Tofupi policies

Terms of Service

Effective September 27, 2026 · Last updated September 27, 2026

These Terms of Service (“Terms”) are an agreement between you and Adrian Landa Arellano, a sole proprietor doing business as Tofupi in Texas (“Tofupi”, “we”, “us”). They govern your use of the Tofupi website, studio, apps, connector and related services (the “Service”). By creating an account or using the Service you agree to these Terms. If you use the Service for a company, you confirm you may bind that company to these Terms.

1. What Tofupi is

Tofupi is a hosted software workspace. It lets you connect your own accounts with third-party AI providers (for example Kie, fal, Higgsfield or another compatible provider, each a “Provider”), send generation requests to them, see estimated prices, and organize the results. Tofupi does not create, host or run the AI models. Providers generate the content, under their own terms.

Your subscription pays for access to the Tofupi software and storage only. It does not include any Provider usage.

Free beta (testing phase)

  • Tofupi is currently in a free testing phase. There is no charge for the Service during the beta; you still pay your Providers directly for what you generate with your keys.
  • During the beta, all content (generations and uploads) is kept for 30 days from creation and then deleted. Beta accounts have limits (currently 500 MB of uploads, 1 GB of storage in total, and per-file size limits), and new files may pause if the beta reaches its overall storage limit.
  • The beta is provided as is, may change, and may have interruptions or data loss. Download anything you want to keep.
  • We may end the beta or introduce paid plans. We will tell you in advance, and you will not be charged unless you choose a paid plan.
  • Beta access may be limited in number, and we may close sign-ups or accounts that misuse the Service.

2. Eligibility and accounts

  • You must be at least 18 years old and able to form a binding contract.
  • Give accurate account information and keep your password and sessions secure. You are responsible for everything that happens under your account.
  • Tell us right away at adrianl@al-ecommerce.com if you think your account or keys have been compromised.

3. Your API keys (bring your own key)

  • You supply your own Provider API keys, and you must be allowed to use them under the Provider’s terms.
  • You pay Providers directly for every generation made with your keys, including generations started from a connected AI assistant or by a teammate on your Teams plan. Tofupi never charges you for Provider usage and takes no markup.
  • We encrypt keys before storing them and use them only to carry out requests from you or your authorized team members. We do not display stored keys again.
  • When your access ends (cancellation or termination), we stop using your keys immediately and delete them when your account is deleted. You can delete your keys yourself at any time in Settings.
  • You are responsible for spend limits, top-ups and key rotation in your Provider accounts. We recommend setting spend limits with each Provider.
  • Prices shown in Tofupi are estimates based on Providers’ published prices or their quote endpoints. The Provider’s actual charge controls. We are not responsible for differences, Provider price changes, or charges for failed or moderated generations that a Provider decides to bill.

4. Plans, teams and storage

  • Solo: one user, with the storage level you choose. Storage add-ons change your plan’s monthly price while you stay on the same plan.
  • Teams: one administrator (“Admin”) and invited members, up to the seat limit of the tier (5 people on Teams, 12 people on Teams 12). Members generate using the Provider keys the Admin connects. The Admin is responsible for members’ use of those keys, for inviting and removing members, and for any spend limits. Members must follow these Terms.
  • Retention and storage: each plan includes a storage limit (Solo 25 GB, with add-ons of +100 GB or +500 GB; Teams 150 GB; Teams 12 500 GB). We copy each generation into Tofupi storage and keep it for 60 days from creation. After 60 days it is removed unless you keep it by liking it or placing it in a collection or workflow; kept items and your uploads stay until you delete them, and count toward your limit. If you reach the limit, we first remove your oldest generations that are not kept; if kept items alone exceed it, new uploads and saved copies pause until you free space. We never automatically delete items you kept while your subscription is active; after it ends, see section 10. The prompt and settings of a removed generation stay in your library. Providers may delete their own copies sooner (for example, Kie after 14 days).
  • Features, limits and prices are listed on our pricing page and may change as described in Subscriptions & Refunds.

