Privacy Policy

Last updated: September 21, 2026

Toston pr is a marketplace for services in Puerto Rico. This page explains what information we collect, why, who else handles it, and the choices you have. We don't sell your information, and we don't show ads.

What we collect

When you create an account

• Your username, email address, and password. Passwords are stored only in scrambled (hashed) form; we can't read them.
• If you sign in with Google or Apple, we receive your name, email address, and an account identifier from them. We never receive your Google or Apple password.

What you choose to add

• Profile details: display name, photo, bio, municipality, address, phone number, and links to your social media or website. You decide which of these other people can see in your profile settings.
• Your availability, hours, and the municipalities you work in, if you add them. These are public.
• Posts, their photos, and their descriptions.
• Messages you send to other members.
• Reviews you leave, posts you save, and reports you file.

Identity verification

If you ask to be verified, you upload a selfie. It is stored privately: it is never shown on the site, and only our moderators can open it, to review your request.

Notifications

Your choices about which emails and texts you want. If you turn on texts, we store your phone number and send a code to confirm it is yours.

How the site is used

We record a short list of actions — such as visiting the site (counted once a day), signing up, viewing or creating a post, searching, sending a message, saving a post, and leaving a review or report — so we can understand how the site is used and spot abuse. These records don't include your IP address or device details, and we delete them after about 180 days. Like most websites, our hosting provider keeps short-lived technical logs, including IP addresses, for security and troubleshooting.

Cookies

We use only the cookies the site needs to work: one that keeps you signed in (also used to count visits without identifying you) and one that protects forms against forgery, and one that remembers the language you chose. No advertising or third-party tracking cookies.

Your location

"Use my location" works out your nearest municipality on your own device. Your exact coordinates are not sent to us.

How we use it

• To run the marketplace: show posts, deliver messages, and display profiles and reviews.
• To send the notifications you've asked for, and essential account emails such as password resets.
• To keep the site safe: review reports, verify identities, and suspend accounts that break our Terms.
• To fix problems and improve the site.

Who else sees it

Other members

Your posts, reviews, username, and the profile details you've made visible are public. Messages are seen by the people in the conversation.

Companies that run parts of the site for us

They may only use your information to provide their service to us.

• Heroku (Salesforce) hosts the site and its database.
• Amazon Web Services stores uploaded photos and selfies, and sends our emails.
• Anthropic provides translation and search tags. When someone presses a translate button, the text of that message or post is sent to translate it. This can include a message you wrote, translated for the person you sent it to. When you publish or edit a post, its title, description and category are sent to suggest search terms that help customers find it.
• A text-message provider, if you've turned on texts, receives your phone number and the text of each notification.
• Sentry receives error reports when something breaks, set up not to include personal details such as IP addresses.
• Google and Apple, only if you choose to sign in with them.

When the law requires it

We may disclose information if required by law, or when needed to protect someone's safety or to stop fraud or abuse.

Text messages

We text you only if you turn texts on and confirm your number. Reply STOP to any text to stop them, or change your notification settings. Message and data rates may apply. We don't share your phone number, or your consent to receive texts, with anyone for their marketing.

How long we keep it

We keep your account information while your account is open. Usage records are deleted after about 180 days. If you ask us to delete your account, we remove your profile, posts, and verification selfie. We may keep a limited record where needed for safety or legal reasons, such as a report about a suspended account.

Your choices

• Edit your profile, and choose who sees each detail, at any time.
• Turn email and text notifications on or off in your notification settings.
• Ask us for a copy of your information, to correct it, or to delete your account, by writing to hola@tostonpr.com.

Security

The site is served only over encrypted connections, passwords are hashed, and verification selfies are private. No system is perfectly secure; if we learn of a breach affecting you, we'll tell you.

Children

Toston pr is for people 18 and older. We don't knowingly collect information from anyone younger.

Changes

If we change this policy, we'll update the date above. For significant changes, we'll let members know on the site or by email.

Contact

Questions, requests, or concerns: hola@tostonpr.com.