Legal
Privacy Policy
Template notice. This is a starting draft, not legal advice. Have a qualified attorney review and adapt it before you rely on it. Replace every [bracketed] item.
This policy explains what Torva collects, why, and your choices. We aim to collect as little as possible.
Information we collect
- Account information: your name, work email, company name, and password (stored only as a secure hash).
- Domains and scan data: the domains you verify and the results of scans we run for you.
- Billing information: handled by Stripe. We store a customer reference and your plan status, never your card number.
- Instant check: when you run the free instant check, we process the domain you enter and public information about it to produce a result. [State your retention: e.g., we keep this only briefly to operate and improve the check.]
- Basic usage data: [If you add cookie-free analytics such as Plausible, say so here. If you add anything that uses cookies or tracks across sites, you must add a consent banner.]
Cookies
We use a single essential cookie to keep you signed in. It is required for the Service to work and is not used for tracking or advertising. We do not use advertising or cross-site tracking cookies. [If this changes, add a consent banner and update this section.]
How we use information
To provide and secure the Service, run the scans you request, process payments, send service and (with your consent where required) marketing email, and comply with law. We do not sell your personal information.
Sharing
We share information only with service providers that help us operate, such as Stripe for payments and [your hosting/email providers], under agreements that protect it, or when required by law. Scan reports are also sent to the address that verified the relevant domain.
Data retention
We keep account and scan data while your account is active and for [period] afterward, then delete or anonymize it, except where law requires longer.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to certain processing. Email [email protected] and we'll respond as required by law. [Add state/GDPR-specific disclosures as counsel advises.]
Security
We protect your information with encryption in transit, hashed passwords, access controls, and the practices described on our security page. No method is perfectly secure, but we work to hold ourselves to the standard we measure others against.
Children
The Service is for businesses and is not directed to children under 16. We don't knowingly collect their information.
Contact
Questions about privacy: [email protected], or write to Torva LLC, [your mailing address].