TTobyAI

Legal

Privacy Policy

Effective 20 September 2026  ·  TobyAI

TobyAI is the trading name of Stelliot Investments Pty Ltd (ABN 81 127 096 851). References to we and us mean that company. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy covers the website at www.tobyai.io. The portal at app.tobyai.io, the API and the tools have their own TobyAI Privacy Policy, which says how customer accounting data is handled.

What we collect on this site

When you register your interest, we collect your email address. We use it solely to contact you about TobyAI: launch, early access and product news. We do not sell it, and we do not disclose it to anyone other than the service providers described below, who hold or process it on our behalf. You can opt out at any time by replying to a message or emailing hello@tobyai.io, and we stop contacting you when you do.

Waitlist submissions are stored in our own database in the Sydney region of Amazon Web Services, encrypted at rest, and are not held in any third-party spreadsheet or marketing service. Our server logs record a salted hash of your address rather than the address itself, and your email address is never sent to an AI provider.

Site traffic

We measure site traffic with Netlify Site Analytics, which our host counts from its own server logs. No script runs in your browser, no cookie is set and no persistent identifier is created. It records the page requested, the site that referred you and the country of the request, and reports them to us only in aggregate. Netlify processes these logs outside Australia; they contain no product or customer data. Apart from that, we do not disclose personal information collected on this site to overseas recipients.

Access, correction, deletion and complaints

To access, correct or delete your information, email hello@tobyai.io. We respond within 30 days and do not charge. If you think we have mishandled your information, write to the same address and we will investigate and reply within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If we change what this site collects or who processes it, we update this policy with a new effective date before the change goes live.