Privacy Policy

1. Introduction

Welcome to Ton Artisan ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Ton Artisan is a platform that connects skilled artisans and craftspeople with customers seeking quality craftsmanship services. Our platform enables service providers to showcase their work, manage bookings, and grow their businesses while helping customers find trusted professionals for their projects.

2. Information We Collect

2.1 Personal Information You Provide

• Account Information: Name, email address, password, and profile information
• Professional Information: Business name, service descriptions, pricing, portfolio images
• Contact Information: Phone number, business address, website
• Payment Information: Billing address and payment method details (processed securely by Stripe)
• Communication Data: Messages, reviews, and feedback exchanged through our platform

2.2 Information Collected Automatically

• Usage Data: How you interact with our platform, pages visited, features used
• Device Information: IP address, browser type, operating system, device identifiers
• Location Data: General geographic location to show relevant artisans and services
• Cookies and Tracking: Session cookies, preferences, and analytics data

2.3 Third-Party Integrations

• Google Calendar: Calendar access for appointment scheduling (with your explicit consent)
• Stripe: Payment processing and subscription management
• Twilio: SMS notifications and WhatsApp communications
• Brevo: Email marketing and transactional emails

3. How We Use Your Information

• Service Provision: Create and manage your account, process bookings, facilitate communications
• Payment Processing: Handle subscription billing, service payments, and refunds
• Calendar Integration: Sync appointments with your Google Calendar (when authorized)
• Communications: Send booking confirmations, service updates, and customer support
• Platform Improvement: Analyze usage patterns to enhance our services and user experience
• Marketing: Send promotional emails and updates (with your consent)
• Legal Compliance: Meet regulatory requirements and protect against fraud

4. Information Sharing and Disclosure

4.1 When We Share Information

• Between Users: Artisan profiles and contact information are visible to potential customers
• Service Providers: Trusted third parties who help us operate our platform
• Legal Requirements: When required by law or to protect our rights and users
• Business Transfers: In case of merger, acquisition, or sale of assets

4.2 Third-Party Services

• Stripe: Secure payment processing and PCI compliance
• Google: Calendar integration and OAuth authentication
• Clerk: User authentication and account management
• Supabase: Database hosting and data storage
• Vercel: Website hosting and content delivery

5. Data Security

We implement robust security measures to protect your personal information:

• Encryption: All data transmission is secured with SSL/TLS encryption
• Secure Storage: Data is stored in secure, compliant cloud infrastructure
• Access Controls: Limited access to personal data on a need-to-know basis
• Regular Audits: Ongoing security assessments and vulnerability testing
• PCI Compliance: Payment data is processed according to PCI DSS standards

6. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain processing of your personal information
• Restriction: Request limitation of processing in certain circumstances
• Withdrawal: Withdraw consent for processing (where applicable)

To exercise these rights, please contact us at privacy@tonartisan.com

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for basic platform functionality
• Performance Cookies: Help us analyze and improve our services
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used for targeted advertising (with your consent)

You can control cookie preferences through your browser settings, though some features may not work properly if disabled.

8. Data Retention

We retain your personal information only as long as necessary:

• Active Accounts: While your account remains active and for legitimate business purposes
• Inactive Accounts: Up to 3 years after last activity, unless deletion is requested
• Payment Records: As required by financial regulations (typically 7 years)
• Legal Requirements: As mandated by applicable laws and regulations

9. International Data Transfers

Our services are provided globally, and your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses approved by relevant authorities
• Adequacy decisions by regulatory bodies
• Certification schemes like Privacy Shield (where applicable)

10. Children's Privacy

Ton Artisan is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe we have collected information from your child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending email notifications for material changes
• Providing in-app notifications where appropriate

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: