/// Data processing agreement

When this applies

This agreement applies when a business customer ("you") uses Toifel to collect click data from visitors to its links. For that data you decide why it is collected, and we process it only on your behalf. It forms part of our terms of service.

What we process

Click records: time, country, device type, browser, operating system, referring domain and a daily-salted one-way visitor hash. We never store IP addresses. Click records are kept for 30 days and daily totals for as long as your plan allows.

Our commitments

• We process the data only to provide the service to you, and never sell it or use it for advertising.
• People who run Toifel are bound to keep it confidential.
• We keep it encrypted in transit and limit access to production systems.
• We tell you without undue delay if we become aware of a breach affecting it.
• We help you answer requests from visitors where we reasonably can.
• When you delete your workspace, we erase its click data after the 30-day restore window.

Sub-processors

Click data is stored with DigitalOcean in Bengaluru, India. The full list of services we use is in the privacy policy. We will update that list before adding a new service that handles click data.