Privacy Policy

Last updated: July 31, 2026

This Privacy Policy explains how Tobex — Software & Marketing Studio ("Tobex," "we," "us") collects, uses, and protects information when you use tobex.io (the "Site") or contact us. Tobex is based in Los Angeles, California, and serves businesses across California and the United States.

If you have any questions, email info@tobex.io.

1. Information we collect

Information you give us through forms. When you submit the proposal wizard, the portfolio-access form, or the contact form, we collect the details you enter — which may include your name, email address, phone number, company name, the services you're interested in, and any message or project details you provide. Name and either an email or phone number are required so we can reply; everything else is optional.

Technical information. Like most websites, when you load a page or submit a form, our infrastructure automatically receives your IP address and basic request metadata (such as browser type and timestamp). We use the IP address only transiently — to protect our forms from spam and abuse (rate-limiting) and for standard server operation and security logging by our hosting provider. We do not build advertising or behavioral profiles from it.

We use Google Ads conversion tracking, delivered through Google Tag Manager, to measure when a visitor submits one of our forms after interacting with our advertising. This sets cookies and shares limited event data with Google — see "Cookies and tracking" and "Service providers" below, including how to opt out.

2. How we use your information

We use the information you provide to:

• respond to your inquiry and follow up about your project (we aim to reply within one business day);
• prepare proposals, portfolio examples, and plans tailored to your business;
• deliver and support the services you engage us for;
• protect the Site and our forms from spam and abuse.

We do not use your information for automated decision-making, and we do not sell it.

3. How your form submissions are handled

When you submit a form, the data is sent over an encrypted (HTTPS) connection to a serverless function hosted on Netlify, which forwards the submission to us by email through Resend, our transactional email provider. The message is delivered to our info@tobex.io inbox. We do not store your submission in a separate database; it lives in our email and in the systems described below.

4. Service providers

We share personal information only with the vendors that make the Site and our communications work, and only to the extent they need it to perform their service:

These providers process data under their own terms and security practices. We do not sell or rent your personal information for money. Our use of Google Ads may involve the "sharing" of certain online identifiers for advertising as defined under California law — see "Your California privacy rights" below for how to opt out.

5. Cookies and tracking

We use Google Ads conversion tracking, delivered through Google Tag Manager, which sets cookies and collects standard device and usage information through Google to measure whether our advertising leads to form submissions. We use this only to measure and improve our ads — we do not use it to build our own profiles of you, and the contents of your form messages are not sent to Google.

You can opt out of personalized Google advertising through Google Ads Settings, opt out of Google Analytics via Google's browser add-on, and block or delete cookies in your browser settings. We do not currently use any other analytics or advertising tools; if we add more, we will update this Policy first.

6. Data retention

We keep your inquiry and related correspondence for as long as reasonably necessary to respond to you, provide services you request, and meet legal or business record-keeping needs. You may ask us to delete your information at any time (see "Your California privacy rights"), and we will do so unless we are required to retain it.

7. Security

We use reasonable technical and organizational measures to protect your information, including HTTPS encryption in transit, spam/abuse protection on our forms, and limiting access to submissions to the team members who need it. No method of transmission or storage is 100% secure, but we work to protect your data and to correct issues promptly.

8. Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know / access the categories and specific pieces of personal information we have collected about you;
• Delete personal information we hold about you;
• Correct inaccurate personal information;
• Opt out of the sale or sharing of your personal information — we do not sell your information for money, but our use of Google Ads may involve "sharing" of online identifiers for cross-context advertising as defined under the CPRA. You can opt out via Google Ads Settings, your browser's cookie controls, or by emailing us;
• Limit the use of sensitive personal information — note we do not collect sensitive personal information through the Site beyond what you volunteer to us;
• Non-discrimination for exercising any of these rights.

To exercise any of these rights, email info@tobex.io with your request. We will verify your request using the contact information you provide and respond within the timeframes required by law. You may designate an authorized agent to make a request on your behalf.

9. Children's privacy

The Site is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this policy

We may update this Policy as our practices or the law change — most notably, we will revise it before introducing any analytics or advertising tracking. When we make material changes, we will update the "Last updated" date above.

11. Contact us

Tobex — Software & Marketing Studio

Los Angeles, California, United States

Email: info@tobex.io