Privacy Policy
Last updated: May 2026
1. Information We Collect
Tonso collects personal information when you create an account and use our barbershop management platform. This may include:
- The responsible barber's name and the barbershop name
- Email address
- Phone number (optional)
- Password, stored hashed with bcrypt
- Basic Google account info if you sign in with Google
- Data about your customers that you enter in the platform (name, phone, email) — Tonso processes this on your behalf as a data processor
- Technical usage data: IP address, browser type, access logs
2. Use of Information
We use the information collected to:
- Operate the Tonso platform and manage your account
- Process and display your customers' bookings in your calendar
- Send booking confirmations by email to your customers
- Send you operational notifications (account, billing, incidents)
- Improve the service through aggregate, anonymous analytics
- Comply with legal obligations (billing, taxes)
3. Data Protection
We apply technical and organizational measures to protect your information:
- Encryption in transit (HTTPS) on all communications
- Passwords hashed with bcrypt
- Servers in the European Union (Hetzner, Germany) subject to GDPR
- Restricted access to strictly necessary team members
- Daily encrypted backups
- Access monitoring and logging
4. Sharing Information
Tonso does not sell or share your personal data. We share limited information only with:
- Infrastructure providers needed to operate the service (hosting, transactional email)
- WhatsApp/Meta when a customer opens a click-to-chat link generated by Tonso — Tonso only generates the URL, it does not send automated messages
- Paddle.com, our Merchant of Record, which processes payments and billing when you subscribe to a paid plan
- Legal authorities when required by law
5. Google Sign-In
If you choose to sign in with your Google account, we access only:
- Your Google profile name
- Your email address
- Your profile picture (optional)
We do not access your contacts, personal calendar, or any other information from your Google account beyond what is mentioned above.
6. Your Rights (GDPR)
Under the General Data Protection Regulation you have the right to:
- Access your personal data
- Request rectification of inaccurate data
- Request deletion of your account and associated data
- Request portability of your data in a standard format
- Object to processing or limit its use
- Withdraw your consent at any time
- File a complaint with the competent data protection authority
7. Cookies
Tonso uses essential cookies for the platform to work:
- Session cookies to keep your authenticated access (JWT token)
- Preference cookies to remember your settings (light/dark theme, language)
- We do not use advertising or cross-site tracking cookies
8. Changes to This Policy
We may update this privacy policy occasionally. We will notify you of significant changes by email to the address associated with your account and publish the revised version on this page with the updated date.
9. Contact
To exercise your rights or for privacy inquiries, write to support@tonso.app. We will respond within a maximum of 30 days.