Privacy policy

ToyHive (toyhive.app) is toy library management software operated by Teewinot Software Consulting Pty Ltd (ABN 50 629 248 139), trading as Toy Hive, based in Australia. You can reach us any time at [email protected].

Toy libraries use ToyHive to run their memberships, loans, and payments. Each library controls the member records it keeps in ToyHive; we store and process that information on the library’s behalf.

• Account details — your name and email address, and a password if you create one. If you sign in with Google or Facebook, that provider shares your name, email address, and profile picture with us. We never see your social media password. If you link an organisation’s Facebook or Instagram page to ToyHive, we use the permissions you grant to publish content, updates, and media directly to that page on the organisation’s behalf, strictly as directed by your users.
• Library records — membership, household, loan, roster, and payment records entered by you or your toy library in the course of running the library.
• Payment information — payments are processed by Stripe or PayPal. Your card number goes directly to them and is never stored on our servers; we keep only the payment outcome and receipt details.
• Usage and diagnostics — basic page-view analytics, email and SMS delivery status, and error reports that help us keep the service reliable.

We use this information to operate ToyHive: signing you in, running your library’s loans and memberships, sending the emails and SMS messages your library asks us to send (reminders, receipts, roster invitations), taking payments, and fixing problems. We do not sell personal information, and we do not use it for third-party advertising.

We use Meta platform data exclusively to display authorised page selections to account administrators and to publish scheduled content to those selected organisation pages.

We share information only with the service providers that run the platform: our hosting provider, our email and SMS delivery providers, Stripe and PayPal for payments, and our error-monitoring service. Each receives only what it needs to do its job. Your library’s administrators can see the records for their own library — never another library’s.

All traffic is encrypted in transit, sensitive fields are encrypted at rest, and each library’s data is isolated from every other library’s. We keep personal information only while it is needed to run your library’s records, and we delete it on request — see our data deletion instructions.

We handle personal information in line with the Australian Privacy Act 1988 and, for New Zealand libraries, the NZ Privacy Act 2020. You can ask to access, correct, or delete your personal information at any time — contact your toy library, or email us directly at [email protected] and we will respond within 30 days.

If we change this policy we will update this page and the date above. Questions are always welcome at [email protected].