Privacy Policy

TOASTPRO is a curated marketplace for entertainment and production professionals, operated by Tech & Toast Limited (“we”, “us”, “our”). This policy explains what information we collect when you use TOASTPRO (the “Service”), how we use it, who we share it with, and the choices you have.

1. Information we collect

Information from Google sign-in

You sign in to TOASTPRO with your Google account. Google shares your name, email address, and profile picture with us. We do not receive your Google password, and we do not request access to your Gmail, Drive, Calendar, contacts, or any other Google data.

Information you give us

• Profile details: name, account type (creator or professional), bio, company name, website, profile photo, skills, and categories.
• Brand details: brand names, settings, logos, and the members and roles on a brand’s team.
• Invitations: invite codes you redeem, and the email addresses and messages you enter when you invite someone to a brand.
• Projects and content: projects, applications, submissions, messages, and media files you upload.
• Connected social accounts: if you choose to connect a social profile, its username, follower count, engagement metrics, and the access tokens needed to keep it connected.
• Payment and payout details: when payments are available, the payout method you choose (for example a PayPal email or Bitcoin address) and identifiers from our payment processors. Card details are entered with and stored by the processor (such as Stripe), not by us.

Information collected automatically

• Cookies: we use only cookies needed to run the Service. These keep you signed in, remember an invite code during signup, and remember which brand you are working in. We do not use advertising or cross-site tracking cookies.
• Logs: our hosting and database providers record technical data such as IP address, browser type, and request times to operate and secure the Service.

2. How we use your information

• To create and secure your account and sign you in.
• To run the marketplace: show your profile to other members, match creators and brands, and manage projects, applications, and teams.
• To send service emails such as brand invitations and account notices.
• To process payments and payouts when those features are available.
• To keep the Service safe, prevent abuse, fix problems, and improve features.
• To comply with legal obligations and enforce our Terms.

We rely on the following legal bases: performing our contract with you (providing the Service), our legitimate interests (keeping the Service secure and improving it), your consent (for example when you connect a social account, which you can withdraw at any time), and legal obligations.

3. Google user data

TOASTPRO’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use your Google name, email, and profile picture only to create your account, sign you in, and display your profile. We do not sell this data, use it for advertising, or use it to train AI models.

4. How we share information

We do not sell your personal information. We share it only:

• With other members: your profile, and the content you submit to a project, are visible to the members and brands involved, as the Service is designed to do.
• With service providers who process data on our behalf: Supabase (database, authentication, file storage), Vercel (hosting), Google (sign-in), Resend (email delivery), and payment processors such as Stripe and PayPal when payments are enabled.
• For legal reasons: if required by law, or to protect the rights, safety, or property of our users, the public, or Tech & Toast Limited.
• In a business transfer: if TOASTPRO is merged, acquired, or sold, information may transfer to the new operator under this policy.

5. International transfers

Our providers store and process data in the United States and other countries, which may have different data protection laws from where you live. We use reputable providers with appropriate safeguards for these transfers.

6. Retention

We keep your information for as long as your account is active. When you delete your account, we delete or anonymize your personal information within 30 days, except where we must keep it longer for legal, tax, security, or dispute-resolution reasons. Content you submitted to a brand’s project may remain with that brand under your agreement with them.

7. Security

We protect your data with measures such as encrypted connections (HTTPS), access controls, and database row-level security. No system is perfectly secure, so we can’t guarantee absolute security.

8. Your rights and choices

Depending on where you live, including under the Jamaica Data Protection Act, 2020 and similar laws, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate information;
• delete your account and personal information;
• object to or restrict certain processing;
• receive a copy of your information in a portable format; and
• withdraw consent where we rely on it.

To exercise these rights, email info@techandtoast.io. You can also revoke TOASTPRO’s access to your Google account at any time from your Google Account permissions. You have the right to complain to your local data protection authority. In Jamaica, that is the Office of the Information Commissioner.

9. Age requirement

TOASTPRO is only for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will tell you by email or in the Service before they take effect. The effective date at the top shows when it was last updated.

11. Contact us

Questions about this policy or your data? Email info@techandtoast.io.