10,000+ people working out today.

Privacy Policy

Last updated on October 6, 2025

This Privacy Policy ("Policy") describes how Paracosm Inc. ("Company," "we," "us," or "our") collects, uses, discloses, and safeguards information when you use our website and Tomo service (the "Service"). By using the Service, you agree to the practices described in this Policy. If you do not agree, please discontinue use of the Service.

1. Interpretation and Definitions

1.1 Interpretation
Words with initial capital letters have meanings defined in this section. The following definitions apply whether they appear in singular or plural.
1.2 Definitions
  • Account: A unique account created for you to access the Service or parts of it.
  • Affiliate: An entity that controls, is controlled by, or is under common control with a party; "control" means ownership of 50% or more of voting securities or equivalent rights.
  • Company: Paracosm Inc.
  • Cookies: Small files placed on your device by a website, often used to track activity and remember preferences.
  • Jurisdiction: United States; primary governing state: California.
  • Device: Any device that can access the Service (e.g., computer, smartphone, tablet).
  • Personal Data: Any information that relates to an identified or identifiable individual.
  • Service: The Tomo service, including the website and any related apps or interfaces.
  • Service Provider: Any natural or legal person who processes data on behalf of the Company.
  • Usage Data: Data collected automatically, generated by use of the Service or the Service infrastructure (e.g., page visit duration).
  • Website: The Tomo website at https://www.tomo.ai.
  • You: The individual using the Service, or the company/other legal entity on whose behalf such individual is using the Service, as applicable.

2. Information We Collect

2.1 Personal Data
We may collect Personal Data that you provide to us, such as:
  • Email address
  • First and last name
  • Phone number
  • Any user-generated content you submit through the Service
2.2 Usage Data
Collected automatically and may include:
  • IP address, browser type/version, device identifiers
  • Pages visited, timestamps, and time spent
  • Mobile OS, mobile browser, and diagnostic data

3. Tracking Technologies and Cookies

We use Cookies, web beacons, tags, and scripts to track activity and improve the Service.
  • Cookies or Browser Cookies: You can set your browser to refuse Cookies or alert you when Cookies are being sent. Some features may not function without Cookies.
  • Web Beacons: Small electronic files in pages or emails that help count users, measure popularity, and verify system integrity.
Cookie Types
  • Necessary/Essential (Session; administered by us): Authenticate users and prevent fraud.
  • Notice Acceptance (Persistent; administered by us): Record Cookie consent.
  • Functionality (Persistent; administered by us): Remember preferences (e.g., login, language).

4. How We Use Your Information

We may use Personal Data to:
  • Provide, operate, and maintain the Service (including monitoring usage).
  • Manage your Account and provide registered-user features.
  • Perform and enforce contracts, including purchases of products or services.
  • Contact you via email, phone, SMS, or push notifications for updates and security notices.
  • Provide you with news, offers, and information about similar goods/services unless you opt out.
  • Manage and respond to your requests.
  • Evaluate or conduct business transfers (e.g., merger, acquisition, asset sale).
  • Perform data analysis, identify trends, measure campaign effectiveness, and improve the Service.
  • Integrate with Google services (see Section 16). We use Google APIs per Google's API Services User Data Policy and do not use Google Workspace data to develop, improve, or train generalized AI/ML models.
  • Comply with legal obligations and enforce our agreements, including fraud prevention, security, and incident response.

5. How We Share Your Information

We do not sell your Personal Data. We may share information:
  • With Service Providers: To operate, analyze, and support the Service or to contact you.
  • For Business Transfers: In connection with or during negotiations of a merger, sale, financing, or acquisition.
  • With Affiliates: Subject to this Policy (e.g., parent, subsidiaries, joint ventures).
  • With Business Partners: To offer products, services, or promotions.
  • With Other Users: When you share information in public areas.
  • With Your Consent: For any other purpose you authorize.

6. Analytics, Logs & Advertising Tech

We use analytics and logging tools (e.g., product analytics, performance monitoring, and crash reporting) to understand usage, improve reliability, and secure the Service. These tools may set Cookies or collect pseudonymous identifiers and usage events.
We do not “sell” Personal Data, and we do not “share” Personal Data for cross-context behavioral advertising as those terms are defined by California law. If we materially change this, we will update this Policy and provide required choice mechanisms.

7. Retention of Personal Data

We retain Personal Data only for as long as necessary to fulfill the purposes described in this Policy, including to comply with legal obligations, resolve disputes, and enforce our agreements.
Usage Data is typically retained for shorter periods of time, unless it is required to maintain the security of the Service, improve functionality, or comply with applicable law. When Personal Data is no longer needed, we will securely delete or anonymize it.

