Privacy and data use

How TAO-1 uses what you send.

Who we are: TAO-1 is operated by Tao Synergies Inc. Questions: support@tao1.ai.

How TAO-1 uses what you send

We use your chats and builds to make TAO-1 better.

When you use TAO-1, we learn from what you ask and how it went: which answers helped, which builds worked, and what needed fixing.
That helps us send each question to the right model, build better sites and apps, and catch mistakes before you see them.

What you asked, what TAO-1 answered or built, and simple signals such as whether you copied, shared, downloaded or redid an answer.
We remove personal details such as names, emails, phone numbers, addresses and payment details before anything is used to improve TAO-1.

We never show what you send to other people, and we never copy it into anyone else’s project or site.
We never sell it.
We never keep health, crisis or safety conversations for improvement.

We keep this data for 24 months, then delete it.
Ordinary request logs are deleted after 100 days; improvement data (if you allow it) is kept 24 months.

It’s on by default. Turn it off any time: Account → Privacy → “Use my data to improve TAO-1”.
When you turn it off, we stop using your new requests and delete what we kept for improvement.
In the EU, the UK and Switzerland we ask first, and it stays off until you say yes.
Deleting your account deletes this data too.

We may still check a request for safety or abuse, or to fix an error you report.

Requests made with an API key are never used to improve TAO-1, and we do not keep their prompt or answer text. The details are on the API privacy page.

A video you attach in chat or Code is stored for 30 days to answer your request, then deleted automatically. You can attach videos only while signed in.
Requests made with an API key keep no prompt or answer text, as described on the API privacy page; that does not change.

If you report an answer, a gallery item or a site, we keep the report (the reason, your note and the time) for one year, and delete it when you delete your account. An answer's text is included only if you choose to include it.

If you ask us to stop emailing you about form messages, we keep a one-way hashed form of your email address, even after your account is deleted, only so that we can honour that request.

Sites you build and publish can count their visits, only if the site's owner turns it on. We count without cookies.
To tell visitors apart we use the IP address and browser type, kept only as a scrambled code that is deleted after 2 days. For rate limiting we also keep a scrambled code of the IP address alone for up to 2 days. Our relay passes the IP address and browser type to our servers to do this; our own code does not record them, though our hosting provider keeps standard short-term request logs (which include IP addresses) for security and operations.
We store the pages visited (web addresses, which can sometimes contain names) and the referring website's domain, as daily counts kept for 90 days. Visits over a site's daily limit, or that look automated, aren't counted.
Visitors who send Do Not Track or Global Privacy Control aren't counted at all. Site owners can erase their counts.

We keep a short safety log of blocked requests: a one-way hash and a reason code, no content. It lets us spot repeated abuse of the build API without keeping what anyone wrote.

We count page views on tao1.ai without cookies or IP addresses (visitors in the EU, UK and Switzerland are counted in aggregate only). Do Not Track and Global Privacy Control are honoured.