Privacy Policy
- Introduction
This Privacy Policy ("Privacy Policy") describes how Tovo ("Tovo", "we", "us", or "our") collects, uses, and shares information about you; this Privacy Policy applies to your use of our website, and all its related services ("Services").
Tovo is a U.S. brand of Toss Bank, a bank organized under the laws of the Republic of Korea. Tovo itself is not a bank and Toss Bank does not hold any licenses in the U.S. Any future deposit products will be offered through one or more U.S. Partner Banks, each Member FDIC (each, a "Partner Bank").
Note that our Terms of Use apply to this Privacy Policy. By accessing and using our Services, you will be deemed to agree to this Privacy Policy. Please take a moment to read this Privacy Policy before you start to use our services. If you do not agree to this Privacy Policy, you should immediately disconnect access to or the use of our Services.
If you are resident of California in the U.S.A., please take a look at the Privacy Policy Addendum for CCPA. - What is Personal Information
"Personal Information" is any information that identifies, related to, or could reasonably be linked with you. - Type of Information We Collect
Information you provide
When you join the waitlist, you provide us with Personal Information such as your phone number.
Information automatically collected
We may automatically collect certain information about you when you access or use our Services ("Usage Information"). Usage Information may include hardware model, operating system version, unique device identifiers, mobile network information including carrier name and phone number, application version number, device identifies, IP addresses, crash report, system activity, hardware settings, browser type type and setting, the date and time and referral URL of your request and cookies that may uniquely identify your browser or your location information.
The methods that may be used on the Services to collect Usage Information include:
Log Information: Data about your use of the Services, which is stored in log files.
Tracking Technologies: Information about your interaction with the Services or email including your browsing and activity behavior collected by cookies and other technologies now and hereafter developed ("Tracking Technologies")
Cookies: We may use cookies to provide customized Services for our users including identifying interests and preferences through analyzing frequency of access and visit time. You can disable cookies in your browser settings, but some parts of the Services may then not function properly. To find out more on how we use the cookies, please refer to our Cookie Policy.
Information from other sources
We may obtain information about you from other sources (as permitted by law), including Service Providers and third-party services, and combine such information with information we have collected directly and /or automatically from you.
De-identified Personal Information
Personal Information once "de-identified" is not subject to this Privacy Policy and we may treat it as non-personal information and use it without obligation to you except prohibited by applicable law. - How We Collect Your Information
We may directly collect your information via the Services. For example, we collect information when you perform the following activities:
Registering your phone number to the waitlist;
Accessing our Services;
Participating in any type of events organized by us through the Services;
Participating in any type of surveys organized by us through the Services; and/or
Contacting us via methods we provide - Use of Your Information
We collect, use, process, share, and/or disclose your information for the following purposes:
To provide the Services based on contractual relationship with you
to provide, operate, and maintain our Services;
to verify, operate, and process user identification for our Services;
to help you or your device register for our Services;
to operate our Services and to analyze your activities;
to troubleshoot any issues;
to monitor and analyze to improve Service quality;
to enhance confidentiality, integrity and availability of security;
to develop and improve operating environment for better Services and/or;
to conduct any other activities required to provide our Services
To enforce the Terms of Service, Privacy Policy (including relevant Addendum(s)), and other agreements with third parties
to detect, prevent, investigate, and report violations, unauthorized use of and/or abuse of Services, other agreements and/or suspected illegal activities;
to resolve any issues and claims in connection with you;
to store records of dispute settlements;
to protect the rights, privacy, safety, and property of us and our Service Providers; and/or
to enforce other policies and agreement
To perform customer services
to support customer inquiries and complaints given by (or purported to be given by) you or on your behalf and to carry out your instructions;
to notify you of administrative and other important information regarding the Services and to contact you when necessary; and/or
to otherwise render customer support and services to you
To promote services and products
to send various types of communications for promotional and marketing purposes; and/or
to deliver targeted marketing and promotional offers
We may use and process your information for additional purposes under the following conditions:
additional purposes are disclosed to you before your information is collected for such purposes; and/or
you consent to collecting/using/processing/disclosing for the additional purposes - Sharing Your Information with Other Entities
In principle, we do not share your personal information with external parties.
However, we may share and provide your personal information with but not limited to our agents, vendors of us as well as companies that provide the Services ("Service Providers") on behalf of us in the following cases:
With your consent
We may share your information with external parties when we obtain consent from you or with your direction
With Service Providers for following processes:
Registering you on the waiting list;
Verification of your phone number;
Data storage and development;
Administrative services and other third-party services required to provide the Services
Advertising and analytics services
With law enforcement and appropriate third parties for legal reasons
To investigate criminals, fraud, infringement of intellectual property rights, or other suspected illegal activities, or as otherwise may be required by applicable laws, or as we deem necessary in our sole discretion, in order to protect our legitimate legal and business interests.
