Privacy Policy for Toru Work

Effective Date: 2024/11/08

Introduction

Welcome to Toru Work, a product of Nordrose Technologies OÜ. This Privacy Policy explains how we collect, use, and protect your information when you use our platform. We are committed to safeguarding your data and ensuring that your privacy rights are respected. By using Toru Work, you agree to the collection, storage, and use of your information as described in this Privacy Policy.

1. Information We Collect

We collect and process the following types of information to provide our services effectively:

• Personal Information: Name, email address, phone number, company name, and other identifiers as required to create and manage your account.
• Company Information: Details about the business that the user represents, which may include address, industry, and contact details.
• Content You Provide: Any data or content you choose to create, upload, or input into the system, including tasks, documents (invoices, quotes, deeds), location-based task data, and tool tracking information.
• Location Data: Geolocation data when using task start/stop features.
• Device and Usage Information: Device type, operating system, and usage patterns to improve our services and enhance user experience.

2. How We Use Your Information

We use the information collected for the following purposes:

• Service Provision: To create and manage your account, provide core functionality, and allow you to use all features of Toru Work.
• Customer Support: To respond to inquiries, troubleshoot issues, and provide technical assistance.
• Improvement and Development: To monitor and improve the performance and usability of our services.
• Security and Compliance: To maintain security measures, prevent fraud, and comply with applicable legal obligations.

3. Data Storage and Retention

Your data is stored on secure third-party servers, primarily Amazon Web Services (AWS). We retain data for as long as necessary to fulfill the purposes for which it was collected, in line with industry-standard practices for SaaS providers and in compliance with applicable international regulations. When data is no longer needed, it will be securely deleted or anonymized. You may also choose to delete or permanently remove your data from our system.

4. User Rights and Controls

As a user of Toru Work, you have the following rights over your data:

• Access: You may request to access or obtain a copy of your personal data.
• Correction: You have the right to update or correct inaccurate or incomplete information.
• Deletion: You can delete your data permanently from Toru Work, and it will be removed from our servers accordingly.
• Duplication for Security: You may duplicate data for security and operational purposes.
• Data Portability: You may request a copy of your data in a structured, machine-readable format.

If you wish to exercise any of these rights, please contact us at info@toru.work.

5. Data Sharing and Disclosure

We do not sell or lease your information to third parties. However, we may share information with trusted service providers and partners to facilitate the platform’s operation, such as cloud hosting, analytics, and technical support. These third parties are obligated to comply with strict data protection standards and only use the information as necessary to perform their functions. We may also disclose your information if required by law or if necessary to protect the rights, property, or safety of Toru Work, its users, or others.

6. Cookies and Tracking Technologies

Toru Work may use cookies and similar tracking technologies to enhance user experience, improve our platform, and analyze usage patterns. You can manage your preferences for cookies within your browser settings.

7. Data Security

We take reasonable and industry-standard security measures, including encryption, access control, and regular security assessments, to protect your data from unauthorized access, use, or disclosure.

8. Children’s Privacy

Toru Work is not intended for use by children under the age of 16. We do not knowingly collect or process information from children. If we discover that we have collected personal data from a child without appropriate consent, we will take steps to delete that data promptly.

9. International Data Transfers

Your data may be transferred to, stored, and processed in countries other than your country of residence. These countries may have data protection laws different from those of your country, but we take appropriate safeguards to protect your data in compliance with applicable regulations.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and we will notify you of significant changes either through email or by a notice within the app. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

— This Privacy Policy is designed to be in line with the best practices for international SaaS platforms and to meet the requirements of major privacy regulations.