Privacy Policy
Effective date: August 22, 2026
The short version
We collect what you send us (your name, email, and what you tell us about your business). We use it to reply to you and run the services you buy. We don't sell it. Payments go through Whop, so we never see your card number. We use Whop's tracking script to see which pages lead to a purchase. You can ask us to show you your data, correct it, or delete it, and we'll do it. Detail below.
Tolltod Solutions LLC ("Tolltod," "we," "us," or "our") provides AI-powered cold email systems, lead generation, and related consulting. This policy explains what we collect through tolltod.com (the "Site") and when you engage our services, how we use it, and what rights you have.
1. Who we are
Tolltod Solutions LLC is the business responsible for the information described here. We operate from Trollhattan, Sweden. Because we operate from within the EU, EU data protection law applies to how we handle your information, and you can reach us directly rather than through a representative. Contact details are in Section 13.
2. What we collect
2.1 What you give us
- Contact details you submit through our form or by email: name, work email, company, phone, and whatever you tell us about your goals.
- Anything you send while replying to us or discussing an engagement.
- If you become a client: the information we need to deliver the work, such as your offer details, target audience definition, and any campaign materials you share.
- Billing information. Purchases go through Whop, which processes payment and shares transaction details with us. We never receive or store your full card number.
2.2 What we collect automatically
- Log and device data: IP address, browser and device type, referring and exit pages, timestamps.
- Usage data: which pages you visit and how you move through the Site.
- Cookies and similar technologies, covered in Section 3.
3. Cookies and tracking
Two kinds of cookies are relevant here.
- Essential and functional storage. Small amounts of data needed for the Site to work, including remembering that you have already seen the cookie notice so we stop showing it.
- Whop conversion tracking. Whop, our checkout provider, offers a tracking script that tells us which pages a visitor saw before buying. It's not needed to browse or to purchase, so we treat it as non-essential.
The Whop script loads when a page opens. The banner you see on your first visit is a notice, not a request for permission, and dismissing it only stops us repeating it.
If you would rather not be tracked, you can block cookies or scripts for this site in your browser settings, or use a tracker-blocking extension. Doing so will not stop you browsing the Site or completing a purchase. Whop processes the data collected through this script under its own privacy policy.
If you are in the EU or UK and want your tracking data deleted, email us using the details in Section 13 and we will pass the request to Whop and confirm once it is done.
4. How we use it
- To answer your questions and deliver the plan you bought.
- To run, maintain, and improve the Site.
- To plan and execute cold email campaigns and consulting work for clients.
- To send administrative messages about your account or engagement.
- With your consent, or where otherwise permitted, to send occasional updates. You can opt out any time.
- To meet legal obligations and enforce our agreements.
5. Who we share it with
We do not sell your personal information. We share it with:
- Service providers that help us operate: hosting (Cloudflare), email sending and deliverability tools, data and enrichment providers, analytics, and Whop for checkout and billing.
- AI tool providers, as described in Section 6.
- Professional advisors such as accountants or lawyers, where genuinely needed.
- Authorities, where required by law, regulation, legal process, or an enforceable government request.
- A successor, if the business is merged, acquired, or sold.
6. AI-assisted tools
AI is central to how we work, so it's worth being specific about it.
We use AI-assisted software to draft and personalize email copy, summarize campaign performance, and support prospect research. Where that involves your data, a limited and relevant subset (campaign metrics, draft copy, publicly available prospect information) is processed by the AI provider to generate that output.
A person on our team reviews and approves anything AI-assisted before it enters your account or reaches you as a deliverable. We do not submit your account or campaign data for training public AI models, and no AI system makes a final decision about your campaigns without a human checking it first. If your organization has a policy restricting AI use on your data, tell us before we start and we'll either work within it or tell you plainly what we can't do as a result.
7. Campaign data
When we run outreach for you, we process contact data and campaign materials that you provide or that we source for the engagement. We use it only to deliver the agreed work. Clients are responsible for having a lawful basis to contact the audiences they ask us to reach, and how campaign data is handled is governed by the engagement agreement between us.
8. How long we keep it
We keep personal information as long as we need it to provide services, meet legal obligations, resolve disputes, and enforce agreements. Form submissions that don't turn into an engagement are kept for a limited period and then deleted or anonymized.
9. Your rights
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, transfer it elsewhere, or stop or limit certain uses of it.
If you're in the EEA or UK, these rights come from the GDPR, and you also have the right to complain to your national data protection authority. Since we operate from Sweden, the Swedish authority (IMY) is one route available to you. If you're a California resident, the CCPA gives you similar rights to know, delete, and opt out of certain sharing, and protects you from being treated worse for exercising them. Email us and we'll handle it.
10. Security
We use reasonable administrative, technical, and organizational measures to protect personal information. No system is perfectly secure and we won't claim otherwise.
11. International transfers
We operate from Sweden with a US-registered company, and our service providers are spread across both. Your information may therefore be processed in the EU, the United States, or elsewhere. Where a transfer leaves the EEA, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.
12. Children
The Site and our services are for businesses and aren't intended for anyone under 18. We don't knowingly collect information from children.
13. Contact us
- Email: maya@tolltod.com
- Phone: +1 (307) 249-0803
- Address: Kungsporten 2 A LGH 1101, 461 31 Trollhattan, Sweden
14. Changes
We may update this policy. Changes take effect when posted here, with the effective date above updated. If a change materially affects your rights, we'll flag it rather than quietly swapping the text.