Theoruma is a product of Small Tycoon. Small Tycoon provides the service and is responsible for the handling practices described here.
Information we handle
We may process account details, organization and workspace records, billing contact and subscription references, site content, source documents, media, support correspondence, operational logs, aggregate website measurement, analytics configuration, and information submitted through websites managed with Theoruma. Payment-card details are collected and stored by Stripe through its hosted payment surfaces, not by Theoruma.
How information is used
Information is used to provide authenticated access, operate requested workflows, administer subscriptions, generate private drafts, support review and publishing, measure site use and successful inquiries, secure the service, respond to support requests, and meet legal obligations.
Website measurement and choices
A managed site may use privacy-focused aggregate analytics. A customer may also connect its own Google Analytics or Google Tag Manager. Where optional Google tracking is configured, it is denied by default and visitors can allow, decline, or reopen their tracking preference. Form answers are not sent as analytics events. Customers are responsible for the tags they place in a client-controlled tag container and for any additional notice or consent their use requires.
AI-assisted features
When an authorized user requests AI assistance, relevant scoped content may be sent to configured service providers to perform that request. AI output remains subject to Theoruma's permissions, review, and publishing controls.
Sharing and retention
We share information only with service providers needed to operate Theoruma, including Stripe for billing and configured analytics providers for measurement, when directed by an authorized customer, or when legally required. Retention depends on account needs, contractual requirements, security, provider settings, and legal obligations.
Security and choices
We use access controls, scoped permissions, private drafts, operational logging, and protected publishing paths. Customers may request access, correction, export, or deletion subject to applicable agreements and law.
Contact
Privacy questions may be sent through the Small Tycoon contact form. Do not send passwords or authentication codes.