PRIVACY
POLICY
This Privacy
Policy ("Policy") describes how Tolious ("Redshift Technologies",
"we", or "us") - a workforce platform operating in India
under the tagline Total Organized Integrated Services collects, stores, uses,
processes, and discloses personal data when you access or use our website,
mobile application, and associated digital platforms (collectively, the
"Platform") or avail the services offered through the Platform
("Services").
This Policy is
published in compliance with the Information Technology Act, 2000 ("IT
Act"), the Information Technology (Reasonable Security Practices and
Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI
Rules"), the Digital Personal Data Protection Act, 2023
("DPDPA"), and all applicable rules and regulations made thereunder.
Capitalized
terms not specifically defined in this Policy carry the meaning ascribed to
them in our Terms and Conditions available on the Platform ("Terms").
Please read this Policy together with the Terms.
By accessing or
using the Platform or the Services, or by providing us your personal data, you
agree to be bound by this Policy and consent to our collection, use, and
disclosure of your personal data in the manner described herein. If you do not
agree to this Policy, please do not access or use the Platform.
This Policy
applies to all registered and unregistered users of the Platform, including B2C
household customers, B2B business customers, and Workforce Partners.
AT A GLANCE
|
Who collects
your data |
Tolious (the
Platform operator and data fiduciary) |
|
What we
collect |
Identity,
contact, transaction, usage, device, and location data |
|
Why we collect
it |
To provide
Services, process payments, improve the Platform, comply with law, and
prevent fraud |
|
Who we share
it with |
Workforce
Partners, payment processors, analytics providers, legal authorities (when
required) |
|
How long we
keep it |
For the period
necessary to fulfil stated purposes, or as required by applicable law |
|
Your rights |
Access,
correction, deletion, withdrawal of consent, grievance redressal |
|
Contact us |
support@tolious.com |
1.
INFORMATION WE COLLECT
1.1 Information
You Provide Directly
When you
register, book Services, contact us, or otherwise interact with the Platform,
you may provide us with:
Identity and
Profile Data: your name, username, profile photograph, and gender;
Contact Data:
mailing address, service location address, email address, and mobile number;
Household and
Premises Information: number of household members, presence of pets, number of
rooms, approximate dimensions of your premises, and any special instructions
relevant to service delivery;
Payment and
Transaction Data: limited payment instrument details (processed securely via
our payment gateway partners), UPI IDs, and billing information;
Communication
Data: chat messages, call records (where calls are routed through the
Platform), feedback, reviews, ratings, responses to surveys and polls, and
support correspondence;
Marketing
Preferences: your preferences for receiving promotional communications from us
or our partners;
B2B Business
Information: where you are accessing the Platform as a business entity, your
company name, GSTIN, registered address, and authorized representative details.
1.2 Information
Collected Automatically
When you access
or use the Platform, we automatically collect certain technical and usage
information, including:
Technical Data:
IP address, browser type and version, operating system, device type and
identifier, internet service provider, access time, date and time stamps,
referring URLs, and page view information;
Usage Data: your
activity on the Platform including clicks, taps, navigation paths, features
accessed, service categories browsed, booking history, time spent on pages,
session data, and in-app actions;
Location Data:
real-time geolocation data (with your consent) when you use the mobile
application, and approximate location inferred from your IP address;
Cookie and
Tracking Data: information collected through cookies, web beacons, pixel tags,
and server logs as described in Section 5.
1.3 Information
from Third Parties
We may also
receive personal data about you from:
Analytics and
advertising partners (e.g. Google Analytics, Meta Pixel) who provide aggregated
or pseudonymized data about Platform traffic and user behavior;
Payment
processors and financial institutions who confirm transaction status and flag
suspicious activity;
Workforce
Partners, where they report incidents or service-related concerns involving
you;
Publicly
available directories or sources where permitted by applicable law;
Affiliated
entities within the Redshift technologies group of companies.
