Effective date: 10 June 2025 · Last updated: 10 June 2025
Data controller: Torro Exchange d.o.o., Croatia · support@usetorro.com
Torro Exchange d.o.o. ("Torro", "we", "our", or "us") operates the Torro platform available at usetorro.com — a short-term rental operations and housekeeping management platform.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have under the General Data Protection Regulation (GDPR) and applicable Croatian data protection law.
By using our website or platform, you acknowledge that you have read and understood this policy. If you do not agree with any part of it, please discontinue use of our services.
When you register for a Torro account, we collect:
If you choose to receive invoices or require VAT documentation, we may additionally collect your company's registered address and VAT identification number. This data is used solely for the purpose of issuing legally compliant invoices.
Payment transactions are processed exclusively by Stripe, Inc. Torro does not store, process, or have access to your full payment card details. Please refer to Stripe's Privacy Policy for information on how your payment data is handled.
We use Google Analytics to understand how visitors interact with our website. This involves the collection of anonymised data including pages visited, session duration, browser type, and approximate geographic location based on IP address. We do not use this data to identify individuals.
We do not require, and ask that you do not provide, any sensitive personal data (such as health information, racial or ethnic origin, political opinions, religious beliefs, or biometric data) in connection with using Torro.
We process your personal data on the following legal bases under Article 6 of the GDPR:
We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
We share your data only with third-party service providers who are necessary to operate the Torro service. These providers are contractually bound to handle your data securely and only for the purposes we specify.
| Provider | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Payment processing | USA (SCC) |
| Google LLC | Website analytics (Google Analytics) | USA (SCC) |
| Cloud infrastructure provider | Platform hosting and data storage | USA (SCC) |
SCC = Standard Contractual Clauses approved by the European Commission, providing appropriate safeguards for transfers of personal data outside the European Economic Area.
We retain your personal data for as long as your account remains active. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required by law to retain it for longer (for example, invoicing records must be retained for a minimum period under Croatian accounting law).
Anonymised analytics data does not contain personal identifiers and is retained indefinitely for product improvement purposes.
As a data subject located in the European Economic Area, you have the following rights:
To exercise any of these rights, contact us at support@usetorro.com. We will respond within 30 days. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) at azop.hr.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include encrypted data transmission (HTTPS), access controls, and regular security reviews.
No method of transmission over the Internet is 100% secure. While we take the protection of your data seriously, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.
The Torro platform is intended for use by business professionals and is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If we become aware that we have inadvertently collected such data, we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email or by a prominent notice on our website. The updated policy will take effect on the date indicated at the top of this page.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Torro Exchange d.o.o.
Petrinjska 51, 10 000 Zagreb, Croatia
OIB (VAT ID): 74903766410
Email: support@usetorro.com