Tor helps customers book services and helps service businesses manage appointments, calendars, customers, teams, payments, and daily operations. This policy explains what information we collect, why we use it, when it may be shared, and what you can ask us to do with it.
This policy applies to the website, app, dashboards, forms, support channels, and related services that link to it. Tor is the controller of personal information it collects for those services. A business using Tor remains responsible for notifying its workers and customers about its own processing of their information.
1. Information we collect
The information we collect depends on how you use Tor and may include:
- account and business details, such as name, email, phone, business name, settings, team roles, and sign-in data;
- operational information, such as appointments, calendars, services, availability, customer records, notes, reminders, products, and payments;
- support requests, messages, feedback, attachments, and information needed to respond;
- technical and usage information, such as IP address, device identifiers, browser or app version, operating system, logs, approximate location, viewed screens, actions, and crash reports;
- cookies and analytics information. Necessary cookies operate by default; non-essential analytics or similar tools operate only with consent or another lawful basis.
2. How we use information
We use personal information to provide, operate, secure, and lawfully administer Tor, including to:
- operate, maintain, and improve the services;
- create accounts and manage appointments, calendars, customers, teams, and payments;
- send operational messages, support responses, security alerts, and service updates;
- prevent fraud, abuse, unauthorized access, and harm;
- diagnose faults, measure stability, and improve performance;
- meet legal obligations and respond to lawful requests;
- run analytics, marketing, or personalization only when permitted.
3. Lawful basis and consent
Depending on the context, we process information because it is needed to provide the service, because we have a legitimate operational or security need, because the law requires it, or because you consented.
Where consent is required, you may withdraw it. Withdrawing consent may limit features that depend on it. We treat online identifiers as personal information when applicable law does so.
4. When we share information
We do not sell personal information. We may share it only in limited circumstances:
- with hosting, infrastructure, security, email, support, payments (including Stripe), analytics, and other service providers operating under appropriate confidentiality and data-processing duties;
- with managers, workers, or authorized users in a business workspace according to the permissions set by that business;
- with courts, regulators, law enforcement, or others when required by law or needed to protect rights, safety, or the services;
- in a merger, financing, acquisition, restructuring, or asset sale, subject to reasonable protections for personal information.
5. Information entered by a business
Businesses using Tor may enter personal information about customers, workers, suppliers, or leads. In that context, the business decides what information enters the system and how it is used. Tor processes it to provide and secure the services, support the business, and meet legal obligations.
If a business entered your information in Tor, contact that business first about access, correction, deletion, or operational questions. Where appropriate, we will help the business handle the request.
6. International transfers
We may process and store information in countries where we or our providers operate. When personal information is transferred between countries, we use a transfer mechanism permitted by applicable law.
7. Security and retention
We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, logging, backups, and security monitoring. No online service can promise absolute security.
We retain personal information while the account is active, and afterward only while needed for the purposes described here, including service delivery, account administration, security, legal duties, disputes, tax, and backup integrity. When it is no longer needed, we delete or anonymize it where reasonably possible.
8. Your rights and choices
Depending on where you are and how the information is processed, you may request access, correction, deletion, restriction, objection, withdrawal of consent, or a copy of certain personal information. We may need to verify your identity before responding.
Send privacy requests to support@tor.co.il. If the request concerns information controlled by a business using Tor, we may direct you to that business or help it respond. You may also lodge a complaint with the Israeli Privacy Protection Authority.
9. Children and security incidents
Tor is for customers booking services and for the businesses that take those bookings. It is not directed to children. We do not knowingly collect personal information directly from children through the services.
If a security incident affects personal information, we investigate and document it and notify the Privacy Protection Authority, affected people, or other authorities when required by law, without undue delay.
11. Changes and contact
We may update this policy. If a change is material, we will take reasonable steps to notify users through the services or another appropriate channel.
The controller for this policy is Tor, reachable at support@tor.co.il and https://www.tor.co.il. Questions or privacy requests can be sent to that address. You can delete your account as described on the Account deletion page.