1.4 Aggregated
and Anonymized Data
We may derive
aggregated or anonymized data from your personal data for research, analytics,
product improvement, or statistical reporting. Such data does not identify you
individually and is not subject to this Policy. However, if aggregated data is
combined with identifiable personal data, it will be treated as personal data
under this Policy.
1.5 Consequences
of Non-Disclosure
Certain personal
data is required to provide the Services. If you decline to provide such data,
we may be unable to create your Account, process your bookings, assign
Workforce Partners, or deliver the Services. We will inform you at the point of
collection if provision of specific data is mandatory or optional.
2. HOW WE
COLLECT PERSONAL DATA
2.1 Direct interactions: When you create an
Account, place a booking, submit reviews or feedback, participate in surveys,
contact customer support, or otherwise communicate with us.
2.2 Automated technologies: Every time you visit
the Platform or use the Services, we automatically collect Technical Data and
Usage Data through cookies, web beacons, and similar tracking technologies, as
described in Section 5.
2.3 Third-party sources: We receive data from
third-party analytics providers, advertising networks, payment processors, and
affiliated companies, as described in Section 1.3.
2.4 From Workforce Partners: Partners may provide
us with information about their interactions with you in the course of
performing Workforce Services, including incident reports or feedback about
service conditions.
3. HOW WE USE
YOUR PERSONAL DATA
We use your
personal data only for lawful purposes and to the extent necessary for the
following:
3.1 Providing
and Operating the Services
To verify your
identity and register your Account on the Platform; To process your booking
requests, assign appropriate Workforce Partners, and facilitate the delivery of
Workforce Services;
To process
payments, generate invoices, and manage your billing and transaction history;
To communicate
with you about your bookings via SMS, email, WhatsApp, push notifications, or
in-app messages;
To enable
Workforce Partners to deliver the Services to your specified location.
3.2 Platform
Improvement and Personalization
To monitor and
analyse usage trends and user behavior to improve the functionality, content,
and design of the Platform;
To personalize
your experience, including displaying relevant services, offers, and content
based on your location, preferences, and history;
To conduct
internal research and analytics on user demographics, interests, and behavior;
To test,
troubleshoot, and resolve technical issues with the Platform.
3.3 Marketing
and Communications
To send you
promotional materials, newsletters, offers, and updates about Tolious and its
Services, subject to your preferences and applicable law; To administer
contests, promotions, surveys, and referral programs; To display personalized
advertisements on our Platform and third-party platforms, based on your
interests and usage patterns; You may opt out of marketing communications at
any time as described in Section 8.
3.4 Safety,
Security, and Legal Compliance
To verify the
identity of Customers and Workforce Partners and prevent fraudulent, unauthorized,
or unlawful activity on the Platform;
To detect,
investigate, and resolve disputes, complaints, or security incidents;
To comply with
legal obligations, court orders, regulatory requirements, or lawful requests
from government authorities;
To enforce our
Terms, protect our legal rights, and defend against legal claims;
To protect the
safety of Customers, Partners, and the general public.
3.5 Business
Operations
To manage our
relationship with you, including notifying you of changes to the Platform,
Terms, or this Policy;
To support our
internal business operations, including accounting, auditing, and legal
functions;
To facilitate
business transitions such as mergers, acquisitions, or restructurings (see
Section 10).
4. DISCLOSURE
AND SHARING OF YOUR PERSONAL DATA
We do not sell
your personal data. We share personal data only in the following circumstances:
4.1 Workforce
Partners
We share
relevant personal data with Workforce Partners assigned to your booking,
including your name, contact number (which may be masked), service location,
and booking details, to enable them to deliver Workforce Services to you.
4.2 Third-Party
Service Providers
We engage
third-party vendors and service providers who process personal data on our
behalf in connection with operating the Platform. These include:
Payment
processors and financial institutions (for transaction processing);
Cloud hosting
and infrastructure providers (for data storage and computing);
Analytics and
advertising partners (for understanding usage patterns and serving relevant
content);
Customer
communication platforms (for SMS, email, push notification, and WhatsApp
delivery);
Identity
verification and background screening services (for Partner onboarding);
Legal,
accounting, and audit professionals (for compliance and professional advice).
