ToomePrivacy Policy
This Privacy Policy explains how Toome ("Toome", "we", "us"), a product of SSD-CO, collects, uses, shares and protects personal information when businesses use our customer communication platform at toome.cloud and its related applications and integrations (the "Service").
The Service is used by businesses ("Customers") to communicate with their own clients ("End Users") on channels such as WhatsApp, Facebook Messenger, Instagram and website chat. For End User data processed on behalf of a Customer, the Customer is the controller and Toome acts as a processor following the Customer's instructions.
1. Information We Collect
Account information
When a business registers, we collect the name, email address, phone number, company name, business type and country of the account owner and of any team members the Customer adds.
Communication data
When a Customer connects a messaging channel, we process the messages, media and contact details (such as name, phone number or platform identifier) exchanged between the Customer and its End Users, together with related metadata such as timestamps and delivery status.
Customer records
Information a Customer chooses to store in the Service, such as client lists imported from spreadsheets, appointments, orders, notes and custom fields.
Payment information
Subscription payments are handled by third-party payment providers. We do not store full card numbers; we keep only the transaction records needed for billing and accounting.
Technical information
IP address, browser type, device information and usage logs collected to operate, secure and improve the Service.
2. How We Use Information
- To provide the Service, including sending and receiving messages on connected channels and routing conversations to the right team member.
- To set up and maintain accounts, process subscriptions and send invoices and service notices.
- To provide customer support and respond to requests.
- To secure the Service, prevent abuse and spam, and comply with legal obligations.
- To understand how the Service is used and improve its features and reliability.
We do not sell personal information, and we do not use End User conversations for advertising.
3. Sharing and Service Providers
We share information only as needed to operate the Service, with:
- Messaging platforms — Meta Platforms (WhatsApp, Facebook, Instagram), to deliver messages on the channels a Customer connects.
- Infrastructure and processing providers — hosting, storage, email delivery and language-processing providers that process data on our behalf under contractual confidentiality and security obligations.
- Payment providers — to process subscription payments.
- Integrations a Customer enables — such as an e-commerce store, to exchange the data that integration requires.
- Legal requirements — when required by law, or to protect the rights, property or safety of Toome, our Customers or others.
4. Automated Processing of Messages
The Service can prepare and send automated replies on behalf of a Customer, based on the information the Customer provides about its business. To do this, incoming messages may be processed by third-party language-processing providers.
- Message content is used only to generate replies for the Customer concerned.
- We do not use Customer or End User conversations to train general-purpose models.
- Customers can hand any conversation to a human team member at any time, and End Users can ask to speak to a person.
5. Meta Platforms (WhatsApp, Facebook, Instagram)
When a Customer connects a WhatsApp Business account, Facebook Page or Instagram account, we access only the permissions the Customer grants, and use the data received from Meta solely to provide the Service to that Customer. Use of these channels is also subject to Meta's own terms and privacy policies. We follow Meta's platform requirements, including restrictions on unsolicited messaging.
6. Shopify Integration
When a merchant connects a Shopify store, we access the following data solely to provide the Service:
- Orders — order number, total, customer name and phone number, to send order confirmations on WhatsApp.
- Checkouts — abandoned checkout link, customer name and phone number, to send cart reminders.
- Products — product name, price and stock, to sync the catalog within Toome.
- Customers — name and phone number only. We do not store payment or card data.
Order data is retained for no longer than 90 days from the order date. When a merchant disconnects the store or uninstalls the app, the connection is deactivated immediately and no new data is received. Merchants may request deletion of their data at any time by contacting privacy@toome.cloud.
7. Confidentiality of Your Conversations
Your conversations and your clients' information belong to you. Inside the Service, they are visible only to your account's management and to the team members you have given permission to. Each Customer's data is kept separate from every other Customer, and no other business using Toome can see it.
- We do not monitor your chats. Toome staff do not browse, read or follow your conversations or your clients as part of our normal operations.
- We do not use your data for our own purposes. We do not sell your conversations or client data, use them for advertising, or share them with other Customers.
- Limited exceptions. Our staff may access the minimum data needed only (a) when you ask us for technical support, (b) when required by law or a valid request from a competent authority, or (c) to investigate a security incident or a serious violation of our Terms of Service, such as use of the Service for illegal activity.
Messages also pass through the messaging platforms you connect (such as Meta for WhatsApp, Facebook and Instagram) and, when automated replies are enabled, through the language-processing providers described in Section 4, under their own security and confidentiality obligations.
8. Data Security
Data is transmitted over encrypted connections (TLS), and sensitive fields are encrypted at rest. Each Customer's data is logically separated from other Customers. Access within Customer accounts is controlled by roles set by the account owner, and access by our staff is limited to the cases described in Section 7.
No method of transmission or storage is completely secure. If we become aware of a security incident affecting personal information, we will notify affected Customers as required by law.
9. Data Retention
We keep account and communication data for as long as the Customer's account is active, or as needed to provide the Service. When an account is closed, we delete or anonymize its data within a reasonable period, except for records we must keep for accounting, tax or legal purposes.
10. Your Rights and Data Deletion
Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to or restrict certain processing.
- Customers can update their account information in the dashboard, or request account deletion by contacting us.
- End Users who contacted a business through Toome should send their request to that business. We will assist the business in responding.
- Facebook and Instagram users can remove Toome from their settings under "Apps and Websites"; a data deletion request is then sent to us automatically, and you can check its status using the confirmation link provided.
To make a request, email privacy@toome.cloud. We may need to verify your identity before acting on it.
11. Cookies
We use cookies that are necessary to keep you signed in, protect the Service and remember your preferences. For more detail, see our Cookie Policy.
12. Children
The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date above shows when it was last changed. We will notify Customers of material changes by email or through the dashboard.
14. Contact Us
For questions about this Privacy Policy or our data practices, contact us at privacy@toome.cloud.