TONOYAN AI1. Controller and contact
TONOYAN AI is responsible for processing data under this policy. For privacy or data-rights requests, email support@tonoyanai.com.
2. Data we process
Account data: email address and its verification state, password stored only as a salted Argon2id hash, session records stored as hashes, workspace role and membership, subscription plan and status, a self-attestation that you are at least 16 years old with the policy version and timestamp, and fixed-code security events. If you enable multi-factor authentication, we store an encrypted authenticator secret, hashed recovery codes and passkey public-key credential data. Device biometrics never leave your device.
Seller data: the Wildberries API token you connect (encrypted on the server and never returned to the browser), and the data imported through the official API or uploaded by you: products, orders, sales, finance reports, advertising statistics, inventory, reviews and returns, product costs and the analytics derived from them.
Support data: support tickets, messages and attachments you send, and account-deletion or data-rights requests together with the verification state of the request.
Technical data: request logs with IP address, user agent, timestamps and status codes needed to operate and secure the service, rate-limit counters, and audit records of security-relevant actions.
We do not store card or bank details. Payments are processed by licensed payment providers, which share with us only the payment status and reference needed to activate a subscription.
3. Why we process data
To create and secure your account, connect your seller account, import marketplace data, calculate profit and other analytics, show recommendations and alerts, answer assistant questions on your own data, provide support, activate and manage subscriptions, comply with legal obligations (including accounting and tax duties) and handle data-rights requests. The legal bases are performance of the contract with you, our legitimate interest in the security and operation of the service, legal obligations and, where required, your consent.
4. Cookies and browser storage
The service uses only functional cookies and browser storage: a strictly necessary session cookie (HttpOnly, Secure, SameSite) that keeps you signed in, and preference cookies for interface language, theme and experience mode. Your browser also keeps a CSRF token and, during onboarding, temporary onboarding state. We do not use advertising or third-party tracking cookies and we do not run third-party analytics on the site.
5. Official API and automation boundary
Marketplace data is read through official APIs only. The service does not change prices, advertising, product cards, stock or supplies on the marketplace automatically. Every recommendation requires your own review and action.
6. Sharing and processors
Data is processed on servers operated for TONOYAN AI (hosting, database and cache infrastructure), by an email delivery provider for confirmation, security and support emails, and by licensed payment providers for subscription payments. Processors act on our instructions. We do not sell personal data and do not share it with advertisers. Access inside the service is limited by workspace role and operational need; data may be disclosed to authorities where the law requires it.
7. Retention and deletion
Account and seller data is kept while your account is active and for as long as needed to provide the service. Email-delivery records and authentication security events are kept for 90 days in redacted form (status codes and hashes, never message bodies or tokens). Records required by accounting, tax or other legal duties are kept for the period the law prescribes.
You can request deletion of your account in the application or on the public account-deletion page. Identity and account ownership are verified before deletion becomes irreversible; data that must be retained by law is kept only for the required period.
8. Security
Controls include encryption in transit (HTTPS), authenticated encryption of marketplace tokens and other sensitive fields at rest, Argon2id password hashing, hashed sessions and recovery codes, encrypted authenticator secrets, CSRF protection, rate limits, audit logs, backups and least-privilege access. Changing an authentication factor revokes all other active sessions.
9. Your rights
Depending on applicable law you may request access to your data, correction, export, restriction of processing, objection or deletion, and you may withdraw consent where processing is based on consent. Requests are verified before we act on them and answered in writing. You may also complain to the data-protection authority competent for you.
10. Changes
We publish updates to this policy on this page with a new effective date. Material changes are announced in the application or by email before they take effect.