8. International Transfers of Personal Data

Your information, including Personal Data, may be processed and stored at the Company's operating offices and in other jurisdictions where our Service Providers are located. These jurisdictions may have data protection laws that differ from those in your country of residence.
By submitting Personal Data, you consent to its transfer to and processing in jurisdictions outside of your home country. We will take reasonable measures to ensure your Personal Data is treated securely and in accordance with this Privacy Policy, including requiring adequate safeguards where applicable.

9. Your Rights to Access and Delete Data

You have the right to request access to, correction of, or deletion of your Personal Data that we hold about you.
The Service may allow you to update or delete certain information directly within your account settings. You may also contact us to request changes or deletions.
To request complete deletion of your Personal Data, you may submit our data deletion form. We will delete associated Personal Data within 30 days, subject to retention obligations described in Section 6.
Please note that certain information may need to be retained where we have a legal obligation, a legitimate business interest, or to prevent fraud and abuse.
Regional rights. Depending on your location (e.g., EEA/UK, certain U.S. states), you may have additional rights: access/portability, correction, deletion, restriction, objection, and the right to opt out of targeted advertising or profiling. You may also have the right to appeal a decision or lodge a complaint with a supervisory authority.

10. GDPR Legal Bases

Where the GDPR/UK GDPR applies, we process Personal Data on the following legal bases: (i) performance of a contract (providing the Service), (ii) legitimate interests (e.g., security, fraud prevention, product improvement, communications about similar services), (iii) consent (where required, e.g., certain marketing), and (iv) legal obligations.

11. Disclosure of Personal Data

Business Transactions
If the Company is involved in a merger, acquisition, financing, or sale of assets, your Personal Data may be transferred as part of that transaction. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.
Law Enforcement and Legal Requests
We may disclose Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., courts, regulators, government agencies).
Other Legal Grounds
We may disclose Personal Data where we believe such action is reasonably necessary to:
  • Comply with a legal obligation
  • Protect and defend the rights, property, or safety of the Company
  • Prevent or investigate potential wrongdoing related to the Service
  • Protect the personal safety of users of the Service or the public
  • Protect against legal liability or fraudulent activity

12. Security of Personal Data

We use commercially reasonable technical and organizational measures to protect your Personal Data. However, no method of transmission over the Internet or method of electronic storage is completely secure.
Accordingly, while we strive to protect your information, we cannot and do not guarantee the absolute security of Personal Data. You are responsible for maintaining the security of your account credentials and limiting unauthorized access to your devices.

13. Security Incidents

If we become aware of a security incident that affects your Personal Data, we will investigate and, where required by law, notify you and/or regulators without undue delay, including providing information about steps you can take to mitigate potential harm.

14. Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect Personal Data from children under 13. If we become aware that we have collected such data without verified parental consent, we will promptly delete it.
If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us. Where applicable law requires parental consent for minors, we may request such consent before collecting or using Personal Data.

15. Links to Other Websites

The Service may contain links to third-party websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly encourage you to review the privacy policy of every site you visit.
We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

16. Use of Google User Data and Artificial Intelligence

We use Google Workspace APIs (e.g., Gmail, Google Drive, Google Calendar) solely to provide features directly requested by users. Any personal data accessed from these APIs is only processed as needed to complete that request and is never used to develop, train, or improve any machine learning or artificial intelligence (AI) model—whether our own or any third party's.
Use of Anthropic's Claude API
Tomo uses Anthropic's Claude API to enable user-facing AI features such as summarization, drafting, document generation, or generating actions. In some cases, user inputs including user data from Google Workspace APIs, such as Gmail message content, Google Calendar event details, or text from Google Drive documents may be sent to Anthropic's API to complete these requested actions.
Important: Anthropic does not train or fine-tune its models using any user data submitted through its API. For more information, see Anthropic's Commercial Terms.
Tomo complies with the Google Workspace API User Data and Developer Policy. We affirm that:
  • We do not use user data returned from Google Workspace APIs to train or improve any generalized or non-personalized AI/ML models.
  • We do not allow any third-party AI services, including Anthropic, to train on user data obtained from Google Workspace APIs.
  • All data processing is specific to fulfilling an individual user's request, and no Workspace data is used beyond that scope. Any processing is explicitly requested by and approved by the user.
You may revoke access to Google services at any time via your Google Account permissions page.

17. Changes to this Privacy Policy

We may update this Privacy Policy at any time. Any updates will be posted on this page with the "Last updated" date revised accordingly. Your continued use of the Service after changes take effect indicates your acceptance.

18. Contact Us

If you have any questions about this Privacy Policy, you can contact us at hello@tomo.ai.
Tomo - Your companion for everything