Last updated: July 19, 2026
toda.cash ("we," "us," or "our") operates the toda.cash platform, which allows individuals and small businesses to accept payments via a personal payment page. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
Account information: When you create an account, we collect your email address and password (stored securely via Supabase Auth). If you sign in with Google, we receive your name and email from Google.
Profile information: Information you voluntarily add to your payment page, including your display name, profile photo, payment handles (Venmo, Cash App, PayPal, Zelle), and social media links.
Payment information: Venmo, Cash App, PayPal, and Zelle payments go directly to your own accounts on those platforms - we don't process or hold that money. A limited set of legacy merchant accounts also accept card payments; card processing for those accounts is handled entirely by Stripe. We do not store card numbers or sensitive payment data. For card payments, Stripe shares limited transaction data with us (amount, date, last 4 digits of card).
Usage data: We collect data about how visitors interact with payment pages, including page views and scan counts, to provide analytics to merchants. We also use Google Analytics, Meta Pixel, and PostHog to understand how people use toda.cash itself (which pages get visited, which features get used); for signed-in merchant accounts, this usage data is linked to your account so we can improve the product and support you.
Device and log data: We may collect standard server log information such as IP addresses and browser type when you access our service.
We do not sell your personal information to third parties.
We rely on the following third-party services to operate toda.cash. Each has their own privacy policy:
Venmo, Cash App, PayPal, and Zelle are independent services. Payments made through those platforms are subject to their own terms. We do not receive transaction data from these providers.
We retain your account and profile data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or tax compliance purposes. Stripe retains payment records independently per their own policies.
You have the right to:
To exercise any of these rights, email us at support@toda.cash.
toda.cash uses essential cookies required to keep you logged in and to maintain session state. We also use Google Analytics, Meta Pixel, and PostHog, which may set cookies or similar identifiers to measure site usage and ad performance, as described in Section 3 above.
toda.cash is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
We use industry-standard security practices including encrypted connections (HTTPS), secure authentication via Supabase, and row-level security on our database. No system is completely secure, and we cannot guarantee absolute security of your data.
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the date at the top of this page. Continued use of toda.cash after changes constitutes acceptance of the updated policy.
Questions about this Privacy Policy? Contact us at support@toda.cash.