TokerAI global reach · smart cross-border matching
Post RFQPublish productsSign up / Sign in

Privacy policy

Version 1.0 · Effective 2026-07-22 · 中文

This policy applies to toker365.com and its sub-domains, operated by Toker Global Pte. Ltd. We handle personal information in line with Singapore's PDPA, China's PIPL and the EU's GDPR.

1. Information we collect

1.1 What you submit

  • Account info: email, name, company, country/region, bcrypt-hashed password (10 rounds).
  • RFQ submissions: product, quantity, target price, target market, message.
  • Prospecting tasks: product, markets, buyer profile, priority signals, preferred outreach channels.
  • AI chat sessions (user messages and assistant replies).
  • Supplier/partner application details: business licence, certifications, case studies, contact person.

1.2 Automatically collected

  • Session cookies: toker_admin, toker_supplier, toker_partner, toker_buyer, toker_prospect_key — used only for login state and anonymous prospect-task ownership. All are httpOnly + SameSite=Lax; see the Cookie policy.
  • Access logs: IP address (stored as SHA-256 hash), timestamp, request path — for anti-abuse and compliance audit.
  • Email-validation outcome (real / disposable) to reduce RFQ fraud.

2. How we use your information

  • Provide the core service: match suppliers, notify RFQs, run the buyer dashboard.
  • Improve the Platform: analyse funnel events, monitor anomalies, refine matching.
  • Meet compliance obligations: AML, anti-fraud, tax and regulatory reporting.
  • Communicate with you: account notices, match results, service updates.

3. Legal basis

Legal bases include: (a) performance of a contract with you (service matching, account management); (b) legitimate interests (fraud prevention, platform security, analytics); (c) legal obligations (tax, AML); (d) explicit consent where required (e.g. marketing emails, cookie categories).

4. Sharing

We share your information only: (a) with counterparties you explicitly designate (e.g. after you submit an RFQ, the matched supplier sees your product need and contact); (b) with cloud/infrastructure vendors (Azure Singapore region, email delivery, payment compliance) on a need-to-know basis; (c) as required by law or lawful government request; (d) with a successor entity in a corporate transaction (we will notify you in advance).

We do not sell personal information to third parties.

5. Cross-border transfers

Data is primarily stored in the Azure Singapore region. When you use the service from mainland China or the EU, relevant data may be transferred to Singapore for processing. We rely on Standard Contractual Clauses (SCC), PIPL cross-border security assessments, or your explicit consent as appropriate.

6. Retention

  • Active account data: retained while the account is active.
  • RFQ and prospecting tasks: retained for 3 years by default, for history and audit.
  • AI chat sessions: retained for 12 months for service improvement.
  • AML and tax records: retained for the statutory period (typically 5-7 years).
  • Access logs (hashed IP): 90 days.

7. Your rights

Subject to applicable law, you may:

  • access and obtain a copy of your data;
  • correct inaccurate information;
  • request deletion in certain circumstances;
  • restrict or object to certain processing;
  • withdraw consent (without affecting prior processing);
  • lodge a complaint with a supervisory authority.

To exercise your rights, contact privacy@toker365.com; we will respond within 30 days.

8. Security

We apply reasonable industry-standard controls: HTTPS everywhere, one-way password hashing (bcrypt), signed session cookies (iron-session), access logs, least-privilege access and periodic security review. No online service can guarantee absolute security; please keep your credentials safe.

9. Children

The Platform is intended for B2B corporate users and is not directed at individuals under 18. If we learn we have inadvertently collected data from a minor, we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. Changes will be announced on the Site and emailed to registered users. Continued use constitutes acceptance.

11. Contact us

Privacy contact: privacy@toker365.com
Postal: Toker Global Pte. Ltd., Singapore

AIWhatsAppMsg