deletion or restriction of your data. You may object to processing based on legitimate interests for reasons relating to your situation, and request portability where its conditions apply. These rights are subject to the limits set by the GDPR.

Email max@tolos.ai with your request. A proportionate identity check may be necessary. You may also lodge a complaint with the CNIL, the French data-protection authority.