This policy explains how Tillora LLC (“Tillora”, “we”) handles information when you use the Tillora apps for iPhone and Mac, the web app, and tillora.com (together, the “Service”).
What we collect
- Account information: your email address and an encrypted password.
- Business records you add: your company details, clients, proposals, invoices, payments, expenses, contracts, reminders and the files you upload (such as logos, receipts and photos of checks).
- Marketplace information: projects customers post (description, photos, city and ZIP, and contact details), applications from pros (business details, license and insurance documents), and the quotes and messages exchanged about a project.
- Text-line messages: texts and photos sent to a business's Tillora text line, and the replies the line sends.
- Connected email: if you sign in to an email account (such as Gmail or Outlook), Tillora reads your messages, attachments and contact details to show your mail, match emails to your clients and jobs, and send email you choose to send. For Outlook, we keep an encrypted sign-in token on our servers so your Inbox and Runners keep working; we don't keep copies of the email itself.
- Forwarded email: if you forward your email to your business's private Tillora address, we store those copies in your business account so you, your team and your Runners can read, sort and answer them. You can delete them at any time, and they're deleted with your account. Replies you send from Tillora go out from Tillora under your business name, with replies coming back to your own address.
- Online payment information: if your business accepts invoice payments through Tillora, the payment status, amount, date and method for each payment. Card and bank details are entered on Stripe's pages and go to Stripe, never to us.
- What Tillora remembers: preferences and facts you tell Ask Tillora to keep (for example how you like invoices worded), so it doesn’t ask again. You can see, edit or erase them, or switch memory off, in Settings › What Tillora remembers. Passwords and card or account numbers are never saved.
- Your birthday, only if you add it: the month and day (never the year), the name to greet you by, and whether you want a birthday email. We use it only to wish you a happy birthday, and you can remove it any time in Settings › Account.
- Support messages you send us in the app or by email.
- Support phone calls: when you call our support line, our SI assistant (Ava) answers. We keep a text transcript of the call (not an audio recording), your caller ID, and anything you choose to tell us, such as your name, a callback number or email, and what you need. If you rate the call at the end, we keep your rating and any comment. We use this to help you, follow up on messages, and improve our support. You can ask us to delete it by emailing support@tillora.com.
- Basic technical data needed to run the Service, such as device type and error information.
We do not use advertising trackers, and we do not sell or rent your information.
How we use it
- To provide the Service: store and sync your records across your devices, create documents and run reports.
- To run the AI features you choose to use, such as writing a document or reading a check photo.
- To run the marketplace: we show a posted project (without contact details) to approved pros who work in that area and trade. A customer's phone and email are shared only with the pros who take the project, up to 3.
- To answer support requests and keep the Service secure. Our SI support assistant answers many support emails and calls, and a person handles anything it can’t. Call ratings and comments help us see what to improve.
Service providers
We use a small number of providers to run Tillora, and they may process your information only on our behalf:
- Google Firebase (Google Cloud) for sign-in and for storing and syncing your records.
- Anthropic to run the AI assistant. When you use an AI feature, the text and files needed for that request are sent to Anthropic's API to produce the result. Emails you send to support@tillora.com, and what you say on a call to our support line (as text), are handled the same way so our support assistant can answer.
- Google Workspace for our email.
- Resend to send account, welcome and update emails.
- Twilio to run business text lines.
- Telnyx to run our support phone line and its speech-to-text.
- Stripe to process online invoice payments for businesses that turn them on, and optional payments to back Tillora. Stripe receives card and bank details directly; we never see card or bank account numbers. Stripe handles that information under its own privacy policy.
- Google (Gmail API) when you choose to connect a Gmail account.
- Microsoft (Microsoft Graph) when you choose to connect an Outlook or Microsoft 365 account.
- Resend also receives email forwarded to your Tillora address and sends the replies you write in Tillora.
Text messages (SMS and MMS)
A business's Tillora text line is for its own team. The business owner adds each team member's mobile number and confirms the person agreed to text the line and get its replies; the team member then sends the first text. The line replies only to confirm what was saved, ask for a missing detail, or send job details from the owner. It is never used for marketing. Message frequency varies, and message and data rates may apply. Reply STOP to stop all texts, START to turn them back on, or HELP for help. Details: tillora.com/text-line.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties. Mobile numbers and texts are used only to run the text line, and are shared only with the service providers that deliver the messages (Twilio and the phone carriers).
Security
Your data is encrypted in transit and at rest. Records are stored under your business account, and access rules allow only members of that business to read them. No system is perfectly secure, so please use a strong password and keep it private.
Storage on your device
The apps keep a copy of your records on your device so they open fast and work with a weak signal. Signing out does not delete your records from your account.
Your choices
- You can view, edit, export or delete your records in the app at any time.
- You can delete your account in the app at any time: Settings › Account › Delete my account (customers: Account › Delete my account). Deletion happens right away and removes your account, your records and files, your marketplace projects or pro profile, and your shared links. If a business owner deletes their account, the business is deleted for its whole team.
- We keep only what we need for accounting and records: fees owed to Tillora by pros, a log of the emails we sent you (address, subject and date), and a deletion receipt with your account ID. Copies in our encrypted backups are overwritten within 7 days.
- If you can't sign in, email support@tillora.com from your account email and we'll delete it within 30 days.
- You can ask for a copy of your information by emailing support@tillora.com.
Gmail, Outlook and forwarded email
Connecting email is optional, and you can disconnect it at any time from the Inbox (you can also remove Tillora's access from your Google or Microsoft account). For Gmail and Outlook, Tillora doesn't keep copies of your messages on our servers, and disconnecting revokes Tillora's access. For forwarding, turn off forwarding in your email's settings to stop new copies, and trash any copies in Tillora whenever you like; trashed email is deleted for good after 30 days.
Tillora's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Gmail data only to provide and improve the email features you see in Tillora; we don't use it for advertising, we don't sell it, we don't use it to train general AI models, and no person at Tillora reads it unless you ask us to for support, it's needed for security or to comply with the law. When you use an AI feature on an email, only the content needed for that request is sent to our AI provider to produce the result.
Children
The Service is for businesses and is not directed to anyone under 18.
Changes
If we change this policy in a meaningful way, we'll tell you in the app or by email before the change takes effect.
Contact
Tillora LLC, 31 Covert Avenue, #51, Floral Park, NY 11001. Email support@tillora.com.