Privacy Policy
Last updated: September 2026
Torkal keeps the information required to operate a booking system, appointment management, and notifications. We do not sell personal information to third parties.
What information we collect
To provide the service we store business details (name, email address, appointment settings) and client details entered when booking an appointment — full name and phone number. This data is stored in Supabase's secure databases, our infrastructure provider.
Authentication & sign-in (Supabase Auth)
Business owners sign in to the management system via Supabase Auth, including password login, a one-time magic link by email, or signing in with a Google account. Login details are encrypted and stored according to Supabase's security standards, and we never store passwords in plain text.
Security & bot protection (Cloudflare Turnstile)
We use Cloudflare Turnstile to prevent fraud, bots, and abuse of sign-up and booking forms, while preserving user privacy without invasive tracking.
Use of cookies
The site uses essential cookies to maintain the sign-in session of business owners, as well as a cookie that stores client details (name and phone) to auto-fill future bookings. The site has no advertising or third-party marketing tracking cookies.
WhatsApp & email communication
To confirm, remind, and cancel appointments, the system may send WhatsApp messages to the phone number entered at booking, as well as emails to business owners (such as error alerts or support requests) via the secure email provider Resend. Phone numbers and email addresses are used solely for service-related communication and are not shared with external parties for marketing purposes.
Control over your information
Business owners can update their business details and request changes or deletion of information in accordance with the law. Clients who want their details removed from a specific business's system can contact that business directly or reach us through the contact page.