Privacy Policy

Account details: your name, email address, phone number and shop details. Passwords are stored in hashed form by our sign-in provider; we never see them.

Shop data you add: products, photos, prices, stock and staff accounts.

Buyer data your shop receives: names, phone numbers, delivery addresses, order history and order notes entered at checkout.

Technical data: IP address, browser and device type, pages visited and error logs, used for security and to fix problems.

Cookies and browser storage: your sign-in session, your language choice and the shopping cart. A shop may add Meta, Google or TikTok tracking pixels; that is the shop's choice and the shop must tell its buyers.

To run TORI and your shop, process the orders you receive, send account emails such as email confirmation and password reset, prevent fraud and abuse (including Cloudflare Turnstile checks), fix problems and meet legal duties.

We do not sell personal data, and we do not use buyers' data for our own marketing.

Supabase (database and sign-in), Vercel (web hosting), Cloudflare (file storage, bot checks and network), Lark (email delivery), ToruPay (payments, when a shop uses it) and the couriers a shop connects (delivery details for the orders the shop sends them). Each receives only what it needs for its task.

Our database is hosted in Singapore. Pages and images are served through networks with servers in many countries.

We keep your data while your account is active. After a confirmed request to delete your account, we remove your data from the live system within 30 days.

Encrypted backups are kept for up to 12 months and then deleted automatically. Records the law requires us to keep, such as billing records, are kept for as long as the law requires.

Connections are encrypted (HTTPS), each shop's data is kept separate by access rules in the database, backups are encrypted, and staff access is limited.

No system is perfectly secure. If a breach affects your data, we will tell you without undue delay.

You can see and correct your data in your dashboard, export your orders, products and customers as CSV files, and request deletion of your account. For anything else, write to onboarding@kronx.tech.

Buyers should first contact the shop they bought from; we will help the shop answer.

TORI is a service for businesses and is not meant for anyone under 18.

We will post changes on this page and update the date. For a significant change we will also email account holders.

Questions about privacy: onboarding@kronx.tech