Privacy Policy

This policy explains what information Tomora (“we”, “us”) collects when you use our website-builder service, how we use it, and the choices you have. By using Tomora you agree to this policy.

Who this policy is about

Tomora serves two kinds of people, and it matters which one you are.

If you build a site with us, you are our customer and this policy describes how we handle your information.

If you are visiting, buying from or donating to a site built with Tomora, the person or organisation who runs that site decides what happens with your information. We hold and process it on their behalf. Contact them first with any request about your data; we will help them respond.

Information we collect

Your account

Your name, email address, and the details you add to your site: business name, contact details, logo, images and written content. If you take payments or donations, the bank account you connect for payouts and the records of transactions made through our payment provider.

From visitors to your published site

Basic, non-identifying visit counts, and, where a visitor chooses to contact you, place an order or make a donation, the details they submit, such as name, email, phone number and delivery address. That information belongs to you, the site owner, and appears in your dashboard.

If you activate Tomora Live

Tomora Live runs your shop inside WhatsApp. When a customer messages your store, we process their WhatsApp phone number, the messages exchanged with the automated shop, and the cart and order that result, so the conversation can continue and the order can be fulfilled. Those messages pass through WhatsApp, which is operated by Meta under its own terms and privacy policy. Live only does this once you switch it on.

Support requests

When you write to us through Help & Support, we store your message, the address you asked us to reply to, and the account it came from, so that a request cannot be lost and so we can answer it.

Analytics and advertising

On Tomora's own marketing site and dashboard we use the TikTok pixel to measure how well our advertising works. It records page views and events such as creating an account or subscribing, and for those events we send TikTok a hashed, irreversible form of an email address or phone number so it can match the action to an ad. We never send these in the clear.

This does not run on the sites you publish. A visitor to your shop or your organisation's page is your visitor, not ours, and our advertising tools are deliberately disabled there. If you add your own analytics to your site, that is your choice and your responsibility to disclose.

How we use information

To provide and maintain your account and websites, process payments and payouts, send service and transactional emails such as order, donation and support notifications, provide support, measure and improve the service, and keep it secure. We do not sell your personal information.

Payments

Card and online payments are processed by Paystack. We do not see or store full card numbers. Money paid by your customers and donors is split at Paystack and settles into the bank account you connected, so it reaches you directly rather than being held by us. Your dashboard records those payments so your history is complete. Please review Paystack's own privacy terms for how they handle payment data.

Who we share information with

Only with the providers that run the service for us, when the law requires it, or with your consent. Those providers are Supabase (database and accounts), Vercel (hosting), Paystack (payments), Resend (email), TikTok (advertising measurement, as described above) and, if you activate Tomora Live, Meta's WhatsApp Business Platform. Submissions made by visitors to your site are shared with you, its owner.

Keeping information, and keeping it safe

We keep your information for as long as your account is active and for as long as we must to meet legal and accounting obligations. Deleting your account removes the site data associated with it; records we are required to retain, such as transaction history, are kept for that period. We use reasonable technical and organisational measures to protect your data, though no method of transmission or storage is completely secure.

Your rights

You can access, correct or delete most of your information directly in your dashboard. You may also ask us for a copy of your data, ask us to correct or delete it, or object to how we use it. Nigeria's Data Protection Act gives you these rights, and we honour equivalent requests wherever you are. Write to us and we will respond.

Children

Tomora is for businesses and organisations and is not intended for children. We do not knowingly collect information from anyone under 18.

Changes

We may update this policy. Material changes are reflected in the “last updated” date above, and we will tell you directly where the change is significant.

Contact

Questions about privacy, or a request about your data? Write to [email protected], or use Help & Support in your dashboard.