Introduction
At Togetha, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and otherwise process information about you in connection with our website, applications, and services (collectively, the "Services").
By accessing or using Togetha, you agree to the terms of this Privacy Policy. If you do not agree with our practices, please do not use our Services.
Information We Collect
Information You Provide Directly
- Account Registration: When you create an account, we collect your name, email address, and profile picture from Google.
- Communication Data: We collect information when you email us, submit a support ticket, or communicate through our platform.
- User-Generated Content: Any content, files, documents, or data you create or upload to Togetha.
Information Collected Automatically
- Device Information: Device type, operating system, browser type, and device identifiers.
- Usage Data: Information about how you interact with our Services, including features accessed and time spent.
- Cookies & Similar Technologies: We use cookies, web beacons, and similar tracking technologies to enhance your experience.
- Log Data: Server logs containing access times, pages viewed, and referring URLs.
Information from Third Parties
- Social Media: If you sign up using a social media account, we receive information from that platform.
- Third-Party Integrations: Information from integrated applications and services you connect to Togetha.
- Analytics Providers: Data about your interactions with our site from analytics services.
How We Use Your Information
We use the information we collect for various purposes:
- Providing Services: To deliver, maintain, and improve the Togetha platform and features.
- Authentication: To verify your identity and secure your account.
- Communication: To send you transactional emails, support responses, and service updates.
- Marketing: To send promotional emails and updates (with your consent where required).
- Analytics: To understand usage patterns and improve our platform.
- Personalization: To customize your experience and provide relevant content.
- Security: To detect, prevent, and address fraud, abuse, and security issues.
- Legal Compliance: To comply with applicable laws and regulations.
Legitimate Interests:
We process your data where we have legitimate business interests that are not overridden by your rights, such as improving our services, detecting fraud, and ensuring platform security.
Data Sharing & Disclosure
We Do Share Data With
- Service Providers: Third-party vendors who help us operate our platform.
- Business Partners: Integrations and partners you authorize.
- Legal Requirements: When required by law, court order, or government authority.
- Business Transfers: In the event of merger, acquisition, bankruptcy, or sale of assets.
- With Your Consent: Any other sharing where you provide explicit consent.
We Do NOT Share Data
- We do not sell your personal data to third parties for marketing purposes.
- We do not share your data with unaffiliated parties for their own marketing purposes without consent.
- We do not disclose your sensitive information (account details) to unauthorized parties.
Data Retention
We retain your personal information for as long as necessary to provide our Services and fulfill the purposes outlined in this Privacy Policy. Retention periods vary based on the context of the processing and our legal obligations:
- Active Account Data: Retained while your account is active.
- Deleted Accounts: Deleted within 30 days of account deletion.
- Transactional Data: Retained for at least 7 years for tax and legal compliance.
- Marketing Data: Retained until you unsubscribe.
- Log Data: Typically retained for 90 days.
If you wish to delete your data sooner, please contact us using the information in the Contact section below.
Your Rights & Choices
Depending on your location, you may have:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Correction: You can request corrections to inaccurate or incomplete data.
- Right to Deletion: You can request deletion of your personal data.
- Right to Portability: You can request your data in a portable format.
- Right to Object: You can object to processing of your data for certain purposes.
- Right to Withdraw Consent: You can withdraw previously given consent at any time.
Marketing Communications
You can opt out of marketing emails by clicking the unsubscribe link in any email or updating your preferences in your account settings. Opting out of marketing communications will not affect transactional emails about your account.
Cookie Preferences
You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent.
Security
We implement comprehensive technical, administrative, and physical security measures to protect your personal information:
- End-to-end encryption for data in transit and at rest
- Regular security audits and penetration testing
- Multi-factor authentication for account access
- Secure password policies and requirements
- Access controls and role-based permissions
- Compliance with industry standards (SOC 2, GDPR, CCPA)
- Incident response and data breach notification procedures
However, no security system is impenetrable. You are responsible for maintaining the confidentiality of your login credentials.
Third-Party Services
Our Services may contain links to and integrate with third-party websites and services. This Privacy Policy does not apply to those services. We encourage you to review the privacy policies of any third-party services before providing your information.
Common Third-Party Integrations
- Analytics Services (Google Analytics)
- Payment Processors (Flutter Wave)
- Email Providers (Resend)
- Social Media Platforms
Children's Privacy
Togetha is not intended for users under 13 years of age (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly.
If you believe we have collected information from a child, please contact us immediately.
International Data Transfers
Your information may be transferred to, stored in, and processed in countries other than your country of residence. When we transfer personal information internationally, we implement appropriate safeguards:
- Standard Contractual Clauses (SCCs) approved by relevant authorities
- Binding Corporate Rules
- Your explicit consent
- Adequacy decisions by competent authorities
By using Togetha, you consent to the transfer of your information to countries outside your country of residence.
Contact Us
If you have questions about this Privacy Policy or to exercise your rights, please contact us:
Email: malostechnologies@gmail.com
Mailing Address: Gasabo, kigali, Rwanda
Togetha Inc.
Gasabo, Kigali
Response Time: We aim to respond to all inquiries within 30 days.
EU Data Subject Rights
If you're located in the EU or EEA, you have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.
This Privacy Policy is current as of the last updated date shown above. Togetha reserves the right to modify this policy at any time. We will notify users of material changes via email or by prominently posting changes on our website.