All third-party
providers are contractually required to process personal data only as
instructed by us and in accordance with applicable law, and are prohibited from
using your data for their own purposes.
4.3 Affiliated
Entities
We may share
personal data with affiliated companies within the Redshift technologies group
for the purposes set out in this Policy.
4.4 Regulatory
and Legal Disclosures
We may disclose
personal data to government authorities, law enforcement agencies, courts, or
regulators where required or permitted by applicable law, including the IT Act,
the DPDPA, the Consumer Protection Act, 2019, and other applicable legislation.
Such disclosures may be made without prior notice to you where required by law
or where giving notice would prejudice law enforcement proceedings.
4.5 Business
Transfers
In the event of
a merger, acquisition, restructuring, sale of assets, or change in control
involving Tolious, your personal data may be transferred to a successor entity
as part of such transaction. You will be notified of any such transfer and any
material changes to this Policy that result from it, as required by applicable
law.
4.6 With Your
Consent
We may share
your personal data with third parties in circumstances not covered above, with
your prior explicit consent.
5. COOKIES
AND TRACKING TECHNOLOGIES
5.1 Cookies are a small data files stored on your
device by your browser when you visit the Platform. We use cookies and similar
technologies (including web beacons, pixel tags, and local storage) to: Recognize
your browser and maintain your session; Remember your preferences, saved
addresses, and settings for future visits; Understand how users interact with
the Platform and improve its functionality; Track advertising campaign
effectiveness and serve relevant advertisements; Detect and prevent fraud and security
threats; Compile aggregate statistics about Platform traffic and interaction.
5.2 Types of cookies we use:
Strictly
Necessary Cookies: required for the Platform to function correctly (e.g.
authentication, session management). These cannot be disabled.
Functional
Cookies: enable enhanced features and personalization (e.g. saved addresses,
language preferences).
Analytical/Performance
Cookies: collect information about how visitors use the Platform to help us
improve it (e.g. Google Analytics).
Targeting/Advertising
Cookies: used to deliver advertisements relevant to your interests across the
Platform and third-party sites.
5.3 You can control or disable non-essential
cookies through your browser settings or through our cookie preference center
on the Platform. Note that disabling certain cookies may affect the
availability or performance of some features of the Services.
5.4 Third-party cookies placed by our analytics
and advertising partners (such as Google and Meta) are governed by the
respective third parties' privacy and cookie policies. We are not responsible
for third-party cookies and encourage you to review those policies separately.
6. LOCATION
DATA
6.1 When you use the Tolious mobile application,
we may request access to your device's GPS or location services to display
available Workforce Partners near you, facilitate accurate booking scheduling,
and optimize service dispatch. We collect precise location data only with your
explicit consent.
6.2 We may also infer your approximate location
from your IP address to provide location-relevant content and enforce regional
availability restrictions.
6.3 You may withdraw your consent to location
data collection at any time through your device settings. Withdrawing location
access may limit certain features of the Platform, such as automatic address
detection and Partner proximity display.
7. DATA
SECURITY
7.1 We implement appropriate technical, physical,
and organizational security measures to protect your personal data against unauthorized
access, disclosure, alteration, loss, or destruction. These measures include:
Encryption of
data in transit using industry-standard protocols (e.g. HTTPS/TLS);
Access controls
and role-based permissions limiting data access to authorized personnel only;
Secure storage
of personal data on protected servers with industry-standard safeguards;
Phone number
masking and call routing mechanisms to protect Customer and Partner contact
details during service interactions;
Periodic
security reviews, audits, and vulnerability assessments;
Compliance with
the security standards recommended under the SPDI Rules, 2011.
7.2 We use HDFC Smart gateway and other PCI-DSS
compliant payment processors to handle payment card data. Card details are
encrypted at the point of entry and are not stored on our servers. Transaction
data is retained only for the duration required to complete the transaction and
comply with applicable laws.
