Privacy Policy

Tobie is a benefits app that employers give their teams, built from the plan documents HR approves. This policy explains what information we collect, how we use it, and the choices you have, both on this website (tobie.team) and in the Tobie benefits app that employees use to understand their benefits. Where we act as a service provider to an employer, that employer’s own privacy notices and our agreement with them also apply.

What we collect on this website

We collect only what you choose to send us:

• When you contact us through Talk with us, the details you enter: your first and last name, work email, company, role, an optional phone number, and any brand or benefits documents you upload for us to review.
• Anything you write to us by email.
• Basic site usage, through lightweight, cookieless web analytics (Vercel Web Analytics). We do not run advertising trackers and we do not follow you across other sites.

What we collect in the Tobie app

The Tobie app is the employee benefits hub. Depending on how your employer set it up, it collects:

• Account and sign-in information. Your name and work email, provided through your employer’s single sign-on or a password you set. On our public demo, we capture the email you choose to enter, if any, so we can follow up if you asked us to.
• Content you create. The questions you ask Tobie, comments and reactions on your benefits feed, benefit elections and acknowledgments, and your notification preferences.
• Push notification tokens. If you turn on notifications, we store a device token so we can deliver them to your device.
• Product interaction analytics. Which pages and videos you use, general device type, and a random, pseudonymous analytics id. This is first-party only. We do not use advertising or cross-app tracking, and the app has no advertising identifier.

How we use information

We use the information above to:

• respond to you and prepare what you asked for,
• operate, secure, and improve the service, and
• personalize the benefits guidance you see.

Your information is never sold and never used for advertising. Tobie never uses customer content to train AI models; how our AI providers handle questions is described below.

Ask Tobie and AI

When you ask Tobie a question, your question is processed by a third-party AI service to generate the answer: Anthropic’s Claude Haiku 5.5, with Google Gemini as its backup, or Google Gemini alone where your employer’s deployment is configured for it. Before your question leaves our systems, we automatically remove personal identifiers such as email addresses and Social Security numbers. Health details you mention are generalized or removed and are not stored in identifiable form.

These providers act as our service providers on our instruction, to answer your question, not for their own purposes. Anthropic does not use this content to train its models, and Google does not on its paid service tier. If we cannot confirm a provider’s data-handling terms for a deployment, the app generalizes health terms before any question is sent. Tobie provides benefits information, not medical, legal, or tax advice.

Who we share information with

We do not sell your information. We share it only with the vendors that help us run the service, under contract and only for that purpose:

• Anthropic (Claude), to generate Ask Tobie answers, with identifiers removed first.
• Google (Gemini), to generate Ask Tobie answers as the backup to Claude, or where a deployment is configured for it, with identifiers removed first.
• Vercel and Supabase, to host the website and app and to store data.
• Resend, to send transactional email such as confirmations.

Our Security and Trust Center lists the complete, current set of subprocessors, what each one does, and the data it handles.

How long we keep information

We keep what you send us for as long as we need it to provide the service and to meet legal or compliance obligations, then delete it. Ask Tobie conversation history is retained only for a short period before it is deleted, and stored conversations already have personal identifiers stripped out. We use your IP address only briefly, to rate-limit requests and protect against abuse.

How we protect information

We encrypt data in transit and at rest, isolate each customer’s data in its own tenant so one employer’s information is separated from another’s, and apply rate-limited, least-privilege access controls.

Health information and HIPAA

For employers using the platform, benefits documents and employee information are handled under the minimum-necessary principle; HIPAA and Business Associate Agreement questions are scoped to each customer’s environment and answered on our security page. The app is built so that identifiable health information is not retained: health mentions in Ask Tobie are generalized before storage, and health disclosures in feed comments are blocked rather than stored.

Your rights and choices

You can ask what information we hold about you and ask us to delete it:

• In the app, signed-in employees can delete their account and data from account settings.
• Anyone can request deletion without signing in at our public data deletion page. We email a confirmation link to the address you enter and act only after you confirm.
• You can also email security@tobie.team. We respond within one business day.

Children

The service is offered to employers for their workforce and is not directed to children under 13. We do not knowingly collect information from children under 13.

Changes to this policy

If we make a material change, we will update this page and the “Last updated” date above and, where appropriate, notify affected customers. The version published here is the one that applies.

Contact

Questions about this policy, or about your information, can go to security@tobie.team.