Privacy Policy

Introduction

Think Neverland, LLC ("we," "our," or "us") operates Tinker Tone, an AI-powered writing assistant. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service, including our web application, Microsoft Outlook add-in, Microsoft Teams extension, and Microsoft Word, Excel, PowerPoint, and OneNote add-ins.

By using Tinker Tone, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

Information We Collect

Personal Information

We collect information that identifies you as an individual, including:

• Name and email address
• Account credentials (encrypted passwords)
• Company name and job title (optional)
• Billing and payment information
• Communication preferences

Usage Data

We automatically collect certain information when you use Tinker Tone:

• Content you choose to rewrite, including emails, documents, notes, cell data, and slide text (processed but not permanently stored by default)
• Voice profile settings and preferences
• Usage statistics (number of rewrites, feature usage)
• Device information (browser type, operating system)
• IP address and location data
• Log data and error reports

Third-Party Integration Data

When you connect Tinker Tone to Microsoft 365 applications (Outlook, Teams, Word, Excel, PowerPoint, or OneNote):

• We access your content only when you explicitly request a rewrite
• We do not read, store, or access your content without your direct action
• Integration tokens are encrypted and stored securely
• We only request the minimum permissions necessary for functionality

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve Tinker Tone services
• Process your content rewrites using AI technology
• Create and maintain your voice profiles
• Process payments and manage subscriptions
• Send service updates, security alerts, and support messages
• Respond to your requests, questions, and feedback
• Analyze usage patterns to improve our service
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

Data Processing and AI

When you use Tinker Tone to rewrite content:

• Your content is sent to our AI processing servers
• Content is processed in real-time and not stored permanently (unless you opt-in)
• We use industry-leading AI providers with strong privacy commitments
• All data transmission is encrypted using TLS 1.3
• Paid plan customers can use BYOK (Bring Your Own Key) encryption for enhanced data protection

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We share data with trusted third-party service providers who assist us in operating our service:

• Anthropic (Claude): AI content processing — primary provider. See Anthropic's Privacy Policy.
• OpenAI: AI content processing — optional/BYOK provider. See OpenAI's Privacy Policy.
• Stripe: Payment and subscription processing. See Stripe's Privacy Policy.
• Resend: Transactional email delivery. See Resend's Privacy Policy.
• Microsoft Graph API: Integration with Microsoft 365 applications (Outlook, Teams, Word, Excel, PowerPoint, OneNote).
• Railway: Cloud hosting infrastructure.
• Sentry: Error tracking and performance monitoring (optional). See Sentry's Privacy Policy.

Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

If Think Neverland, LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and penetration testing
• SOC 2-ready security architecture
• Role-based access controls
• Multi-factor authentication support
• Regular employee security training
• Incident response procedures

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to provide our services:

• Account information: Until you delete your account, plus 30 days
• Voice profiles: Until you delete them or your account
• Email content: Not stored permanently (unless you opt-in for training)
• Usage logs: 90 days
• Billing records: 7 years (legal requirement)

After account deletion, all personal data is permanently removed within 90 days, except where retention is required by law.

Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a machine-readable format
• Opt-out: Unsubscribe from marketing communications
• Restriction: Limit how we process your data
• Objection: Object to certain data processing activities

To exercise these rights, contact us at hello@thinkneverland.com. We will respond within 30 days.

International Data Transfers

Tinker Tone is operated from the United States. If you are located outside the U.S., your information will be transferred to and processed in the U.S. We use standard contractual clauses and other legal mechanisms to ensure adequate protection of your data.

Children's Privacy

Tinker Tone is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

California Privacy Rights

If you are a California resident, you have additional rights under the CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

GDPR Compliance

If you are in the European Economic Area (EEA), we process your data based on:

• Contract: To provide the services you requested
• Consent: When you give us permission
• Legitimate interests: To improve and secure our service
• Legal obligation: To comply with applicable laws

You have the right to lodge a complaint with your local data protection authority.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide prominent notice or seek your consent where required by law.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: