Privacy Policy

This Privacy Policy explains how TokPortal, a French company registered as Société par Actions Simplifiée à Associé Unique under RCS Paris 993 944 305, headquartered at 60 rue François 1er, 75008 Paris (“TokPortal”, “we”, “our” or “us”), collects, uses, discloses and otherwise processes personal data in connection with the TokPortal websites (tokportal.com, app.tokportal.com, *.tokportal.com) and related services (collectively, the “Platform”).

For the purposes of the European Union General Data Protection Regulation (“GDPR”), TokPortal is the data controller of the personal data described in this Privacy Policy. This Privacy Policy should be read together with our Terms of Service, which use the same defined terms (Client, Account Manager, Listing, Mission, Credits, and so on).

For any privacy matter you can contact us at team@tokportal.com or write to us at the postal address above, marked “Data Protection”. If you are located in the European Economic Area (“EEA”), United Kingdom or Switzerland, you also have the right to lodge a complaint with your local supervisory authority. In France, this is the CNIL (www.cnil.fr).

1. Scope of this Policy

This Privacy Policy explains how we process personal data about:

• Clients who purchase credits and post Listings (“Bundles”) on the Platform;
• Account Managers (AMs) who accept and fulfil Missions; and
• Visitors who browse any TokPortal site.

It does not cover third-party websites or services (including social-media platforms such as TikTok, Instagram, YouTube, or X, payment processors such as Stripe, or external analytics providers) that are not under our control. TokPortal has no partnership, endorsement, or affiliation with any of these platforms.

2. Personal Data We Collect

Below is an overview of the personal data we process and the source of each category.

2.1 Account Information (provided by you)

• Name, username/handle and password hash.
• Email address.
• Optional profile photo.

2.2 Identity & Business Data — Account Managers only (provided by you or our ID-verification partner)

• Date of birth (AMs must be at least 18 years old).
• Government identification (e.g., passport or national ID).
• Business registration details and VAT/SIRET number.
• Portfolio links or résumé.

2.3 Payment & Payout Data (processed by Stripe on our behalf)

• Last four digits of the payment card and billing address supplied by Clients.
• Payout details supplied by Account Managers.
• Stripe transaction tokens. TokPortal never stores full card numbers.

2.4 Listing / Mission Content (provided by Clients and AMs)

• Text descriptions, instructions, and target country.
• Video files, images, carousels, and thumbnails.
• Account-setup data and access tokens generated for a Mission, including TokMail addresses hosted on a TokPortal-owned domain.

2.5 Communications (generated or provided by you)

• Messages exchanged via the Platform.
• Support tickets and feedback forms.

2.6 Usage & Device Data (collected automatically)

• IP address and approximate location.
• Browser type and operating system.
• Referral URL, timestamps and clickstream data.

2.7 Cookie & Tracking Data (collected automatically — see Section 4)

• Session and authentication cookies.
• Stripe cookies required for secure payments.
• Audience-measurement and product-analytics cookies.

We do not intentionally collect special categories of data (such as race, religion, or health) or data about children.

3. How and Why We Use Personal Data (Legal Bases)

Under the GDPR, we rely on different legal bases depending on the purpose:

• Create and manage your TokPortal account and authenticate you — contract performance (Art 6(1)(b)).
• Enable Clients to purchase credits, post Listings, and engage Account Managers — contract performance.
• Process payments from Clients and payouts to Account Managers via Stripe — contract performance and legal obligation (tax and accounting compliance).
• Provide customer support and resolve disputes — contract performance and our legitimate interest in ensuring service quality.
• Send transactional emails and service notices — contract performance.
• Improve and secure the Platform, monitor trends, and fight fraud and abuse — legitimate interests (Art 6(1)(f)) in operating a reliable, secure marketplace.
• Send marketing emails or newsletters — consent (Art 6(1)(a)); you can withdraw consent at any time.
• Comply with laws, court orders or law-enforcement requests — legal obligation (Art 6(1)(c)).

4. Cookies & Similar Technologies

We use cookies and local-storage objects to:

• keep you logged in;
• remember your preferences;
• enable secure payments (Stripe);
• perform audience analytics and measure Platform performance.

You can control cookies via your browser and, where required by law, we display a cookie banner to obtain consent for non-essential cookies.

5. Sharing & Disclosure of Data

We share personal data only as necessary:

• With other Users — When a Client posts a Listing, the Listing content and username are visible to prospective Account Managers. When an Account Manager accepts a Mission, the Client can view the AM’s profile and communications.
• Service Providers — Hosting, payment processing (Stripe Payments Europe Ltd), analytics, email delivery, and ID verification. These processors are bound by written contracts and may process data only on our instructions.
• Legal & Safety — Authorities, courts or third parties when required to comply with law, enforce our Terms, or protect the rights, property or safety of TokPortal, our users, or the public.
• Business Transfers — In connection with a merger, acquisition or sale of assets, subject to confidentiality safeguards.

We do not sell or rent personal data.

6. International Transfers

Our servers are located in the European Union, but some service providers (e.g., Stripe, analytics) may process data in the United States or other third countries. Where we transfer personal data outside the EEA, we rely on:

• an adequacy decision by the European Commission; or
• Standard Contractual Clauses (SCCs) plus additional safeguards.

7. Data Retention

We keep personal data only for as long as necessary:

• Account data — while your account is active and for up to 5 years thereafter (statute of limitations for contractual claims).
• Transaction records & invoices — 10 years (French accounting law).
• Support tickets & communications — 3 years after closure.
• Cookies — see Section 4 (session vs. persistent).

You may delete your account at any time in the dashboard or by contacting us. Certain records (payments, invoices) may need to be retained for legal reasons.

8. Security

We implement industry-standard technical and organisational measures including, but not limited to:

• data encryption in transit (TLS 1.2+);
• hashed & salted passwords;
• least-privilege access controls;
• regular security reviews;
• incident-response procedures.

No online service is 100% secure, but we strive to protect your data.

9. Children’s Privacy

TokPortal is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from minors. If you believe we have done so, please contact us so we can delete the information.

10. Your Rights

10.1 EU / EEA residents (GDPR)

You have the right to:

• access your personal data;
• rectify inaccurate or incomplete data;
• erase data (“right to be forgotten”);
• restrict or object to processing;
• data portability;
• withdraw consent at any time (for marketing);
• lodge a complaint with a supervisory authority (e.g., CNIL).

10.2 California residents (CCPA / CPRA)

You have the right to:

• know which categories of personal information we collect and disclose;
• request deletion of personal information (subject to exemptions);
• opt-out of the sale or sharing of personal information (we do not sell personal information);
• non-discrimination for exercising your rights.

You (or your authorised agent) may exercise these rights by contacting us at team@tokportal.com.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the revised version on the Platform and indicate the “Effective Date”. Significant changes will be notified via email or Platform notice. Your continued use of TokPortal after the effective date constitutes acceptance of the updated Policy.

Contact Information