Privacy Policy

tomapo is operated by Francesca Anne Louise Angeles, an individual entrepreneur (autónomo) registered in Spain, who acts as the data controller for the personal data described in this policy. Full identification details are in our Legal Notice. For any question about your data, contact hello@tomapo.co.

tomapo collects personal data in three places:

• Account data. When you sign up, our authentication provider, Clerk, collects your email address and, if you sign in with Google, your name and profile information from that account.
• Your uploaded documents and what we extract from them.The insurance policy PDF you upload, the text extracted from it, and the AI-generated summary (coverage, exclusions, deductible, and — where the document states them — your insurer's name, policy number, policy type, effective date, and renewal date).
• Your chat history.Questions you ask about a policy and the AI's answers, stored against that policy so the conversation persists between visits.

We don't collect payment information, since tomapo doesn't currently process any payments, and we don't use analytics or advertising tools that would collect data about how you use the site — see our Cookie Policy for the full, short list of what little browser storage we do use.

Insurance policies — especially health or life insurance — can reveal health-related information about you, which data protection law treats as a special category of personal data deserving extra protection (Article 9 of the GDPR). Because of that, before you upload a document, we ask you to explicitly confirm that you have the right to upload it and that you consent to it being processed as described in this policy. We only process that data for the purpose you uploaded the document for: generating your summary and answering your questions about it.

• To provide the service you asked for — creating your account, processing an uploaded policy, generating its summary, and answering your questions about it — on the basis that this is necessary to perform our contract with you (Article 6(1)(b) GDPR).
• To process any special category data your document contains, on the basis of your explicit consent (Article 9(2)(a) GDPR), given at upload.
• To keep the service secure— detecting abuse and enforcing the free plan's upload limit — on the basis of our legitimate interest in operating a reliable, non-abused service (Article 6(1)(f) GDPR).

We don't sell your data, and we don't use it to train AI models. We do rely on the following service providers to run tomapo, each acting as a processor on our instructions and only for the purpose stated:

• Clerk — authentication and account management.
• Neon — hosts our Postgres database (your policies, summaries, and chat history).
• Cloudflare (R2) — stores your uploaded PDF files in a private bucket; files are only ever accessed through short-lived, single-use links, never a public URL.
• Microsoft Azure (Document Intelligence) — extracts the text from your uploaded PDF so it can be summarized.
• OpenAI — generates your policy summary and powers the chat feature, from the text extracted from your document.

Some of these providers may process data outside the European Economic Area, including in the United States. Where that happens, we rely on the safeguards each provider commits to as part of their standard data processing terms, such as the European Commission's Standard Contractual Clauses.

We keep your account, your uploaded documents, their summaries, and your chat history for as long as your account exists. Deleting a specific policy removes that policy's document, summary, and chat history immediately. Deleting your account removes everything we hold about you — see "Deleting your account" below.

Your policy summary and chat answers are generated automatically by an AI model. This isn't an automated decision that produces legal or similarly significant effects about you under Article 22 GDPR — it doesn't grant, deny, price, or alter any insurance coverage. It's a plain-English explanation of a document you already have, and every summary makes clear it's AI-generated and should be checked against your original document for anything that matters.

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time, for any processing based on consent

To exercise any of these, email hello@tomapo.co. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe your data has been mishandled.

You can delete your account yourself at any time from your account settings (open the account menu → Manage account → Security → Delete account). Doing so permanently deletes every policy, uploaded document, summary, and chat message associated with your account, including the underlying files stored with our providers — this cannot be undone.

Uploaded documents are stored in a private cloud storage bucket that is never publicly accessible — the app only ever reads or writes it through short-lived, single-use links. Connections to tomapo are encrypted, and access to your data within our systems is limited to what the service needs to function.

tomapo is intended for adults capable of entering into a contract. We don't knowingly collect personal data from children.

If we change what data we collect or how we use it, we'll update this page and its "Last updated" date. We won't make a material change without also updating this page before it takes effect.

Questions about this policy or your data can be sent to hello@tomapo.co.