Privacy & Cookie Policy
Last updated 13 June 2026
This Privacy & Cookie Policy explains how Torii ApS (“Torii”, “we”, “us”) handles personal data and cookies on our public website at torii.so (the “Website”).
It covers visitors to the Website only. Personal data processed when you use the Torii product and dashboard (including any data we process on behalf of our customers) is governed by a separate agreement and privacy notice, which we will publish alongside the product. This policy does not cover that processing.
Who we are
Torii ApS is the data controller for the personal data described here.
- Torii ApS, business registration no. (CVR) 46310020
- Sukkervænget 53, 5000 Odense C, Denmark
- Data protection contact: privacy@torii.so
What we collect, and why
We keep data collection on the Website to a minimum. We do not run advertising, profiling, or behavioural tracking.
When you contact us through the demo or contact form, we process the details you choose to provide:
- Your name
- Your email address
- Your company (optional)
- Your team size (optional)
- The content of your message
We use this only to respond to and follow up on your specific enquiry. We do not add you to a newsletter, send you marketing, or sell your data. Our legal basis is our legitimate interest in replying to people who contact us; you can ask us to delete your message at any time.
Functional browser storage. The Website stores two small values in your
browser’s localStorage to remember your preferences between visits: your theme
(light or dark) and your language. These never leave your browser, are not used
to track you, and are not advertising or analytics identifiers.
Cookies
The Website sets no cookies: none for analytics, advertising, or tracking, and none for any other purpose. We run no analytics product, and because we set no cookies the Website shows no cookie banner.
The only data stored in your browser is two functional values in localStorage
(not cookies): your theme (light or dark) and your language. These stay on your
device, are never sent to us, and are not used to identify or track you.
How long we keep it
We keep the messages you send us only until your enquiry has been resolved, and then delete them, and in any case no longer than 12 months after our last correspondence with you. We do not retain contact-form submissions for longer than necessary for that purpose.
Who we share data with, and where
We use a small number of service providers (“sub-processors”) that process personal data on our behalf, under contract and only on our instructions:
| Sub-processor | Service | Personal data processed | Location |
|---|---|---|---|
| Cloudflare, Inc. | Reverse proxy / edge security (TLS termination, DDoS mitigation, bot protection) | Visitor IP address and HTTP request metadata | USA; global edge network |
| Hetzner Online GmbH | Website origin hosting + contact-form processing | Server logs (including IP address); your contact-form submission (name, email, company, team size, message) | Falkenstein, Germany (EU) |
| AhaSend BV | Transactional email delivery (sends your contact-form submission to our inbox) | Name, email, company, team size, and your message | Netherlands (EU) |
| Proton AG | Email hosting for our @torii.so mailboxes | Sender address and the contents of emails you send us | Switzerland |
We do not sell personal data or share it with third parties for their own marketing.
Our origin hosting and contact-form processing are in the EU, and AhaSend BV processes transactional email in the Netherlands (EU), so no transfer safeguard is required for those. Cloudflare is based in the United States; we rely on the EU–US Data Privacy Framework, under which it is certified, for that transfer. Proton AG is in Switzerland, which the European Commission recognises as ensuring an adequate level of data protection, so no additional transfer safeguard is required. You can request a copy of the relevant safeguards from privacy@torii.so.
Your rights
Under the GDPR, you have the following rights over the personal data we hold about you:
- the right to be informed (which is why we publish this policy)
- the right to access the data we hold about you
- the right to have inaccurate data rectified
- the right to have your data erased
- the right to restrict or object to our processing of it
- the right to data portability
- the right to withdraw any consent you have given
To exercise any of these rights, contact us at privacy@torii.so.
You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) if you believe our processing does not comply with data protection law.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page.