Connecting industrial possibilitiesTUMO · INDUSTRIAL NETWORK

TUMO / PRIVACY

Privacy Policy

Draft — pending legal review · This document is a structural draft aligned with how the Service works. It is not legally final and will be replaced after legal review.

Version: 2026-09-10-draft

1. Personal data collected

The Service collects the following items, either entered by the user or generated while using the Service.

  • Account: email address, display name, password (hashed), preferred language, email verification status
  • Inquiries and RFQs: subject, body, recipient companies, attachments with rights status, delivery and reply records
  • Jobs, marketplace, sharing: application materials submitted by the user (e.g. résumés), listing and shared-resource details
  • Interests and address book: selected interests and saved contacts (not a marketing consent)
  • Security and usage logs: access time, IP address, browser information, MFA status, request identifiers

2. Purposes of use

Account management and identity verification; delivering inquiries and RFQs to companies chosen by the user and returning replies; access checks for attachments; processing job applications and listing inquiries; sending informational email the user requested; preventing abuse and responding to security incidents.

Selecting interests or saving contacts is not consent to marketing. Marketing messages are sent only with separate, explicit consent.

3. Retention

Personal data is retained until account deletion or until the purpose is fulfilled. Items that law requires to be kept are stored separately for that period. When a user withdraws or deletes inquiries or attachments, they are also removed from search, translations, caches and pending jobs.

Specific retention periods: [to be provided — legal review]

4. Third-party disclosure and processors

The Service does not sell or provide personal data to third parties. Only the inquiry content and attachments the user reviewed are delivered to the recipient companies the user selected.

Processors (hosting, email delivery, etc.): [to be provided]

5. International transfers

Personal data is not currently transferred outside the country. Should a transfer become necessary, the destination, recipient and purpose will be announced in advance and the required consent obtained.

6. Your rights

You may access, correct or delete your personal data, or request that processing be suspended, at any time — directly under Workspace > Profile, or by contacting the privacy officer below. Requests are handled without undue delay after identity verification.

7. Cookies and storage

The Service uses only the cookies required to keep you signed in and to verify security checks (CSRF). No advertising or tracking cookies are used. Browser storage is used only to keep unsent drafts.

8. Security measures

Passwords are stored hashed; multi-factor authentication is available; access is separated by company, organization and individual; attachments are scanned; access logs are kept.

9. Privacy officer and contact

Privacy questions and requests are received at the privacy officer contact listed in the business disclosure below.

10. Changes to this policy

Changes are posted in the Service with their effective date.

Business disclosure

Business name
[to be provided]
Representative
[to be provided]
Business registration number
[to be provided]
Address
[to be provided]
Contact
[to be provided]
Privacy officer
[to be provided]

Items marked [to be provided] must be filled in by the operator with verified values.