Privacy Policy
Last Updated: May 24, 2026
At TOCTalk, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose,
and safeguard your information when you use our mobile application, website, and related services
(collectively, the "Service"). By using TOCTalk, you consent to the data practices described in this
policy.
Key Points: TOCTalk is an advertising-supported social platform. We collect and use
your data to provide services, personalize your experience, and serve targeted advertisements. We share
data with advertising partners and third-party service providers.
Table of Contents
- Information We Collect
- How We Use Your Information
- How We Share Your Information
- Advertising and Marketing
- Cookies and Tracking Technologies
- Location Data
- Data Retention
- Your Privacy Rights
- Data Security
- Children's Privacy
- International Data Transfers
- Changes to This Policy
- Contact Us
1. Information We Collect
We collect various types of information to provide and improve our Service.
1.1 Information You Provide Directly
When you use TOCTalk, you voluntarily provide us with information, including:
Account Registration Information:
- Name and email address
- Phone number (optional)
- Password (encrypted)
- Workplace or organization affiliation
- Job title and department (optional)
Profile Information:
- Profile photo
- Bio and personal description
- Interests and preferences
- Professional information
User-Generated Content:
- Posts, comments, and reactions
- Photos, videos, and other media you upload
- Messages and communications with other users
- Event RSVPs and participation
- Marketplace listings and transactions
- Search queries
Communications:
- Customer support inquiries and correspondence
- Survey responses and feedback
- Communications with us or other users
1.2 Information Collected Automatically
When you access or use the Service, we automatically collect certain information:
Device Information:
- Device type, model, and manufacturer
- Operating system and version
- Unique device identifiers (UDID, IDFA, Android ID)
- IP address
- Browser type and version
- Screen resolution and device settings
- Mobile network information
Usage Data:
- Features and pages you access
- Time spent on different parts of the Service
- Click patterns and navigation paths
- Content you view, engage with, or create
- Search queries and results
- Interaction with advertisements
- App crashes and performance data
- Frequency and duration of sessions
Location Information:
- Precise location data (GPS coordinates) when you use location features
- Approximate location from IP address
- WiFi access points and cell tower information
- Bluetooth beacons (when enabled)
1.3 Information from Third Parties
We may receive information about you from other sources, including:
Business Partners and Advertisers:
- Demographic and interest data
- Online and offline purchasing behavior
- Inferred interests and preferences
Data Brokers and Analytics Providers:
- Marketing and advertising data
- Social media activity and interests
- Public records and information
Other Users:
- Contact information if others upload their contacts (with permission)
- Tags, mentions, and references in content
Workplace Administrators:
- Employee verification and roster information
- Organizational hierarchy and structure
- Workplace policies and guidelines
1.4 Inferred Information
We create inferences and profiles based on your activity, including:
- Interests, preferences, and behavioral patterns
- Predicted demographics and characteristics
- Likelihood to engage with certain content or ads
- Social connections and network analysis
- Content recommendations and personalization data
2. How We Use Your Information
We use collected information for various purposes:
2.1 Providing and Operating the Service
- Creating and managing your account
- Enabling you to post content and interact with other users
- Facilitating marketplace transactions and events
- Verifying your workplace affiliation through geofencing
- Processing and responding to your requests
- Providing customer support
2.2 Personalizing Your Experience
- Customizing your content feed based on interests and activity
- Recommending connections, events, and marketplace items
- Remembering your preferences and settings
- Suggesting content and features you might enjoy
2.3 Advertising and Marketing
- Serving targeted advertisements based on your profile, interests, and behavior
- Measuring ad performance and effectiveness
- Creating audience segments for advertisers
- Retargeting ads based on your interactions
- Analyzing advertising ROI and attribution
- Sending promotional communications (with consent)
- Marketing our services to prospective users
2.4 Analytics and Research
- Analyzing usage patterns and trends
- Understanding how users interact with the Service
- Conducting market research and surveys
- Measuring feature effectiveness and user engagement
- Creating aggregated and de-identified datasets
2.5 Improving and Developing the Service
- Testing new features and functionality
- Fixing bugs and technical issues
- Optimizing performance and user experience
- Training and improving AI/machine learning models
- Developing new products and services
2.6 Safety, Security, and Compliance
- Detecting and preventing fraud, abuse, and security threats
- Enforcing our Terms of Service and policies
- Investigating violations and suspicious activity
- Complying with legal obligations and requests
- Protecting our rights, property, and safety
- Verifying identity and preventing unauthorized access
2.7 Communication
- Sending service-related notifications and updates
- Notifying you about account activity
- Responding to inquiries and providing support
- Sending newsletters and promotional materials (with consent)
3. How We Share Your Information
We share your information in the following circumstances:
3.1 Within Your Workplace Community
Content you post (including posts, comments, photos, profile information, and marketplace listings) is
visible to other members of your workplace community. We do not share your content with users outside
your designated workplace without your consent.
