Privacy policy
How Todijo processes information for its multi-vendor marketplace.
Who is responsible for processing?
Todijo currently operates as a pre-incorporation project and service and is not yet an incorporated company. A French SAS is the intended future legal form, but no Todijo SAS currently exists. No SIREN, SIRET, registration number, VAT number or registered postal address is available yet. No DPO has been appointed.
Information Todijo processes
Todijo processes account details such as name, email, password hash, verification status and account role; buyer and seller profiles; store contact, location and presentation details; product listings and images; messages and reviews; order, recipient, delivery, fulfillment, issue and refund-evidence information; support communications; and security or technical logs needed to operate and protect the service.
Sign-in with third-party providers
If you choose Google, Apple or Facebook sign-in after that provider is configured, Todijo may receive the provider account identifier, name or display name, email address when supplied, and an email-verification or trust signal when supplied. Todijo uses this information only for authentication, account creation or secure linking, account security and avoiding unsafe duplicate accounts. Todijo never receives your provider password and does not request Gmail, Google Drive, contacts, Facebook posts, friends, messages, photos or advertising data. These providers authenticate you; they do not operate Todijo, sell marketplace products or process Todijo orders. Apple relay email addresses remain valid account identities.
Orders and payments
Todijo uses order and seller information to create, confirm, fulfill and support marketplace transactions. Stripe processes checkout, payment confirmation, seller onboarding, subscriptions and payouts where applicable. Todijo stores Stripe identifiers and status information needed to reconcile transactions, but does not receive full payment-card details.
Why information is used
Information is used to create and secure accounts, verify registration, operate stores and listings, provide carts and favorites, enable buyer-seller messages and reviews, process and support orders, investigate issues and refunds, prevent abuse or fraud, send service emails, maintain technical reliability and respond to support or privacy requests. The owner must confirm the applicable legal basis for each activity.
Service providers and recipients
Repository evidence identifies Stripe for payments and seller services, Cloudflare Turnstile for registration security, Cloudinary for seller and product images, Cloudflare R2-compatible object storage for refund evidence, and an SMTP provider for service emails. Information is disclosed only as needed for the requested service, security, dispute handling or legal obligations. Provider locations, contracts and any international-transfer safeguards require owner verification.
How long information is kept
Information is kept only while needed to provide the service, secure accounts, maintain transaction history, resolve disputes and meet applicable accounting or legal obligations. Retention depends on the data and context; no unsupported fixed period is claimed. Deletion requests may result in deletion, deactivation or anonymisation while records that must be preserved remain protected.
Your GDPR rights
Where the GDPR applies, you may request information and access, rectification, erasure, restriction, portability or object to processing. You may withdraw consent at any time where processing relies on consent, without affecting earlier lawful processing. You may also complain to the competent supervisory authority in your place of residence, work or the alleged infringement.
Privacy & dataAccount and data deletion instructions
Security and browser storage
Todijo uses password hashing, signed HTTP-only session cookies, access controls, signed Stripe webhooks, human-verification controls and restricted evidence access. Necessary cookies and browser storage support sessions, language, cart, checkout reconciliation and consent choices. Optional categories remain off without consent and choices can be changed through Manage cookies.
Policy updates
This notice will be updated when Todijo's verified operator details, processing practices or providers materially change. A renewed cookie choice will be requested when a material consent change requires it.