Privacy Policy

Last updated: January 19, 2026

1. Introduction

Welcome to Tobesee's Privacy Policy. Your privacy is critically important to us. This Privacy Policy explains how Tobesee ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our database-free content management platform and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

Core Privacy Principle: Tobesee is designed as a database-free platform that leverages GitHub for content storage. This architectural choice means we do not maintain traditional user databases, and most of your content is stored directly in your GitHub repositories under your control.

2. Information We Collect

2.1 Information You Provide

When you use Tobesee, you may provide us with certain information, including:

  • GitHub Account Information: When you connect your GitHub account, we access your GitHub username, email address, and repository information necessary to provide the Service.
  • Content Data: Any content you create, upload, or manage through the Service, including articles, resources, images, and metadata.
  • Authentication Credentials: OAuth tokens and authentication information required to interact with your GitHub repositories on your behalf.

2.2 Automatically Collected Information

When you access the Service, we may automatically collect certain information, including:

  • Log Data: IP address, browser type, browser version, pages visited, time and date of visits, time spent on pages, and other diagnostic data.
  • Device Information: Device type, operating system, unique device identifiers, and mobile network information.
  • Cookies and Tracking: We use cookies and similar tracking technologies to track activity on our Service and hold certain information to improve user experience.

2.3 Third-Party Data

We may receive information about you from third-party services, primarily GitHub. This includes your public GitHub profile information and repository data that you authorize us to access through GitHub's OAuth authentication system.

3. How We Use Your Information

We use the collected information for various purposes, including:

  • To Provide and Maintain the Service: Processing your content, managing your repositories, and delivering core functionality.
  • To Improve User Experience: Analyzing usage patterns to enhance features, functionality, and user interface design.
  • For Authentication and Security: Verifying your identity, preventing fraud, and protecting against unauthorized access.
  • To Communicate With You: Sending service-related notifications, updates, security alerts, and support messages.
  • For Analytics and Development: Monitoring usage statistics, identifying trends, and developing new features and services.
  • To Comply With Legal Obligations: Meeting regulatory requirements and responding to legal processes.

4. Data Storage and Security

4.1 Where Your Data is Stored

Tobesee's unique architecture means that most of your content data is stored directly in your own GitHub repositories, not in our systems. This gives you direct control over your data and leverages GitHub's enterprise-grade infrastructure and security.

  • Content Storage: Your articles, resources, and media files are stored in GitHub repositories that you own or control.
  • Session Data: Authentication tokens and session information may be temporarily stored in secure, encrypted cookies.
  • Analytics Data: Usage logs and analytics may be processed and stored by third-party analytics providers we use.

4.2 Security Measures

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction:

  • Encryption of data in transit using SSL/TLS protocols
  • Secure OAuth 2.0 authentication flow with GitHub
  • Regular security audits and updates
  • Limited access to personal information on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

5. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

With Your Consent

We may share your information when you explicitly authorize us to do so, such as when you choose to publish content publicly.

With Service Providers

We may share information with trusted third-party service providers who assist us in operating the Service, such as hosting providers, analytics services, and authentication services. These providers are contractually obligated to protect your information.

For Legal Compliance

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

In Business Transfers

If Tobesee is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

6. Your Data Rights and Choices

You have certain rights regarding your personal information, depending on your location:

  • Access: You can request access to the personal information we hold about you.
  • Correction: You can request correction of inaccurate or incomplete information.
  • Deletion: You can request deletion of your personal information, subject to legal obligations.
  • Portability: Since your content is stored in GitHub, you can export your data directly from your repositories at any time.
  • Withdraw Consent: You can revoke GitHub OAuth access at any time through your GitHub settings.
  • Opt-Out: You can opt out of certain data collection practices, such as analytics cookies, through your browser settings.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and enhance user experience. Cookies are small data files stored on your device.

Types of Cookies We Use:

  • Essential Cookies: Required for authentication and basic functionality of the Service.
  • Performance Cookies: Help us understand how visitors interact with the Service to improve performance.
  • Preference Cookies: Remember your settings and preferences for a personalized experience.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some portions of the Service may not function properly.

8. Third-Party Services and Links

The Service integrates with and may contain links to third-party services, including:

  • GitHub: For repository storage and authentication (governed by GitHub's Privacy Policy)
  • Vercel/Netlify: For hosting and deployment services
  • Analytics Providers: For usage tracking and performance monitoring

These third-party services have their own privacy policies. We have no control over and assume no responsibility for the privacy practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party services you interact with.

9. Children's Privacy

The Service is not intended for use by children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personally identifiable information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us. If we discover that a child under 13 has provided us with personal information, we will take steps to delete such information from our systems.

10. International Data Transfers

Your information, including personal data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ.

If you are located outside the jurisdiction where our servers are located and choose to use the Service, please note that we transfer data to that jurisdiction and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last updated" date at the top of this Privacy Policy
  • Sending you an email notification (if we have your email address)

We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Additional Rights for EU and California Residents

For EU Residents (GDPR)

If you are in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including:

  • Right to lodge a complaint with a supervisory authority
  • Right to object to processing of your personal data
  • Right to restriction of processing your personal data
  • Right to data portability

For California Residents (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including:

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information held by us
  • Right to opt-out of the sale of personal information (note: we do not sell personal information)
  • Right to non-discrimination for exercising your CCPA rights

Your Consent

BY USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND AGREE TO ITS TERMS. IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, PLEASE DO NOT USE THE SERVICE.