Back

Privacy Policy

Last updated: February 18, 2026

1. Introduction

This Privacy Policy explains how Tonpit (“we,” “us,” or “our”) collects, uses, and protects your information when you use our AI typography design service.

By using Tonpit, you agree to the collection and use of information as described in this policy. This policy should be read together with our Terms of Service.

2. Information We Collect

Information You Provide

  • Account information: Email address and name (via Google authentication or email signup)
  • Payment information: When you subscribe, payment is processed by Lemon Squeezy (our Merchant of Record). We do not store your credit card number. Lemon Squeezy shares your email and subscription status with us
  • Content you create: Text inputs, typography designs, and project data
  • Communications: Messages if you contact us for support

Information Collected Automatically

  • Usage data: Features used, designs generated, export actions
  • Device information: Browser type, operating system, IP address
  • Cookies: Session cookies for authentication and preferences

Information from Third Parties

  • Google: If you sign in with Google, we receive your name and email from your Google account

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Process payments and manage your subscription
  • Process your text through AI to generate typography designs
  • Save and sync your projects across devices
  • Send service-related communications (account verification, important updates)
  • Improve the Service based on usage patterns
  • Prevent fraud and abuse
  • Comply with legal obligations

AI Processing: Your text inputs are sent to AI APIs (Anthropic Claude, Google Gemini) to generate typography designs. This processing is essential to provide the core functionality of Tonpit.

4. How We Share Your Information

Service Providers

ProviderPurposeData Shared
Anthropic (Claude)AI typography generationYour text inputs
Google (Gemini)AI typography generationYour text inputs
Google FirebaseAuthentication & databaseAccount info, project data
Lemon SqueezyPayment processingEmail, name, payment info
AWS (Remotion Lambda)Video renderingDesign data for export

Other Sharing

We may share your information:

  • Legal requirements: When required by law or to protect our rights
  • Business transfers: In connection with a merger, acquisition, or sale of assets (you will be notified)
  • With consent: When you explicitly authorize sharing

We do not sell your personal information.

5. Data Retention

  • Active accounts: We retain your data while your account is active
  • After deletion: Account data is deleted within 30 days of account deletion request
  • Project data: Deleted when you delete projects or your account
  • Payment records: Retained as required by law (typically 7 years). Managed by Lemon Squeezy
  • Anonymized analytics: May be retained indefinitely

6. Your Rights

All Users

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Export your project data

EU Users (GDPR)

If you are in the European Union, you also have the right to:

  • Object to processing
  • Restrict processing
  • Withdraw consent at any time
  • Lodge a complaint with your local supervisory authority

California Users (CCPA)

If you are a California resident, you have the right to:

  • Know what personal information is collected
  • Request deletion of your data
  • Opt-out of sale of personal information (we don't sell data)
  • Non-discrimination for exercising your rights

How to Exercise Your Rights

Email us at itayozari@gmail.com with your request. We will respond within 30 days.

7. Security

We implement appropriate security measures including:

  • Encryption in transit (HTTPS)
  • Secure authentication via Firebase
  • Access controls for data storage
  • Regular security reviews

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

8. International Transfers

Tonpit is operated from Israel. Your data may be transferred to and processed in the United States (AWS, Anthropic, Google) and Google's global infrastructure.

By using Tonpit, you consent to these transfers. For EU users, these transfers are conducted in compliance with applicable data protection laws.

9. Children's Privacy

Tonpit is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you believe a child has provided us with personal data, please contact us at itayozari@gmail.com and we will delete it promptly.

10. Third-Party Links

Tonpit may contain links to external websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Chrome Extension (Tonpit UI Capture)

Tonpit UI Capture is an optional Chrome extension that lets you capture a website's visual layout as simplified HTML. This section explains how the extension handles your data.

What the Extension Captures

When you explicitly select an element or page to capture, the extension collects:

  • The visible HTML structure and inline styles of the selected element
  • Font names used on the page
  • Small images (under 30KB) inlined as base64
  • Page metadata: source URL, viewport size, element dimensions

What the Extension Does NOT Collect

  • Browsing history or navigation data
  • Passwords, form inputs, or authentication tokens
  • Cookies or local storage from websites
  • Any data from pages you don't explicitly capture
  • Personal information or user-generated content on the page

Where Data Is Stored

All captured data is stored locally on your device using Chrome's built-in storage (chrome.storage.local). Captures are never automatically sent to Tonpit's servers or any third party.

How Data Leaves Your Device

The only way captured data leaves your device is when you manually copy it to your clipboard and paste it into the Tonpit workspace. This is always user-initiated — the extension never transmits data on its own.

Permissions

PermissionWhy It's Needed
Access to all websitesTo capture UI from any site you choose
Active tabTo read the DOM of the page you're currently viewing
StorageTo save captures locally on your device
Clipboard writeTo copy captured HTML to your clipboard

Uninstalling

Removing the extension deletes all locally stored captures. No data persists on our servers because none was ever sent.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be indicated by updating the “Last updated” date at the top.

For material changes, we will notify you via email or in-app notification before the changes take effect.

13. Contact Us

For privacy questions or to exercise your data rights:

Email: itayozari@gmail.com