5. Your content

  • “Your Content” means prompts, uploads, reference media and generated outputs. As between you and Tofupi, you own Your Content, subject to the Providers’ terms and to any rights of others.
  • You give Tofupi a limited license to host, store, copy, transmit and display Your Content only as needed to run the Service for you (for example, sending a prompt to a Provider or showing a thumbnail in your library).
  • We do not use Your Content to train AI models, do not sell it, and do not let others use it for training.
  • We do not look at Your Content except when needed to provide support you ask for, to investigate abuse or a legal request, or to keep the Service secure.
  • AI outputs can be inaccurate, similar to other people’s outputs, or not protectable by copyright. You are responsible for how you use them, including any disclosure rules for AI-generated or advertising content.

6. Connected AI assistants

You can connect Tofupi to AI assistants such as Claude or ChatGPT. When you authorize one, it can act on your account within the permissions shown, including pricing and starting generations that your Provider keys pay for. You can revoke access at any time. Tofupi is not responsible for the assistant’s own behavior or its developer’s policies.

7. Acceptable use

You must follow the Acceptable Use Policy and every Provider’s usage policy. We may suspend or terminate accounts that break them.

8. Third-party services

Providers, payment processors, AI assistants and other third-party services are not controlled by Tofupi. Your use of them is governed by their terms and privacy policies, and we are not responsible for their availability, pricing, outputs or data handling.

9. Availability and changes

We work to keep the Service reliable but do not guarantee it will be uninterrupted or error-free. Providers may change or remove models at any time. We may update the Service, and we will give reasonable notice of material changes that reduce what your paid plan includes.

10. Cancellation, suspension and termination

If you cancel

  • You keep full access until the end of the period you already paid for.
  • When that period ends, a 45-day read-only period begins. You can sign in, view and download everything (including a “Download everything” export), but you can’t generate.
  • We email you when you cancel (with the deletion date), and again when 15 days, 5 days and 1 day remain, with links to download your content or resubscribe.
  • Resubscribing at any time during those 45 days restores your account and content as it was.
  • At the end of the 45 days we delete your account content, stored files and provider keys, and email you a confirmation.

If a payment fails

We retry the payment and notify you for 14 days. If it still fails, your subscription is cancelled and the same 45-day read-only period applies. A failed card never shortens the time you have to get your work.

If we terminate your account

  • We may suspend or terminate your access if you break these Terms or the Acceptable Use Policy, create risk or legal exposure for us or others, or misuse the Service.
  • Termination for a violation starts a 20-day read-only period to download your content, after which we delete it. We will tell you the reason unless the law or safety prevents it.
  • Content that is illegal, including child sexual abuse material and non-consensual intimate imagery, is removed immediately, cannot be downloaded, and is preserved and reported to authorities only as the law requires. In these cases the account may be closed without a download period.

Teams

If a Teams Admin cancels, or a Teams account is terminated, we also notify each member, and each member can download their own work during the same period.

Deleting your account now

You can delete your account at any time from Settings, which skips any waiting period. Deletion is permanent.

Sections that by their nature should survive (such as ownership, disclaimers, liability limits and governing law) survive termination.

11. Disclaimers

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE.” TO THE FULLEST EXTENT PERMITTED BY LAW, TOFUPI DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT, AND ANY WARRANTY ABOUT AI OUTPUTS OR PRICE ESTIMATES.

12. Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW, TOFUPI WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, DATA OR PROVIDER CHARGES. OUR TOTAL LIABILITY FOR ALL CLAIMS RELATING TO THE SERVICE IS LIMITED TO THE GREATER OF (A) THE AMOUNT YOU PAID TOFUPI IN THE 12 MONTHS BEFORE THE CLAIM OR (B) US $50.

13. Indemnity

You will defend and indemnify Tofupi against third-party claims arising from Your Content, your use of Provider keys, or your breach of these Terms or the law.