Corporate restructuring
We may share Personal Information when we do a business deal, or negotiate a business deal, involving the sale or transfer of all or a part of our business or assets. These deals can include any merger, financing, acquisition, or bankruptcy transaction or proceeding.
Except as disclosed in this Privacy Policy, we DO NOT sell, trade, rent any personal information we collect online (or mobile) unless we have your explicit permission. - Your Rights regarding Your Personal Information
Right of access
You may ask us to provide copies of your personal information, including details about how we collect, store, use, process, share, and/or disclose it. This right always applies unless certain exemptions exist.
Right of rectification
You may contact us if you identify that your information in our possession is not accurate. You may ask us to rectify, update and complete such inaccurate information.
Right of erasure (right to be forgotten)
You may ask us to delete your information collected, stored, processed, shared, and disclosed by us when certain circumstances are met.
Right of restriction of processing
You may limit the way we collect, process, use, store, share, and disclose your information if you are concerned about how we use it.
Right to data portability
This right only applies to the information you have directly given us. You may ask us to transfer such information in a usable format from one organization to an(other) organization(s), or give it to you.
Right to object
You may ask us to stop processing your information when certain circumstances are met. - Children's Privacy
We DO NOT intentionally collect, process, use, share, and disclose personal information of children.
Parents or legal guardians should supervise their children when they participate in online(mobile) activities. - Data Security and Integrity
The security, integrity, and confidentiality of your personal information are extremely important to us. We have implemented technical, administrative, and physical security measures that are designed to protect information from unauthorized access, disclosure, use, and modification. We regularly review our security procedures to consider appropriate technology and methods. Please be aware that, despite our best efforts, no security security measures are perfect or impenetrable.
Currently, we have obtained following security certifications:
ISO/IEC 27001 and ISO/IEC 27701
Korea ISMS-P
This certification is an integrated certification that covers ISMS (Information Security Management System) and PIMS (Personal Information Security Management System) issued by Korea government agency, KISA (Korea Internet and Security Agency) - Retention and Deletion of Personal Information
Retention of Personal Information
We will retain your personal information in accordance with following conditions:
while you are using our Services;
as required under law, regulations, contracts, or statutory obligations; and/or
for the length of time needed to fulfill the purposes described in this Privacy Policy
Deletion of Personal Information
We will put in place measures such that your personal information in our possession or under our control is deleted in an irreversible format and/or de-identified as soon as it is reasonable to assume that (1) the purpose for which that personal information was collected is no longer being served by the retention of such personal information; and (2) retention is no longer necessary for any other legal or business purposes.
If any personal information is to be retained as required by relevant laws and regulations, we retain it for the period as required by laws and regulations before destruction. The personal information which is stored and managed by us will not be used for purposes not authorized by law or by you. - Data Transfer, Storage, and Processing Globally
While you use our Services, your information may be transferred, stored, and processed outside of your country of residence in accordance with this Privacy Policy.
Information that you provide to us will be transferred to the Republic of Korea ("Korea"). We make an effort to implement appropriate technical, administrative, and physical safeguards to protect the privacy and security of your information and to use it only consistent with your relationship with us and terms described in this Privacy Policy. In addition, we enter into service agreements and relevant clauses with our Service Providers whenever feasible and appropriate. - Changes to This Privacy Policy
From time to time, we may change this Privacy Policy to accommodate new technologies, industry practices, regulatory requirements or for other purposes at any time without notice to you in our sole and absolute discretion. Such changes will immediately take effect upon its position on the Services. We do not provide any other notices of such changes to this Privacy Policy. Please be advised that your use of the Services means that you will be bound by the most current version of the Privacy Policy. We encourage you to check back frequently to review that latest version of the Privacy Policy, as it is your sole responsibility to be aware of any such changes to this Privacy Policy.
If you disagree with any changes to this Privacy Policy and do not wish your Personal Information to be subject to the revised Privacy Policy, please stop using the Services. - Comments and Questions
Tovo is headquartered in the Republic of Korea. We have appointed an internal privacy officer for you to contact if you have any questions or concerns about this Privacy Policy.
If you have any inquiries about your rights, please contact us at help@tovo.global
If you have any questions or comments regarding our Privacy Policy or wish to access personal information collected by us, please contact us at help@tovo.global - Last Update
November 13, 2025
