Privacy Policy

Last updated: February 12, 2026

1. Introduction

Welcome to Tofu Lab. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use Mia Agent, our AI-powered marketing intelligence platform.

2. Information We Collect

We may collect the following types of information:

  • Account Information: Name, email address, company name, and login credentials when you create an account.
  • Advertising Data: Campaign data, performance metrics, and analytics from connected advertising platforms (Meta, Google, TikTok, Amazon).
  • Usage Data: Information about how you interact with Mia Agent, including features used, conversations, and time spent.
  • Device Information: Browser type, IP address, and device identifiers.

3. How We Use Your Information

We use the collected information solely to provide, maintain, and protect the user-facing features of our application:

  • Provide Mia Agent's AI-powered marketing features that you request, such as campaign analysis, content generation, and reporting
  • Display your advertising campaign performance data across connected platforms within the app
  • Generate insights, recommendations, and reports that you request through the app interface
  • Maintain your preferences, business context, and workflow settings to personalize your in-app experience
  • Send you transactional communications necessary for app functionality (e.g., account verification, security alerts, and service notifications)
  • Ensure the security, integrity, and reliable operation of our platform

We do not use your data, including data received from Google APIs, to develop or improve new products or features unrelated to the app's existing user-facing functionality. We do not use your data for advertising, market research, or to train general-purpose AI models.

4. Data Sharing

We do not sell your personal information. All conversations and performance data stay confidential with no cross-customer sharing. We may share data with third-party service providers who assist us in operating our platform, subject to strict confidentiality agreements. We may also disclose information when required by law or to protect our rights.

5. Google API Services

Tofu Lab integrates with Google API Services to provide advertising management and productivity features. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We access the following Google services when you connect your account:

  • Google Ads: We read campaign performance data and can create or modify ads based on your explicit instructions through our AI assistant.
  • Google Docs: We create documents containing AI-generated marketing content and campaign briefs when you request them.
  • Google Sheets: We export campaign analytics and performance reports to spreadsheets on your request.
  • Gmail: We send automated follow-up emails to leads from your ad campaigns, track email responses, and deliver campaign alerts based on your configured preferences.
  • Google Drive: We store documents and spreadsheets created through our platform in your Drive.

Limited Use Disclosure: Tofu Lab's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only use Google user data to provide and improve the user-facing features of our application that are visible and apparent to you.
  • We do not transfer Google user data to third parties except as necessary to provide or improve user-facing features, to comply with applicable laws, or as part of a merger/acquisition with equivalent privacy protections.
  • We do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
  • We do not allow humans to read Google user data unless: (a) we have your explicit consent, (b) it is necessary for security purposes (e.g., investigating abuse), (c) it is necessary to comply with applicable law, or (d) our use is limited to internal operations and the data has been aggregated and anonymized.

You can revoke Tofu Lab's access to your Google account at any time through your Google Account permissions settings or through the Tofu Lab app settings.

6. Data Security

We implement bank-grade encryption and maintain SOC 2 compliance to protect your campaign data and business intelligence. Every AI action is logged with full transparency so you can review, audit, and override changes. We also offer private cloud deployment options for maximum control over your data.

7. Your Rights

You have the right to:

  • Access and receive a copy of your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Opt-out of marketing communications
  • Withdraw consent where applicable
  • Define guardrails for what Mia can suggest versus execute

8. Cookies

We use cookies and similar technologies to enhance your experience, analyze usage patterns, and personalize content. You can manage cookie preferences through your browser settings.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at agent@tofulab.ai