Legal

Privacy Policy

How TOG_OS collects, uses, protects and retains your information.

Last updated: August 2026

1. Information We Collect

We collect information you provide directly (such as your name, email address, organization details, and billing information) as well as information collected automatically (such as IP address, device information, browser type, and usage data). We process payment information through secure, PCI-compliant payment providers and never store card details on our servers.

2. How We Use Your Information

We use the information we collect to provide and improve our services, process transactions, communicate with you about your account and service updates, ensure security and prevent fraud, and comply with legal obligations. We do not sell your personal information to third parties.

3. Legal Bases for Processing (GDPR)

Where the General Data Protection Regulation (GDPR) applies, we process personal data on the following bases: performance of a contract (to provide services you have requested), legitimate interests (to maintain and improve our services and ensure security), and legal compliance. Where required, we will obtain your consent before processing data for specific purposes.

4. Data Sharing & Third Parties

We share data only with trusted service providers that help us operate the platform, including cloud infrastructure, payment processors, and analytics providers. These providers are bound by data processing agreements and may only process data on our documented instructions. We do not share your data with advertisers.

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, role-based access controls, and continuous security monitoring. Security events are logged and reviewed to protect against unauthorized access, alteration, disclosure, or destruction.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. On request, or after account deletion, we delete or anonymize your personal data in accordance with our retention schedule.

7. Your Rights

You have the right to access, correct, delete, or restrict the processing of your personal data, and to object to processing and data portability where applicable. You may also withdraw consent at any time. To exercise any of these rights, contact us using the details below.

8. Cookies & Tracking

We use essential cookies required for authentication and security, as well as optional analytics cookies to understand how our platform is used. You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the platform.

9. Contact Us

For privacy-related inquiries, to exercise your data protection rights, or to file a complaint, please contact our Data Protection team through your workspace support channel. We will respond to all legitimate requests within 30 days.