7.3 You are responsible for keeping your Account
credentials confidential. You must not share your password with any third party
and must notify us immediately at support@tolious.com if you suspect any unauthorized
access to your Account. We shall not be liable for any loss arising from unauthorized
use of your credentials.
7.4 While we take reasonable precautions, no
method of transmission over the internet or electronic storage is completely
secure. We cannot guarantee absolute security of your personal data, and you
acknowledge the inherent risks of data transmission over the internet.
7.5 In the event of a personal data breach that
is likely to result in a risk to your rights, we will notify you and the
relevant regulatory authority in accordance with the DPDPA and applicable
rules, within the prescribed timelines.
8. YOUR
RIGHTS AND CHOICES
Subject to
applicable law and reasonable verification of your identity, you have the
following rights in relation to your personal data held by us:
8.1 Right to
Access
You may request
a copy of the personal data we hold about you by writing to us at support@tolious.com.
We will respond within 7 (seven) working days of receiving a verifiable
request.
8.2 Right to
Correction
You may request
correction of inaccurate, incomplete, or outdated personal data through your
Account profile or by contacting us at support@tolious.com. You are responsible
for ensuring the accuracy of the information you provide.
8.3 Right to
Deletion (Account and Data Erasure)
You may request
deletion of your Account and associated personal data by sending an email to support@tolious.com.
We will process such requests within 7 (seven) working days. Please note that:
Deletion of your
Account will result in loss of access to all Services and booking history;
We may retain
certain personal data as required by applicable law (including transaction
records for tax and audit purposes), to resolve disputes, or to enforce our
Terms;
Aggregated and anonymized
data derived from your personal data will not be deleted.
8.4 Right to
Withdraw Consent
Where we process
your personal data based on your consent, you may withdraw that consent at any
time by contacting us at support@tolious.com Withdrawal of consent does not
affect the lawfulness of processing carried out before the withdrawal.
8.5 Right to Opt
Out of Marketing
You may opt out
of receiving marketing communications from us at any time by:
Clicking the
'Unsubscribe' link in any marketing email we send;
Updating your
communication preferences in your Account settings;
Writing to us at
support@tolious.com
Please allow up
to 10 (ten) business days for your opt-out request to take effect. You may
continue to receive transactional and service-related communications even after
opting out of marketing.
8.6 Right to
Data Portability
You may request
a machine-readable copy of the personal data you have provided to us, to the
extent technically feasible and as required by the DPDPA, by writing to us at support@tolious.com.
8.7 Right to
Nominate
Under the DPDPA,
you may nominate another individual to exercise your data rights on your behalf
in the event of your death or incapacity. Contact us at support@tolious.com for
more information.
9. DATA
RETENTION
9.1 We retain your personal data for as long as
necessary to fulfil the purposes for which it was collected and to comply with
our legal, regulatory, contractual, and legitimate business obligations. The
specific retention periods depend on the category of data and the purpose for
which it was collected.
9.2 As a general principle:
Account and
profile data is retained for the duration of your Account, plus a period of 3
(three) years thereafter, unless a longer period is required by law;
Transaction
records and payment data are retained for a minimum of 7 (seven) years for tax,
accounting, and audit compliance purposes;
Communication
and support records are retained for 2 (two) years for dispute resolution
purposes;
Marketing
preferences are retained for as long as you are subscribed to our
communications;
Legal hold data
is retained for the duration of any ongoing legal, regulatory, or dispute
proceeding.
9.3 After the applicable retention period,
personal data will be securely deleted or anonymized. Anonymized data may be
retained indefinitely for analytical or statistical purposes.
10. BUSINESS
TRANSITIONS
You acknowledge
that in the event Tolious undergoes a business transition — including a merger,
acquisition by another company, sale of all or part of its assets,
restructuring, or insolvency — your personal data may be transferred to or
acquired by the successor entity. Tolious will notify you of any such transfer
and any resulting changes to this Policy, as required by applicable law. Any
successor entity will be required to treat your personal data in accordance
with this Policy or a revised policy notified to you.
