Privacy Policy 
Our Commitment to Privacy
Privacy is fundamental to how we build and operate Tomba. We are committed to transparency and empowering users to control their data.
We comply with the European General Data Protection Regulation (GDPR) and applicable data protection laws worldwide. This Privacy Policy describes what data we collect and how we process it.
Questions? Contact us at support@tomba.io
Services Covered
This Privacy Policy applies to all Tomba services:
- Domain Search
- Email Finder
- Author Finder
- LinkedIn Finder
- Email Enrichment
- Email Verifier
- Bulk Processing
- Leads Management
- CRM Integrations
- Browser Extensions and Add-ons
- API Access
Information We Collect
When You Visit Our Website
We collect usage statistics including:
- Pages visited and time spent
- IP address and geolocation
- Browser type and device information
- Referral sources
When You Create an Account
We collect information you provide:
- Email address
- Name
- Company information
- Payment details (for paid subscriptions)
- Phone number (for fraud prevention only, never for marketing)
When You Use Our Services
We log your usage across all platforms (website, API, extensions):
- Request logs including IP address and timestamps
- Data files you submit for processing
- Feature usage patterns
Log retention: We destroy usage logs within 4 months.
When You Contact Support
We retain support conversations and related data. These are removed within 6 months after account deletion.
Publicly Available Web Data
Our systems crawl publicly accessible web pages to index business contact information. We:
- Only process publicly available data indexable by search engines
- Respect robots.txt directives
- Never process private consumer email addresses (Gmail, Hotmail, etc.)
- Index only professional business data (names, work emails, social profiles)
How We Use Your Data
Service Delivery
We process your data to provide Tomba's functionalityaccount management, lead processing, team collaboration, and integrations.
User Experience Improvement
We analyze usage patterns and conduct A/B testing to improve our products. Data passing through our services helps validate and improve accuracy.
Business Contact Discovery
We provide access to indexed public business data to help users find relevant professional contacts.
Customer Support
We process your data to respond to inquiries, troubleshoot issues, and provide assistance.
Fraud Prevention
We actively monitor for credit card fraud and misuse of our services.
Marketing Communications
We may notify you about new services and features if you've opted in to receive updates.
Your Privacy Rights
Under GDPR and applicable privacy laws, you have the right to:
| Right | Description |
|---|---|
| Access | Obtain confirmation of whether we process your data and access that data |
| Rectification | Correct inaccurate or incomplete personal data |
| Erasure | Request deletion of your personal data |
| Restriction | Block or restrict processing in certain circumstances |
| Portability | Receive your data in a structured, machine-readable format |
| Objection | Object to processing for direct marketing at any time |
| Withdraw Consent | Withdraw consent where processing is based on consent |
Exercising Your Rights
Tomba Users
Log into your account to update or delete your information directly.
Data Found Online
Use our Claim feature to update or remove your business data from our index.
Data Access Requests
Contact support@tomba.io to:
- Confirm if we have data about you
- Learn exactly what data we hold
- Understand the purposes of processing
- Know how long data will be retained
- See where online we found your information
Data Removal
Disable Processing and Delete Data
Tomba Users: Log in to permanently delete your account and all associated data.
Data Found Online: Use our Claim feature to delete your data directly.
For concerns, contact support@tomba.io. You also have the right to contact your local supervisory authority.
Third-Party Service Providers
We work with trusted providers to deliver our services:
| Category | Providers |
|---|---|
| Security & CDN | Cloudflare WAF |
| Hosting | Cloudflare Workers, DigitalOcean |
| Collaboration | Google Workspace, Slack, GitHub, Trello |
| SendGrid | |
| Analytics | Google Analytics, Microsoft Clarity |
| Spam Protection | Cloudflare Turnstile |
Spam Protection
We use Cloudflare Turnstile to protect against spam and abuse. This service analyzes traffic to filter malicious activity.
Data Retention
Active Users: Data is retained while your account is active and for 3 years after inactivity.
Deleted Accounts: Most data is removed within days; all remaining artifacts within 3 months. Some billing information may be retained for legal compliance.
Public Data: We process public data as long as it remains online. We regularly verify sources and remove outdated or inaccurate information.
Data Security
We implement comprehensive security measures to protect your data. See our Security Policy for details.
All data storage and processing occurs exclusively within the European Union.
Jurisdiction-Specific Notices
California Residents
Additional disclosures under the California Consumer Privacy Act (CCPA) are available in our Privacy Notice for California Residents.
Nevada Residents
To request that we refrain from selling your covered information, contact support@tomba.io.
Contact Us
Tomba Technology Web Service LLC 2803 Philadelphia Pike Suite B #1228 Claymont, Delaware 19703 United States
Email: support@tomba.io
Privacy Notice for California Residents
This California Privacy Notice supplements Tomba's Privacy Policy for California residents, covering CCPA rights and disclosures.
Quality Policy
Tomba's quality policy outlines our commitment to delivering high-quality email finder services and continuous improvement.