Communication Policy

This document outlines TukuToi LLC’s policies regarding communication methods, secure document delivery, and client responsibilities.

In this policy, “TukuToi” means TukuToi LLC, and “the Client” means anyone who engages TukuToi’s services.

Accepted Communication Channels

• Email (Primary Channel): All official communication begins via email (either directly or using the Contact Form on this website). This includes initial contact, client inquiries, invoices, contracts, and formal notices.

• GitHub: For active projects, GitHub is used for issue tracking, code discussions, and task collaboration. Clients are expected to use the agreed-upon repositories for project-related interactions.

• Slack / Mattermost: For real-time communication, TukuToi may use Slack or Mattermost. These platforms support quick clarifications, informal updates, or time-sensitive collaboration.

• Video calls: Booked in advance, on Zoom or the Client’s preferred platform. Calls are billed like any other consultation.

• Exclusions: TukuToi does not engage in communication via phone calls, SMS, handwritten letters, or other non-digital or not-listed-above means. This ensures consistency, security, and a traceable history of all communications.

Secure Document Delivery

To maintain the integrity and confidentiality of TukuToi’s communications:

• Digital Signatures: All official documents, such as contracts, invoices, and receipts, are digitally signed using GPG (GNU Privacy Guard). This ensures the authenticity and integrity of the documents. All emails from TukuToi come with GPG Signature, and if the Client uses encryption, they will be encrypted as well.

• Encryption: All sensitive documents are encrypted before transmission. Recipients will receive a .gpg file via email, which can be decrypted using standard GPG tools or through TukuToi’s secure Document Verification Portal.

• Verification: Clients can verify the authenticity of received documents by checking the digital signature against TukuToi’s public GPG key, available at billing.tukutoi.com/verify.

No Traditional Signatures

TukuToi does not engage in traditional pen-and-ink signatures. TukuToi’s commitment to integrity and authenticity is fulfilled using cryptographic digital signatures (GPG), which are verifiable and tamper-proof.

Client Responsibilities

To facilitate seamless communication and document handling:

• Email Monitoring: Clients should regularly monitor their email for communications from TukuToi and ensure that emails from TukuToi’s domain are not marked as spam.

• GPG Tools: Clients are encouraged to install and maintain GPG tools to decrypt and verify documents. Clients are also welcome to use TukuToi’s secure Document Verification Portal.

• Public Key: Clients should provide their public GPG key to TukuToi to enable encrypted communications if available.

Exceptions

While TukuToi strives to maintain consistency in its communication methods:

• Unencrypted Communications: Certain general announcements or non-sensitive communications may be sent unencrypted for convenience.

• Alternative Arrangements: In exceptional circumstances, alternative communication methods may be arranged upon mutual agreement.

Updates to This Policy

TukuToi reserves the right to update this Communication Policy as necessary. Clients will be notified of significant changes via email.

By engaging with TukuToi, Clients acknowledge and agree to adhere to this Communication Policy, ensuring secure and efficient interactions.