Privacy Policy

How we handle your information.

Effective date: · Last updated:

TOAI LLC ("TOAI", "we", "us", or "our") respects your privacy. This policy explains what we collect when you use toaibrands.com, why we collect it, and what you can do about it. It is written in plain language because we think you should be able to read it without a lawyer.

1. What we collect

When you submit the Body Map signup form on toaibrands.com, we collect:

  • Your name — to personalize the email we send you.
  • Your email address — to deliver the Body Map PDF and, occasionally, product updates you can unsubscribe from at any time.

When you simply browse the website, our hosting provider (Hostinger) automatically logs standard server information for security and analytics, including:

  • Your IP address
  • The pages you visit and the time you visit them
  • Your browser type and operating system
  • The website that referred you (if any)

We do not collect payment information on this website. All purchases of TOAI products happen on Amazon US under Amazon's own privacy policy.

2. Cookies and similar technologies

The website sets a single session cookie used only to protect the signup form against fraudulent submissions (a CSRF token). This cookie expires when you close your browser and is not used to track you across the web.

We do not currently use third-party advertising cookies, retargeting pixels, or behavioral tracking. If that changes in the future, this policy will be updated and a banner will appear before any tracking begins.

3. How we use your information

We use the information you provide to:

  • Send you the Body Map PDF you requested
  • Send occasional product updates, usage tips, or new-release announcements (no more than once a month)
  • Reply to support questions you send us
  • Detect and prevent abuse of our forms (rate limiting, CSRF protection)

We do not sell your information, ever. We do not share it with advertisers, data brokers, or marketing networks.

4. Who we share information with

To run the website we use a small number of trusted service providers:

  • Hostinger — hosts the website and the database where signups are stored.
  • Google (Fonts) — serves the typefaces used on the site. Google may log your IP address when fonts load.
  • Amazon — when you click "Buy on Amazon", you leave our site and Amazon's privacy policy applies.

We may also disclose information if required by a valid legal process (a subpoena, court order, or government request) or if necessary to protect our rights, our customers, or the public.

5. How long we keep your information

We keep signup records (name, email, submission timestamp) for as long as you remain on our list, or until you ask us to delete them. Server logs are kept for 90 days for security purposes, then automatically purged.

6. Your rights

You have the right to:

  • Access the personal information we hold about you
  • Correct any information that is wrong or out of date
  • Delete your information from our database
  • Unsubscribe from our emails at any time using the link at the bottom of every email
  • Object to how we use your information

To exercise any of these rights, email support@toaibrands.com with the subject line "Privacy request" and we will respond within 30 days.

7. California residents (CCPA)

If you live in California, the California Consumer Privacy Act gives you the right to know what personal information we collect, request deletion of that information, and opt out of the sale of your personal information. We do not sell personal information, so the opt-out is automatic. To make any other CCPA request, email support@toaibrands.com.

8. International visitors

This site is operated from the United States. If you visit from outside the US, your information will be transferred to and processed in the US, where data protection laws may differ from those in your country. If you are a resident of the European Economic Area or the United Kingdom and would like to exercise your GDPR rights, email support@toaibrands.com.

9. Children's privacy

This site is not directed to children under 13, and we do not knowingly collect information from children under 13. If you believe a child has submitted their information to us, email support@toaibrands.com and we will delete it promptly.

10. Security

We use standard industry practices to protect your information: encrypted (HTTPS) connections, password-protected database access, and credentials stored outside of the public web directory. No system is perfectly secure. If we ever discover a breach affecting your information, we will notify you within 72 hours.

11. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page. Significant changes will be announced by email to active subscribers.

12. Contact us

If you have a privacy question or request:

For general wellness use only. TOAI is not a medical device. Nothing on this site or in the Body Map PDF is medical advice. Always consult a qualified healthcare professional regarding any medical concern.