14. Governing law and disputes

These Terms are governed by the laws of the State of Texas and applicable U.S. federal law, without regard to conflict-of-law rules. Before filing a claim, you agree to contact us at adrianl@al-ecommerce.com and try to resolve the dispute informally for 30 days. Any claim that is not resolved will be brought exclusively in the state or federal courts located in Harris County, Texas, and both parties consent to their jurisdiction. Either party may bring an eligible claim in small-claims court. [Your attorney may recommend an arbitration clause and class-action waiver here instead.]

15. Changes to these Terms

We may update these Terms. If a change is material, we will notify you by email or in the app at least 14 days before it takes effect, and update the “Last updated” date above. Small changes that don’t reduce your rights (such as clarifications or typo fixes) take effect when posted. Price changes follow the 30-day notice in Subscriptions & Refunds. If you don’t agree with a change, you can cancel before it takes effect, and the read-only period in section 10 still applies. Continuing to use the Service after a change takes effect means you accept the updated Terms.

16. Contact

Adrian Landa Arellano d/b/a Tofupi · 6340 N Eldridge Pkwy, Suite N PMB 1014, Houston, TX 77041 · adrianl@al-ecommerce.com

Privacy Policy

Effective September 27, 2026

This policy explains what personal data Tofupi collects, how we use it, and your choices. Tofupi is operated by Adrian Landa Arellano d/b/a Tofupi in Texas, USA.

The short version

  • We collect only what we need to run your account and the studio.
  • We never sell your data, never share it for targeted advertising, and never use your prompts or media to train AI.
  • Your API keys are encrypted and are used only to carry out your requests.
  • We use only essential cookies. No ad trackers.

What we collect

  • Account data: name, email, a one-way hash of your password (we never store the password itself), sign-up and last-sign-in dates, plan, team membership and role.
  • Billing data: handled by our payment processor (e.g. Stripe). We receive the plan, billing status and the last 4 digits and brand of your card, not the full card number.
  • Provider keys: stored encrypted; used only to call the Provider you chose.
  • Your Content: prompts, uploads, reference media, outputs, collections, favorites and settings.
  • Usage and technical data: generation records (model, provider, estimated cost, status), IP address, device and browser type, and security logs. We use these to run, secure and debug the Service.
  • Messages: what you send through our contact form or support email.

How we use it

  • To provide the Service: running generations with your keys, storing your library, syncing devices and teams, and showing prices and balances.
  • To bill your subscription, prevent fraud and abuse, and secure accounts.
  • To answer support requests and send service notices (for example low-balance alerts or policy changes). Marketing email only with your consent, and you can unsubscribe at any time.
  • To follow the law and enforce our Terms.

Who we share it with

We share data only with service providers that help us run Tofupi, under contracts that limit their use of it:

  • Cloudflare: hosting, database, file storage and security.
  • Stripe (or another payment processor): subscription billing.
  • The AI Providers you connect (such as Kie, fal and Higgsfield): they receive the prompts and media you send with your key, and their privacy policies apply.
  • AI assistants you connect (such as Claude or ChatGPT): they receive what the connector returns to them when you use it.
  • Email delivery providers, for account and support messages.

We may also disclose data if the law requires it, to protect people’s safety, or if the business is transferred, including to a company we form such as an LLC, or as part of a merger or sale (we would notify you first).

Retention

Generations are kept for 60 days, or until you delete them if you keep them (liked, or in a collection or workflow). Uploads are kept until you delete them. If you cancel, your content stays available read-only for 45 days after your paid period ends (20 days if we terminate your account for a violation), then it is deleted; if you delete your account yourself, it is deleted right away. Deleted data is removed from our backups within 30 days. Account and billing records are kept as long as your account is open and afterwards as tax and legal rules require. Security logs are kept for up to 12 months.

Security

We use HTTPS everywhere, encrypt API keys with AES-GCM, hash passwords, limit staff access, and lock accounts after repeated failed sign-ins. No system is perfectly secure. If a breach affects your personal data, we will notify you as the law requires, including under Texas law.

Your rights

You can access, correct, download or delete your data from your account settings (deleting your account there takes effect immediately, without a waiting period), or by emailing adrianl@al-ecommerce.com.

