Legal
Privacy Policy
Last updated 30 July 2026
This policy explains what personal data Tonarch processes, why, and the choices you have. It is provided in English, which is the authoritative version.
Who we are
Tonarch is operated by ARK Studio (the “operator”, “we”). For any privacy question or to exercise your rights, contact info@tonarch.online.
What we collect
- You give us: the venue name and address, your email, and the market you buy in. These are printed on the licence certificate you receive.
- Payment: card payments are handled by Stripe. We never see or store your card number.
- Automatically: standard server logs (IP address, request metadata) kept by our host for security and reliability.
Why we use it (legal basis)
- To provide the licence, issue and verify the certificate, and deliver the package files — performance of a contract.
- To send auto-renewal reminders for annual licences — our legitimate interest and the contract.
- To keep the service secure and prevent fraud — our legitimate interest.
- To meet tax and accounting obligations — legal obligation.
Cookies
Tonarch sets no advertising or tracking cookies, and runs no third-party analytics on this site. There is nothing to consent to. Payment happens on Stripe’s own pages, subject to Stripe’s cookie policy.
Who processes data for us
We use a small set of processors, each only to run the service:
- Stripe — payment processing.
- Supabase — database (certificates, sale records).
- Backblaze B2 — storage and delivery of the package files.
- Resend — transactional email (receipts, reminders).
- Vercel — website hosting.
Some processors operate outside the EEA; where they do, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.
How long we keep it
Certificate and sale records are retained while the licence is active and for as long afterwards as tax and accounting law requires. Server logs are kept for a short period. We do not sell personal data.
Your rights
Under the GDPR and similar laws you may request access to, correction or deletion of your data, restrict or object to processing, and receive a copy in a portable format. Contact info@tonarch.online to exercise any of these. You may also complain to your local data protection authority.
Changes
We may update this policy; the current version always lives at this address, with the date above.