Summary: Torny AI does not sell your data. We do not store your conversation history on our servers. Your chats exist only in your browser. We only collect what we need to operate the service and comply with Philippine law.
1. Who We Are
Torny AI is a Philippine-based AI legal information service. This Privacy Policy explains how we collect, use, and protect your personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
2. What Information We Collect
2.1 Information You Provide
- Chat messages — the questions you type to Torny AI. These are sent to our AI provider (Anthropic) to generate responses and are not stored on our servers after your session ends.
- Payment information — processed entirely by PayMongo and GCash. We never see or store your card number, GCash PIN, or banking credentials.
2.2 Information Collected Automatically
- Anonymous session ID — a randomly generated identifier stored in your browser (localStorage) to track your question count and session access. It contains no personal information.
- Usage analytics — anonymous visit counts and question counts stored in our database (no personal identifiers attached).
- IP address and location — collected by our hosting provider (Vercel) for security and analytics purposes. We see only aggregate country/city data, not individual IP addresses.
2.3 What We Do NOT Collect
- Your name, email address, or phone number (unless you contact us directly)
- Your conversation history — chats are not saved to our servers
- Sensitive personal information as defined under RA 10173 (health, financial account details, biometrics)
3. How We Use Your Information
- To provide the Torny AI service and generate responses to your questions
- To enforce the free question limit and validate paid session access
- To understand aggregate usage patterns and improve the service
- To process payments through PayMongo (we receive only a payment confirmation, not your payment details)
- To comply with Philippine law and respond to lawful requests from authorities
4. Third-Party Services
Torny AI uses the following third-party services. Each has its own privacy policy:
| Service | Purpose | Data Shared |
|---|
| Anthropic (Claude AI) | AI response generation | Your chat messages |
| PayMongo | Payment processing | Payment amount only |
| Vercel | Website hosting | IP address, request logs |
| Upstash Redis | Session and analytics storage | Anonymous session IDs, counts |
5. Data Retention
- Chat messages — not retained on our servers. Once a response is generated, messages are not stored.
- Session data (question count, access token) — stored in your browser's localStorage and expires after 24 hours automatically.
- Anonymous analytics — retained for up to 12 months, then deleted.
- Payment records — retained by PayMongo per their policy and Philippine financial regulations.
6. Your Rights Under RA 10173
As a data subject under the Data Privacy Act of 2012, you have the right to:
- Be informed — know what personal data we collect and how we use it (this policy)
- Access — request a copy of any personal data we hold about you
- Correction — request correction of inaccurate data
- Erasure — request deletion of your personal data
- Object — object to processing of your personal data
- Complain — lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph
To exercise any of these rights, contact us at support@torny.ai. We will respond within 15 business days.
7. Security
We implement appropriate technical and organizational measures to protect your information, including:
- HTTPS encryption for all data in transit
- No storage of conversation history on our servers
- Signed, time-limited access tokens for paid sessions
- No storage of payment credentials
However, no system is 100% secure. Do not share highly sensitive personal information (e.g., ID numbers, account passwords) in your chat messages.
8. Children
Torny AI is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has used our service, contact us at support@torny.ai and we will take appropriate action.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The effective date at the top of this page reflects the most recent revision. Continued use of Torny AI after changes are posted constitutes your acceptance of the updated policy.
10. Contact Us
For privacy-related inquiries or to exercise your rights under RA 10173:
Torny AI
Email: support@torny.ai
For NPC complaints: privacy.gov.ph