Privacy Policy

1. Scope

This Privacy Policy explains how TAKATAK collects, uses, stores, protects, and discloses personal information connected with the TAKATAK User Official Dashboard.

2. Information we collect

We may collect the following information:

• First name and last name.
• Email address.
• Supabase authentication user identifier.
• Account role, status, and client memberships.
• Business and service information submitted through the dashboard.
• Login, session, security, and audit information.
• IP address, browser information, and device information when required for security.
• Support communications and account requests.

Passwords are processed through Supabase Authentication. TAKATAK does not store readable account passwords in the application database.

3. How information is collected

Information may be collected when you register, verify your email, sign in, update your profile, use dashboard services, communicate with support, or interact with connected services.

4. Why we use information

Personal information may be used to:

• Create, verify, and manage your account.
• Authenticate users and maintain secure sessions.
• Provide access based on account role and client membership.
• Deliver requested dashboard services.
• Send account verification and security emails.
• Respond to support requests.
• Prevent fraud, abuse, and unauthorized access.
• Maintain security logs and investigate incidents.
• Comply with applicable legal obligations.

5. Consent

By registering and using the dashboard, you consent to the collection, use, and disclosure of information as described in this Policy.

Where consent is legally required, you may withdraw it, subject to legal, security, contractual, and operational restrictions. Withdrawal may prevent continued use of some dashboard services.

6. Service providers

TAKATAK may use service providers to operate the dashboard, including:

• Supabase for authentication and database services.
• Maileroo for transactional email delivery.
• Website hosting and infrastructure providers.
• Monitoring, security, and technical-support providers.
• Connected business services authorized through your account.

Providers receive only the information reasonably required to perform their services and remain subject to applicable contractual and security obligations.

7. Disclosure of information

TAKATAK does not sell personal information.

Information may be disclosed to authorized service providers, account administrators, legal authorities, or other parties when required to provide services, protect users, investigate misuse, enforce agreements, or comply with applicable law.

8. Cookies and sessions

The dashboard uses authentication cookies and similar technologies required to maintain secure sessions, remember authentication state, prevent unauthorized access, and operate protected pages.

Disabling required authentication cookies may prevent access to the dashboard.

9. Information security

TAKATAK applies administrative, technical, and organizational safeguards appropriate to the sensitivity of the information being processed.

These safeguards may include encrypted connections, password hashing through the authentication provider, role-based access controls, tenant isolation, protected sessions, audit records, restricted database access, validation, and security monitoring.

No electronic system can guarantee absolute security. Users must protect their passwords and report suspected unauthorized access promptly.

10. Retention

Personal information is retained only for as long as reasonably required to operate the account, provide requested services, maintain security records, resolve disputes, enforce agreements, and satisfy legal obligations.

Information that is no longer required may be deleted, anonymized, or securely archived according to TAKATAK retention procedures.

11. Processing outside Québec

Some service providers may process or store information outside Québec or Canada. Information processed in another jurisdiction may be subject to the laws of that jurisdiction.

TAKATAK evaluates service providers and applies reasonable contractual, technical, and organizational safeguards before transferring personal information.

12. Access and correction

Subject to applicable law, you may request access to personal information held about you and request the correction of inaccurate or incomplete information.

TAKATAK may require identity verification before processing a privacy request.

13. Account deletion

You may request account deletion through the official TAKATAK support channel associated with your account.

Certain records may be retained when required for security, fraud prevention, legal compliance, billing, dispute resolution, or enforcement purposes.

14. Privacy incidents

TAKATAK investigates suspected confidentiality and security incidents and takes reasonable steps to contain, assess, document, and correct confirmed incidents.

Notifications will be provided when required by applicable law.

15. Privacy requests

Requests concerning access, correction, deletion, consent, or privacy concerns may be submitted through the official TAKATAK support channel associated with your account.

16. Policy updates

This Policy may be updated when dashboard services, providers, security practices, or legal requirements change. The current effective date will be displayed at the top of this page.