Data Processing and Subprocessor Notice

Roles

Each developer is the controller of its buyer and property records. Tora Land processes that information to provide the contracted service.

Subprocessors

Core hosting and storage are provided through Google Cloud. Email, messaging and payment providers are used only when configured for the relevant tenant. Tenant payment provider credentials and data remain partitioned by developer.

Security

Controls include access scoped to each tenant, encryption in transit, access logging, signed webhooks, payment idempotency, backups and tested recovery procedures.

Retention

Active account records are retained for service delivery. Financial and audit records are retained as required by contract and applicable law. Account deletion uses a seven day recovery window before permanent removal, except where legal retention applies.

Requests

Contact privacy@tora.land for data subject requests, security information or a signed data processing agreement.