3.2 With Service Providers and Business Partners
We share information with third-party vendors who provide services on our behalf:
Infrastructure and Hosting:
- Supabase - Cloud database and authentication
- Content delivery networks (CDNs)
- Data storage and backup providers
Analytics and Measurement:
- Analytics platforms (e.g., Google Analytics, Mixpanel)
- Performance monitoring tools
- A/B testing and experimentation platforms
Customer Support:
- Help desk and support ticket systems
- Chat and communication platforms
Communication Services:
- Email service providers
- Push notification services
- SMS providers
3.3 With Advertising Partners
We share information with advertising networks and partners to deliver targeted ads.
This includes:
- Ad Networks: Google Ads, Facebook Audience Network, and others
- Demographic and interest data for ad targeting
- Device identifiers (IDFA, Android Advertising ID) for ad tracking
- Hashed email addresses for matching with advertiser audiences
- Behavioral data including clicks, views, and conversions
- Location data for geotargeted advertising
- Aggregated and anonymized data about audience segments
Advertising partners may combine our data with their own data to improve targeting and measurement.
These partners are subject to their own privacy policies.
3.4 For Legal Reasons
We may disclose your information if required to do so by law or in response to:
- Legal process (subpoenas, court orders, warrants)
- Government or regulatory requests
- Investigations of potential violations of law
- Enforcement of our Terms of Service
- Protection of our rights, property, safety, or that of others
- Prevention of fraud, security threats, or illegal activity
3.5 Business Transfers
If TOCTalk is involved in a merger, acquisition, reorganization, sale of assets, bankruptcy, or similar
transaction, your information may be transferred as part of that transaction. We will notify you via
email and/or prominent notice on the Service of any such change in ownership.
3.6 With Your Consent
We may share your information for other purposes with your explicit consent or at your direction.
3.7 Aggregated and De-Identified Data
We may share aggregated or de-identified information that cannot reasonably be used to identify you
for research, marketing, analytics, or other purposes. This data is not subject to the restrictions
in this Privacy Policy.
4. Advertising and Marketing
4.1 How Advertising Works on TOCTalk
TOCTalk is a free, ad-supported platform. We show you advertisements to help pay for the Service.
These ads are tailored to you based on information we collect and inferences we make about your
interests, behavior, and characteristics.
4.2 Types of Ads
- Feed Ads: Advertisements that appear in your content feed
- Banner Ads: Display ads in various locations in the app
- Video Ads: Video content from advertisers
- Sponsored Content: Promoted posts from brands and businesses
- Native Ads: Ads designed to match the look and feel of content
4.3 Ad Targeting
We use various signals to determine which ads to show you:
- Profile information (age, location, workplace, job title)
- Content you've viewed, liked, or interacted with
- Your search history and queries
- Pages and features you've visited
- Device information and operating system
- Time of day and day of week
- Inferred interests based on behavior
- Lookalike audiences (similarity to other users)
- Data from third-party partners and data brokers
4.4 Third-Party Advertising Technologies
Advertising partners use cookies, pixels, SDKs, and similar technologies to:
- Serve and measure ad performance
- Track conversions and attributions
- Retarget you on other platforms
- Build profiles for ad targeting
- Analyze effectiveness of campaigns
4.5 Your Ad Choices
While you cannot completely disable ads (as they support our free Service), you have some choices:
In-App Controls:
- Adjust ad preferences in Settings (limited personalization options)
- Report inappropriate or irrelevant ads
- Hide specific ads you don't want to see
Device-Level Controls:
- iOS: Settings → Privacy → Advertising → Limit Ad Tracking
- Android: Settings → Google → Ads → Opt out of Ads Personalization
Industry Opt-Outs:
Note: Opting out of personalized ads means you'll still see the same number of ads,
but they may be less relevant to you. These opt-outs may not work if you clear cookies or use
different devices.
5. Cookies and Tracking Technologies
We and our partners use cookies, web beacons, pixels, local storage, and similar technologies to
collect information and provide functionality. See our Cookie Policy for
detailed information.
