Legal
Privacy Policy
Last updated: May 2026
Controller
ADS L.L.C-FZ (trading as Toster)
Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba
Dubai, United Arab Emirates
Email: [email protected]
Data we collect
Toster collects personal data necessary to provide the food delivery chain management platform. This includes: account registration data (name, email, phone), order data (delivery address, order history), payment data (processed by LiqPay or Stripe — we do not store card numbers), and operational data (GPS coordinates of couriers during active shifts).
Legal basis (GDPR)
For EU-based users, our legal basis for processing is: (a) contract performance — processing required to deliver the service; (b) legitimate interests — analytics and fraud prevention; (c) consent — marketing communications (opt-in only).
Data retention
Order data is retained for 7 years to comply with fiscal regulations in UA, PL, CZ, and DE. Customer account data is retained while the account is active plus 2 years after closure. GPS tracking data is retained for 90 days.
Your rights
EU/EEA residents have the right to access, rectify, erase, restrict, and port their personal data, and to object to processing. Submit requests to [email protected]. We respond within 30 days.
Cookies
See our Cookie Policy for details on cookies we use.
Sub-processors
We use the following third-party processors: Vercel (hosting, EU/US), PostgreSQL via Railway (database), Cloudflare R2 (file storage), SendPulse (email/SMS/Viber marketing), LiqPay (UA payments), Stripe (EU payments), Anthropic (AI features), ElevenLabs (voice AI).
Contact
For privacy questions or data requests: [email protected]
A detailed privacy policy in accordance with GDPR Article 13/14 requirements is available on request. Contact [email protected].