Privacy Policy

1. Information We Collect

To provide our services, we collect a minimal amount of information:

Account Information

• Username — your unique identifier on Take2World.
• Email address — for account verification and important notifications.
• Phone number — for account security (optional in some regions).
• Country — for currency and language preferences.
• Encrypted password — stored using industry-standard bcrypt hashing. We never see or store your plain password.

Order Information

• Public links you provide for promotion services.
• Quantities, services selected, and order timestamps.

Technical Information

• Login session tokens (encrypted, stored in secure HttpOnly cookies).
• IP address and device user-agent (for fraud prevention only).

2. Payment Information — We Never Store It

For crypto payments, we only handle the wallet addresses and transaction references that you voluntarily share via email.

3. How We Use Your Information

Your data is used only to:

• Provide and maintain the services you request.
• Process orders and credit your account balance.
• Communicate important account updates and notifications.
• Prevent fraud and protect the integrity of our platform.
• Improve our services through anonymized usage patterns.

4. How We Protect Your Data

• Encryption: All data transmitted to and from our website uses HTTPS / TLS 1.3 encryption.
• Password hashing: Passwords are hashed with bcrypt — never stored in plain text.
• Session security: Login sessions use cryptographically random tokens with HttpOnly and SameSite cookie protection.
• Access controls: Only authorized team members can access user data, and only when necessary for support or maintenance.
• SQL injection protection: All database queries use prepared statements.
• Regular audits: We periodically review our security practices and update them as needed.

5. Data Sharing — We Don't Sell Your Data

We do not sell, rent, or trade your personal information to anyone. We share data only:

• With our trusted payment processor when you make a payment — only the data they need to complete the transaction.
• With service providers who help us operate the platform (e.g., hosting providers) under strict confidentiality.
• When legally required (e.g., court order, fraud investigation).

6. Cookies

We use only essential cookies that are necessary for the website to function:

• t2w_userID and t2w_token — for keeping you signed in.

We do not use third-party tracking cookies, advertising cookies, or analytics that follow you across websites.

7. Your Rights

You have the right to:

• Access the data we hold about you.
• Correct any inaccurate information.
• Delete your account and associated data.
• Export your order and payment history.
• Withdraw consent for non-essential communications.

To exercise any of these rights, contact us at support@taketo.world.

8. Data Retention

We retain your account data while your account is active. If you delete your account, we remove personal information within 30 days, except where retention is required for legal, tax, or fraud-prevention purposes.

9. Children's Privacy

Take2World is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has registered, please contact us so we can remove the account.

10. Changes to This Policy

We may update this Privacy Policy. We will post the updated version with a new "Last updated" date. Significant changes will be communicated via email or a prominent notice on the platform.

11. Contact Us

For privacy-related questions, please reach out via our Contact page or email privacy@taketo.world.