Texas residents

Under the Texas Data Privacy and Security Act, you may confirm whether we process your personal data and ask us to access, correct, delete or provide a portable copy of it. You may also opt out of the sale of personal data, targeted advertising and profiling. We do not sell personal data or use it for targeted advertising or profiling. We will respond within 45 days. If we deny your request, you may appeal by replying to our decision; if the appeal is denied, you may contact the Texas Attorney General.

California residents

If the California Consumer Privacy Act applies to us, you have similar rights to know, delete, correct and opt out, and we will not discriminate against you for using them. We do not sell or share personal information for cross-context behavioral advertising.

Other regions

If you are in the EU/UK or elsewhere, contact us and we will honor applicable rights. Your data is processed in the United States and wherever our service providers operate.

Cookies

We use only essential cookies and local storage: to keep you signed in, remember your settings (such as theme and grid size), and protect against abuse. We do not use advertising or cross-site tracking cookies, so no cookie banner is needed.

Children

Tofupi is for adults 18 and older. We do not knowingly collect data from children. If you believe a child has an account, contact us and we will delete it.

Changes and contact

We will post changes here and email you about material changes. Questions: adrianl@al-ecommerce.com · 6340 N Eldridge Pkwy, Suite N PMB 1014, Houston, TX 77041.

Acceptable Use Policy

Effective September 27, 2026

Tofupi is for creative and commercial work. Don’t use it, or any connected Provider through it, to create, upload or share:

  • Child sexual abuse material or any sexualized content involving minors. We report it to NCMEC and law enforcement and terminate the account immediately.
  • Non-consensual intimate imagery, or sexual content depicting a real, identifiable person without their consent.
  • Deceptive deepfakes: realistic images, video or voices of real people without their permission, or content designed to mislead about real events, elections or public figures.
  • Content that infringes copyrights, trademarks, publicity or privacy rights, including using someone’s likeness or voice in ads without permission.
  • Harassment, threats, hate speech, or content that promotes violence, terrorism or self-harm.
  • Fraud, scams, impersonation, fake reviews or testimonials, phishing, or misleading health, financial or advertising claims.
  • Malware, or instructions to build weapons or to cause serious harm.
  • Anything that breaks the law or a Provider’s usage policy.

Don’t abuse the Service

  • Don’t share accounts outside your plan’s seats, resell access, or share your Provider keys with people not on your team.
  • Don’t probe, scan or break our security, get around rate limits, or overload the Service.
  • Don’t scrape the Service or use it to build a competing service.

Enforcement

We may remove content, suspend accounts, or report to authorities. Accounts terminated for a violation get a 20-day read-only period to download their content, except that illegal content is removed immediately without a download period and is preserved and reported as the law requires. Providers may also moderate or block requests on their own. Report abuse to adrianl@al-ecommerce.com.

Subscriptions & Refunds

Effective September 27, 2026

  • Billing: plans are billed monthly in advance and renew automatically until you cancel. Prices are in U.S. dollars and do not include applicable taxes. Texas sales tax may apply to data processing services.
  • Cancel anytime: cancel in your account settings. You keep access until the end of the period you already paid for and won’t be charged again. After that, your content stays available read-only for 45 days (with reminder emails) so you can download it or resubscribe; then it is deleted.
  • Upgrades and storage add-ons take effect right away and are prorated. Downgrades take effect at the next renewal. If your stored media is larger than the new limit, download or delete items first; otherwise the oldest items may be removed after 30 days.
  • Refunds: monthly fees are generally non-refundable. If you contact us within 7 days of your first-ever payment and have not meaningfully used the Service, we will refund it. We will also refund or credit time lost to a major outage caused by us.
  • Provider charges are not refundable by Tofupi. Your Providers bill you directly for generations, so any refund for those must be requested from the Provider.
  • Price changes: we will email you at least 30 days before a price change takes effect, and you can cancel before it applies.
  • Failed payments: we retry and notify you for 14 days. If payment still fails, your subscription is cancelled and the 45-day read-only period applies, the same as a normal cancellation.