Privacy Policy
Last updated: October 14, 2026
TOM AI™ is operated by Tara Ann OMalley, a sole proprietor based in Texas, United States. Contact: taraannomalley@gmail.com.
Who can use TOM AI
TOM AI is for people aged 18 or older. We do not knowingly collect information from anyone under 18.
What we collect
Account: your email address and sign-in details, or the basic profile Google shares if you sign in with Google.
Business Profile: any optional business details you choose to enter, such as your niche, audience, offer and buying method.
Your work: your questions to Ask TOM AI, the content you create, saved drafts and strategies, and your Instagram audits.
Screenshots: the Instagram screenshots you upload for an audit.
Usage records: the date and type of each AI use (not its content), used to apply usage limits.
Subscription status: your plan status and billing period, received from Stripe.
How your information is used
We use your information only to provide TOM AI to you: to run your audits, answer your questions, create your content, save your work and manage your subscription. We do not sell your information. Your information is not shown to other customers.
Screenshots
Screenshots are stored in private storage that only your account can access. When you delete an audit, its screenshots are deleted, unless another of your audits uses the same screenshots; in that case they are kept until that audit is also deleted.
AI processing
To produce a reply, the text you send, relevant Business Profile details and, for audits, your screenshots are sent to third-party AI model providers through our AI service provider, Lovable. These providers process the information to generate a response.
How long those providers keep data, and whether they use it for training, is governed by their own terms. We cannot make guarantees about third-party providers beyond those terms.
Payments
Payments are processed by Stripe and its payment partners. TOM AI never sees or stores your full card details. Stripe's handling of your payment information is governed by Stripe's privacy policy.
Retention
We keep your account information and saved work until you delete it or ask us to delete your account. Usage records are kept for as long as your account exists. Billing records may be kept by us and by Stripe where the law requires it.
Deleting your information
You can delete individual drafts, strategies, conversations and audits at any time, and delete all conversation history in Settings. Deleted items are removed from the app immediately. Copies may remain in our hosting provider's routine backups for a limited time.
To delete your entire account, email taraannomalley@gmail.com from your registered account email. We will verify the request, cancel any active subscription, and delete your account, Business Profile, chats, saved content, audits, screenshots and usage records within 30 days, subject to legally required retention and the backup limitation above.
Your rights
Depending on where you live, you may have rights to access, correct, delete or receive a copy of your information. Contact taraannomalley@gmail.com to make a request.
Changes to this policy
We will give at least 30 days' advance notice of material changes, except where a shorter period is required by law or an urgent security or legal issue requires immediate action.
