This policy explains how Start Bigger LLC ("Tokanza", "we") processes personal data when you visit our website or create a store on our platform. We are the controller of the data described in sections 1 to 9; data about the customers of store owners' stores is covered in section 10.
1. Who we are and how to reach us
Start Bigger LLC, 1209 Mountain Road PL NE, STE N, Albuquerque, NM 87110, USA, registration no. On request. General enquiries: support@tokanza.com. Data protection officer / privacy contact: support@tokanza.com.
2. Data we collect
- Store-owner account data: name, email, phone, store name and domain, and your password (stored hashed with scrypt; we cannot read it).
- Billing data: processed by Stripe. We do not store your card number; we keep customer and subscription identifiers, invoices, payment status and amounts.
- Newsletter: your email, confirmation date, language and source.
- Affiliate programme: affiliate details, referral code, referral and commission records, payout details you give us, and the referral cookie.
- Technical data: IP address (we may store a hashed copy for protection and proof of consent), browser type, error and security logs, and session cookies.
- Analytics and advertising: only with your consent where required, as described in the Cookie Policy.
- Your correspondence with support.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating your account, running your store, providing the service | Performance of a contract |
| Collecting subscriptions, invoicing, tax and accounting duties | Contract; legal obligation |
| Security and prevention of fraud and abuse | Legitimate interests |
| Support and service communications | Contract / legitimate interests |
| Newsletter | Your consent (withdraw any time) |
| Analytics and advertising measurement | Your consent via the cookie banner |
| Affiliate programme and commission payouts | Contract; legitimate interests |
| Proof of acceptance of terms and policies | Legitimate interests / legal obligation |
4. Retention
- Account and store data: for the duration of the subscription, then a limited period after termination for recovery and disputes, then deletion.
- Billing records and invoices: for the statutory accounting and tax periods.
- Newsletter: until you unsubscribe, after which we keep only proof of the opt-out.
- Acceptance records (hashed values): for the contract term plus a reasonable limitation period.
- Security logs: a short period, no longer than needed for protection.
5. Processors and sub-processors
We share data only as needed with providers that process it on our behalf:
- Stripe, Inc. / Stripe Payments Europe — payment processing and subscription billing.
- Hosting and infrastructure provider — servers, storage and backups.
- Email delivery provider — transactional and newsletter emails.
We do not sell your personal data.
6. International transfers
Your data may be processed outside your country (for example in the United States or the European Union) by our providers. Where required we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.
7. Your rights
Depending on applicable law you may access, correct, delete, restrict, object to, or port your data, withdraw consent at any time, and lodge a complaint with your supervisory authority. To exercise your rights write to support@tokanza.com; we will reply within 30 days. We may ask you to verify your identity.
8. Security
We apply reasonable technical and organisational measures, including password hashing, per-store database isolation, an HTTPS requirement, request rate limiting and periodic backups. No system is 100% secure. See the Security page.
9. Children
Our services are for adults and we do not knowingly collect data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.
10. Store owners and their customers' data
When a store owner builds a store on Tokanza, the store owner is an independent controller of their customers' data (customer accounts, orders, addresses and store-level payment records) and is responsible for its legal basis, privacy notices and customer rights. Tokanza acts as a processor of that data on the store owner's instructions and under the Data Processing Addendum. If you are a customer of a store, contact the store owner first to exercise your rights.
11. Tracking tools currently enabled
No third-party analytics or advertising tools are currently enabled on this website.
12. Changes
We will update this policy when needed and show the last-updated date and version at the top of the page. We will notify you of material changes.