Privacy Policy
Last updated: March 4, 2026
Intoru ("we", "us", or "our") operates the website intoru.ai and the Intoru platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
1. Information We Collect
Account Information
When you create an account through Google OAuth, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.
Profile & Product Information
You provide details about your product, ideal customer profile (ICP), competitors, and target subreddits. This information is used solely to configure your lead discovery pipeline.
Payment Information
Payment processing is handled by Stripe. We do not store your credit card number or full payment details. We receive only a confirmation of payment status and subscription details from Stripe.
Usage Data
We collect standard usage data including pages visited, actions taken within the app, and timestamps. This helps us improve the service.
2. How We Use Your Information
- To provide and maintain the Intoru service
- To personalize your lead discovery pipeline based on your product profile
- To process payments and manage your subscription
- To send transactional emails (e.g., new lead alerts, account notifications)
- To improve and optimize our service
- To comply with legal obligations
3. Public Data Processing
Intoru monitors publicly available Reddit posts and comments to identify potential leads for your business. We only access content that is publicly available — we do not access private messages, private subreddits, or any non-public content. The leads we surface are derived from public discussions.
4. Third-Party Services
We use the following third-party services:
- Google OAuth — authentication. Subject to Google's Privacy Policy.
- Stripe — payment processing. Subject to Stripe's Privacy Policy.
- MongoDB Atlas — database hosting (AWS us-east-1 region).
- OpenAI & Anthropic — AI processing for lead scoring and synthesis. Your product profile data is sent to these providers to evaluate leads. Subject to their respective privacy policies.
- Resend — transactional email delivery.
5. Cookies
We use essential cookies and local storage to maintain your authentication session and remember your preferences (e.g., sidebar state). We do not use tracking cookies or third-party advertising cookies.
6. Data Retention
We retain your account data for as long as your account is active. Lead data (opportunities) is retained for the lifetime of your account. If you delete your account, we will delete your personal data within 30 days. Aggregated, anonymized data may be retained for analytics purposes.
7. Data Security
We use industry-standard security measures including encrypted connections (TLS/SSL), secure authentication tokens, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
8. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and personal data
- Export your data in a portable format
- Withdraw consent for optional data processing
To exercise any of these rights, contact us at [email protected].
9. Children's Privacy
Intoru is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy, please contact us at [email protected].