Privacy policy
Last updated October 22, 2026
Tovol is a tool that food pantries and other nonprofits use to run their programs: applications, service days, appointments, volunteers, donations and reports. It is built and operated by Pragmatic Works. This page explains, in plain language, what information Tovol holds, why, and how it is protected.
Who is responsible for your information
Each organization that uses Tovol (for example, a food pantry) decides what to collect about the people it serves and is responsible for that information. Pragmatic Works runs the system on their behalf. If you have a question about your record at a particular organization, please contact that organization first.
What Tovol holds
- People who receive help: name, contact details (phone, email, address), household size and make-up, preferred language, the answers on their application, the services they received and when, and appointments.
- Documents: if an organization asks for proof (such as an ID or proof of income), staff may record that they saw it, or a copy may be uploaded. Copies are deleted automatically a set time after the application is decided (90 days unless the organization chooses otherwise).
- Volunteers and staff: name, email, the shifts they sign up for and the hours they record.
- Donors and partners: names, contact details and what they give.
- Sign-in records: when someone signs in, from which device and network address, kept for security.
How it is used
Only to run the organization's programs: deciding eligibility, recording what people receive, sending appointment and renewal reminders, coordinating volunteers, and producing reports (most reports use totals, not names). Tovol does not sell information and does not use it for advertising.
Who can see it
- Each organization sees only its own records. The database itself enforces this separation.
- Within an organization, staff and volunteers see only what their role allows. Viewing documents is logged.
- A person may use the same Tovol ID at more than one organization. Another organization sees only what the person's home organization allows.
- A small number of Pragmatic Works administrators can access the system to support it and keep it secure. Their access is recorded.
Signing in with Microsoft or Google
If you choose “Continue with Microsoft” or “Continue with Google,” Tovol receives only your name, email address and a confirmation that the email is yours. It uses these only to sign you in. Tovol never sees your Microsoft or Google password and does not access your email, files or contacts.
Services Tovol relies on
Tovol runs on Microsoft Azure in the United States, where information is stored encrypted. Emails (such as reminders and sign-in links) are delivered through an email service provider. These providers handle information only to provide their service.
Cookies
Tovol uses a cookie only to keep you signed in and secure. It does not use advertising or tracking cookies.
Your choices
You can ask the organization that holds your record to see, correct or remove your information. Staff can update contact details at any time. If an organization stops using Tovol, its records are removed (a protected backup is kept for 90 days in case of a mistake, then deleted).
Contact
Questions about this policy or how Tovol handles information: jjohnson@pragmaticworks.com
We may update this page as Tovol changes; the date at the top shows the latest version.