Privacy Policy

Version 2026-06-03 · Last updated July 21, 2026

1) Scope and commitments

This Privacy Policy explains how Toecial collects, uses, stores, and protects personal data. Toecial is operated primarily in the United States and is committed to respecting privacy rights under applicable U.S. and international privacy laws.

2) Who we are / Data Controller

Toecial is a service operated by TCL Express LLC (dba Toecial), a limited liability company registered in the United States.

For privacy-related inquiries, data access or deletion requests, or to contact our privacy team: privacy@toecial.com

3) Data we collect

• Account data (username, display name, email, role, login credentials).
• Artist and user-generated content (profile data, uploaded media, captions, comments, messages).
• Technical/security data (IP address, user agent, session/authentication events, policy-consent records).
• Age, identity, and compliance verification records, including government ID data, verification status, and approved in-person verification records.
• Transaction and operational data needed to provide paid features and account support.

3a) Age, identity, and compliance verification

Artists and other users may be required to complete age or identity verification before accessing certain platform features. Verification may be performed through a third-party provider, including Didit (didit.me), or through an approved in-person verification process, including at local events where platform-authorized staff can review identity documents directly.

Online verification may involve submission of a government-issued ID, selfie or liveness check, face-match result, device/IP/session metadata, and a verification decision. Toecial receives and stores only the verification results and limited ID-derived fields needed for compliance records, fraud prevention, payment processor/card-network requirements, account review, and legal obligations.

For approved in-person verification, authorized staff may review a government-issued ID, collect a signed release or verification form, and retain a copy or scan of the ID or passport where required for compliance, 18 U.S.C. Section 2257 records, payment processor/card-network review, fraud prevention, or legal obligations. Before starting a third-party verification flow, users may also be asked to review that provider's privacy notices or consent screens.

Didit's current legal notices are available at Didit Privacy Policy, Didit Verification Privacy Notice, and Didit End User Terms for Identity Verification.

4) Media privacy and embedded metadata

Uploaded media is processed to remove embedded metadata that can identify a person or device, such as EXIF GPS location, camera/device fields, and container-level metadata in supported audio/video formats.

No automated process can remove identity cues that are visible/audible inside the content itself (for example, faces, voices, landmarks, or signs captured in an image/video).

5) How we use personal data

• Provide and secure account access, profile features, messaging, media hosting, and platform functionality.
• Process payments, payout workflows, fraud prevention, abuse prevention, and legal compliance.
• Maintain operational records, diagnostics, support workflows, and service-improvement analytics.

6) Data sales and third parties

Toecial does not sell users' personal data to third parties.

We may share limited data with service providers strictly as needed to operate the platform (for example: hosting, authentication, payment, tax, identity/age verification providers such as Didit, or security vendors) under contractual privacy and security obligations.

7) User rights and profile deletion

Every user can request permanent deletion of their profile/account at any time through the in-app "Delete Profile" flow. Deletion removes the user account and associated data from active systems, subject to any legal, tax, age/identity-verification, 18 U.S.C. Section 2257, anti-fraud, accounting, payment processor/card-network, or dispute-retention obligations that require limited records to be retained.

8) International and U.S. privacy compliance

Toecial is designed to comply with applicable privacy-rights laws, including U.S. state privacy frameworks and other international privacy requirements where applicable to our users and operations.

U.S. law is the primary operational reference due to the business location, including consumer privacy rights such as access, correction, deletion, and data-use transparency.

9) Data security and retention

We use administrative, technical, and organizational safeguards to protect personal data. Data is retained only for as long as needed for platform operations, security, legal compliance, and legitimate business purposes.

10) Policy updates

We may update this Privacy Policy from time to time. Material updates may require renewed acceptance before continued account use.

Back to login