Toyoni

Privacy Policy

Last updated: June 4, 2026

This policy explains what Toyoni collects, why, who we share it with, and your rights.

1. What we collect

  • Site analytics. Via PostHog: pages viewed, clicks, approximate country (from IP), device and language. In the EU/EEA/UK/Brazil these load only after you consent (see §5).
  • Messages you send. When you contact us on WhatsApp, KakaoTalk, LINE, Instagram, or Messenger, that platform handles the message under its own policy; we receive what you send (including screenshots) to do the task.
  • Task details. Information you give us to complete a request — which may include your name, passport/ID details, delivery address, and booking info. We use these only to perform the task you asked for.
  • Payments. Processed by Stripe. We do not store full card numbers; we keep a record of the amount, status, and a reference to your request.
  • Operational records. A request ledger (status: quoted, paid, completed) we keep to run the service.

2. Why we use it (legal bases)

  • To perform your task (contract) — task details, payment.
  • To run and improve the service (legitimate interests) — operational records, aggregate analytics.
  • Analytics cookies (consent) — where required, only after you opt in.

3. Sensitive details (ID, passport)

If a task requires identity details, we collect only what’s needed, use them solely to complete that task, transmit them through the relevant platform, and don’t keep them longer than necessary. We never sell personal data.

4. Who we share with

Only as needed to provide the service: the third-party platform/merchant for your task (e.g. a ticketing site), Stripe (payments), PostHog (analytics), Google (our operational sheet), and the chat platform you contacted us on. Each is an independent processor under its own terms. We don’t sell your data or use it for third-party advertising.

5. Cookies & consent

Essential functionality uses minimal local storage. Analytics (PostHog) is only loaded after consent for visitors in the EU/EEA, UK, and Brazil, shown via a banner; elsewhere analytics may run without a banner as permitted by local law. You can clear local storage in your browser at any time.

6. Retention

We keep task and payment records as long as needed for the service, accounting, and legal obligations, then delete or anonymize them. Analytics data is retained per our PostHog configuration.

7. Your rights

Depending on where you live (e.g. GDPR/UK-GDPR, Korea PIPA, Brazil LGPD) you may have rights to access, correct, delete, or port your data, and to object to or restrict processing. To exercise them, contact us (below). You can also complain to your local data protection authority.

8. International transfers

We operate from Korea and use global processors, so data may be processed outside your country. Where required, transfers rely on appropriate safeguards.

9. Security

We use reasonable technical and organizational measures to protect your data. No method is perfectly secure, but we limit who can access task details and don’t store payment card numbers.

10. Children

Toyoni isn’t intended for anyone under 18.

11. Changes & contact

We’ll post updates here with a new date. Questions or requests: message us in any of our chat channels.