Last updated: August 14, 2026.

This policy explains what Tolmo collects when you visit our website, use our platform, or get in touch, and what we do with it. For security and compliance detail, see our Trust Center.

Who this covers

Tolmo, Inc. (“Tolmo”, “we”, “us”, “our”) operates tolmo.com, our documentation, blog and newsletter, and the Tolmo platform. This policy covers all of them. Tolmo, Inc. is a Delaware corporation with its principal place of business at 77 Geary Street, San Francisco, CA 94108, United States, and is the controller of the personal information described here.

It does not cover the data your organization sends into the platform as a customer — your code, infrastructure and findings. We process that on your instructions under your agreement with us, not under this policy.

What we collect

What you give us. Your name, work email, job title, company, and anything else you enter into a form — a demo request, the newsletter, a gated resource, a job application, or an email to us. If you create an account, the details and configuration you provide.

What we collect automatically. Your IP address and the approximate location derived from it, browser and device details, pages viewed, referring URLs, campaign parameters (such as utm_* and advertising click identifiers), and how you interact with our pages. We use cookies and similar browser storage for this, and to remember things such as whether you have already unlocked a resource.

What we get from others. We use business-audience providers that identify visiting companies, and in some cases individual visitors, by matching network and device signals against their own datasets. We may therefore learn your employer, name, role or professional profile without you having given it to us. We also receive contact details from advertising platforms when you submit a form hosted by them, such as a LinkedIn Lead Gen Form.

Why we use it

To operate, secure and improve our website and platform; to respond to you; to send you product news, security research and marketing; to identify and contact organizations likely to benefit from Tolmo; to measure and target our advertising; to detect and prevent abuse; and to comply with law. We may combine information from any of the sources above.

Who we share it with

We share personal information with providers who process it on our behalf. Today those include Attio (CRM), PostHog (analytics), Apollo.io and RB2B (visitor identification, along with the identity and geolocation providers they use, including LiveIntent/LiveRamp and ip-api), LinkedIn (advertising and its Insight Tag), Typeform (forms), Substack (newsletter), Datadog (security logging), Google (font delivery) and Amazon Web Services (hosting). This list changes as our stack does.

We also disclose personal information to our professional advisers, to a buyer or investor in connection with a merger, financing or sale of assets, and where we believe disclosure is required by law or a valid legal request.

We do not sell personal information for money. Some of the advertising and analytics described above may qualify as “sharing” or “targeted advertising” under certain US state privacy laws. To opt out, email support@tolmo.com.

Cookies and tracking

We use cookies, localStorage and similar technologies for essential site function, analytics, and advertising.

Essential storage is always on — remembering that you unlocked a resource, for example, because that is what makes the thing you asked for work. Everything else, including our analytics and the advertising and visitor-identification tags described above, loads only if you accept it in the banner we show on your first visit. If you reject, those tags are never added to the page at all.

You can change your decision at any time using Cookie Settings in the footer, and you can block or delete cookies in your browser, though parts of the site may then stop working properly. We do not currently respond to “Do Not Track” browser signals.

Your choices

Unsubscribe from marketing email using the link in any message. To request access to, correction of, or deletion of your personal information — or to object to how we use it — email support@tolmo.com. Where privacy law gives you those rights, we will honor them within the time it allows. We may need to verify your identity first, and we will not discriminate against you for exercising them.

How long we keep it

As long as needed for the purposes above, and after that for as long as we need it to resolve disputes, enforce our agreements, and meet our legal and accounting obligations.

Security

We take reasonable technical and organizational measures to protect personal information, described in our Trust Center. No website, product or method of transmission is completely secure, and we cannot guarantee absolute security.

Where we process it

Tolmo, Inc. is based in the United States and processes personal information there and in other countries where our providers operate. If you are in the European Economic Area, the United Kingdom or Switzerland, using our website or platform involves transferring your information to the United States.

Children

Our website and platform are for business use and are not directed to anyone under 16. We do not knowingly collect their personal information.

Changes

We may update this policy at any time. The current version is always posted here with the date it took effect, and continued use of our website or platform after an update means you accept it.

Contact

Questions, requests, or complaints:

Tolmo, Inc.
77 Geary Street
San Francisco, CA 94108
United States
support@tolmo.com