Privacy policy
Provisional version, to be validated by a lawyer before publication.
This page explains which data Toomny collects, why, for how long, and how to exercise your rights.
Data we collect
Account: name, e-mail, phone, city, country, role (client or provider), language.
Providers: public profile, services, mobile money number for payouts.
Identity verification: document type and country, declared name and date of birth, photo of the document and selfie. These files are stored in a private space, visible only to the verification team.
Activity: orders, messages, reviews, disputes, and accounting entries linked to orders.
Technical: IP address and a fingerprint of your e-mail, used only to limit sign-in and sign-up attempts.
Why
To run the marketplace (accounts, orders, messaging), verify identity before any payout, prevent fraud, and meet accounting obligations.
Cookies
A session cookie, required to stay signed in. A cookie that remembers your language, for one year. The Cloudflare Turnstile anti-bot check may set its own technical cookies.
We do not use advertising cookies.
Processors
Supabase (database and storage), Vercel (hosting), Cloudflare (anti-bot check), and the payment partner once payments open.
Retention
Account data: for as long as the account exists, then anonymised on deletion. Orders and accounting entries: [duration to complete according to accounting obligations]. Identity documents: deleted when the account is deleted. Attempt-limiting data: [duration to complete].
Your rights
Download your data: from “My account”, a JSON file contains your data.
Delete your account: from “My account”. Deletion is refused while an order or a payout is in progress. Past orders stay on record in anonymous form, for accounting and disputes.
Correct your information: from your profile.
For any other request: [contact address to complete].