5.1 Types of Technologies
- Cookies: Small text files stored on your device
- Web Beacons/Pixels: Tiny graphics that track activity
- Local Storage: Data stored in your browser or app
- SDKs: Code in our app that collects data
- Device Fingerprinting: Techniques to identify devices
5.2 Purposes
- Authentication and security
- Preferences and settings
- Analytics and performance
- Advertising and measurement
- Fraud detection and prevention
6. Location Data and Geofencing
6.1 Why We Collect Location Data
TOCTalk uses location data primarily to verify that you are at your workplace when accessing the app.
This geofencing feature ensures that only authorized employees can access your workplace community.
6.2 Types of Location Data
- Precise Location: GPS coordinates when you use location features
- Approximate Location: City or region derived from IP address
- Workplace Location: Your designated workplace geofence
6.3 How We Use Location Data
- Verifying workplace presence for access control
- Showing location-relevant content and events
- Serving location-based advertisements
- Analytics about workplace attendance patterns
- Fraud prevention and security
6.4 Controlling Location Access
You can manage location permissions in your device settings. However, disabling location may limit
your ability to access certain features or the Service entirely.
7. Data Retention
We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy.
7.1 Active Accounts
- Profile and account data: Retained while your account is active
- Content (posts, photos, comments): Retained while your account is active
- Messages: Retained for a reasonable period or as required by law
7.2 Deleted Accounts
- Most personal data is deleted within 90 days of account deletion
- Some data may be retained in backup systems for up to 12 months
- Data required for legal compliance may be retained longer
- Aggregated and de-identified data may be retained indefinitely
7.3 Specific Retention Periods
- Usage logs: 2 years
- Analytics data: 26 months
- Marketing data: 3 years or until opt-out
- Legal/compliance records: As required by law (typically 7 years)
- Advertising data: 13 months
8. Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information:
8.1 General Rights
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Portability: Request your data in a structured, machine-readable format
- Objection: Object to certain processing of your data
- Restriction: Request restriction of processing in certain circumstances
- Withdrawal of Consent: Withdraw consent where we rely on it for processing
8.2 California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act:
- Right to Know: Categories and specific pieces of data we collect
- Right to Delete: Deletion of your personal information (with exceptions)
- Right to Opt-Out: Opt out of "sale" of personal information
- Right to Non-Discrimination: Equal service regardless of privacy choices
California Notice: We may "sell" or "share" your information as defined by California
law for advertising purposes. You can opt out by contacting us at
privacy@toctalk.app or using the "Do Not Sell My Personal
Information" link in the app.
8.3 European Privacy Rights (GDPR)
If you're in the European Economic Area, you have rights under the General Data Protection Regulation:
- Right of access and data portability
- Right to rectification and erasure
- Right to restriction and objection
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
8.4 How to Exercise Your Rights
To exercise any of these rights:
- Email us at privacy@toctalk.app
- Use privacy controls in your account settings
- Contact us through the in-app support feature
We will respond to your request within 30 days (45 days for CCPA requests). We may need to verify
your identity before processing your request.
9. Data Security
We implement appropriate technical and organizational security measures to protect your information,
including:
- Encryption of data in transit (TLS/SSL) and at rest
- Regular security audits and penetration testing
- Access controls and authentication mechanisms
- Employee training on data protection
- Incident response and breach notification procedures
- Physical security of data centers
However, no method of transmission over the internet or electronic storage is 100% secure. While we
strive to protect your information, we cannot guarantee absolute security. You are responsible for
maintaining the confidentiality of your account credentials.
10. Children's Privacy
TOCTalk is not intended for users under the age of 18. We do not knowingly collect personal
information from children under 18. If we become aware that we have collected personal information
from a child under 18 without parental consent, we will take steps to delete that information.
If you believe we have collected information from a child under 18, please contact us at
privacy@toctalk.app.
11. International Data Transfers
TOCTalk is based in the United States. Your information may be transferred to, stored, and processed
in the United States or other countries where we or our service providers operate. These countries
may have data protection laws that differ from your country.
When we transfer data internationally, we implement appropriate safeguards, including:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions for certain countries
- Privacy Shield certification (where applicable)
- Other approved transfer mechanisms
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology,
legal requirements, or other factors. We will notify you of material changes by:
- Posting the updated Privacy Policy on this page
- Updating the "Last Updated" date
- Sending notice via email or in-app notification
- Requiring your acceptance for material changes (where required by law)
Your continued use of the Service after the effective date of the revised Privacy Policy constitutes
your acceptance of the changes. If you do not agree with the updated policy, you must stop using
the Service and delete your account.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices,
please contact us:
Summary: TOCTalk collects and uses your data to provide services and show you targeted
ads. We share data with advertising partners and service providers. You have rights to access, delete,
and control your data. For full details, read this entire Privacy Policy.
Back to Home