11.
CHILDREN'S PRIVACY
The Platform and
Services are not directed at or intended for use by individuals under the age
of 18 years. We do not knowingly collect personal data from minors. If we
become aware that we have inadvertently collected personal data from a minor,
we will promptly delete such data. If you believe that a minor has provided us
with personal data without appropriate consent, please contact us at support@tolious.com
12.
THIRD-PARTY LINKS AND PLATFORMS
The Platform may
contain links to third-party websites, applications, or services. This Policy
does not apply to those third-party platforms, and we are not responsible for
their privacy practices. We encourage you to read the privacy policy of every
third-party platform you visit. Your access to or use of linked third-party
platforms is entirely at your own risk.
13.
USER-GENERATED CONTENT
If you post
reviews, ratings, photographs, feedback, or other content on the Platform, such
content will be visible to other users and may become publicly accessible. You
should not include sensitive personal data in publicly visible content. We
reserve the right to remove content that violates our Terms or applicable law.
We disclaim all liability for any personal data you choose to disclose in
User-generated content.
14.
CROSS-BORDER DATA TRANSFERS
Your personal
data is primarily processed and stored within India. In certain circumstances,
where we engage third-party service providers (such as cloud hosting or
analytics providers) who operate infrastructure outside India, your personal
data may be transferred to, stored in, or processed in countries other than
India. We will ensure that all such cross-border transfers comply with the
requirements of the DPDPA and other applicable Indian data protection laws,
including by putting in place contractual safeguards with the relevant third
parties. By using the Platform, you consent to such transfers subject to these
safeguards.
15. PAYMENT
DATA
All payment
transactions on the Platform are processed through our payment partners,
including Justpay and other PCI-DSS certified payment gateways. We do not store
full credit or debit card numbers on our servers. Payment data is encrypted
during transmission and processed in compliance with PCI-DSS standards. You may
review the privacy and security terms of our payment processors on their
respective websites. Tolious is not liable for any breach or unauthorized
access arising from the payment processor's own systems.
16. UPDATES
TO THIS POLICY
We may update
this Privacy Policy from time to time to reflect changes in our data practices,
applicable law, or Platform features. When we make material changes, we will
notify you by updating the 'Last Updated' date at the top of this Policy and,
where required by applicable law, by sending you a notice via email or in-app
notification before the change takes effect. By continuing to access or use the
Platform after any such change, you accept the updated Policy. We encourage you
to review this Policy periodically.
17. NO SPAM
POLICY
Tolious
maintains a strict no-spam policy. We will not sell, rent, or otherwise share
your email address or phone number with any third party for unsolicited
commercial communication, except as described in this Policy or with your prior
consent. All marketing communications we send will include a clear mechanism
for you to opt out.
18.
ELECTRONIC RECORD
This Privacy
Policy is an electronic record in terms of the Information Technology Act, 2000
and the rules made thereunder, as applicable. It is generated by a computer
system and does not require any physical or digital signature. It is published
in accordance with the provisions of the IT Act and the SPDI Rules, which
require publishing the rules and regulations and the Privacy Policy of the
Platform.
19. GRIEVANCE
OFFICER
In accordance
with the Information Technology Act, 2000 and the rules made thereunder,
including the Information Technology (Intermediary Guidelines and Digital Media
Ethics Code) Rules, 2021, the name and contact details of our designated
Grievance Officer are provided below:
|
Name |
Anmol Kumar
Shetty |
|
Designation |
Grievance
Officer |
|
Email |
support@tolious.com |
|
Postal Address |
REDSHIFT
TECHNOLOGIES, No.1-356(1)(1) Korangrapady Village, Alevoor, Udupi - 576115 |
|
Phone |
8310006979 |
|
Availability |
Monday –
Saturday, 10:00 AM – 6:00 PM IST |
The Grievance
Officer will acknowledge your complaint within 48 hours and will endeavour to
resolve it within 1 (one) month of receipt. If your grievance relates to
personal data or privacy, it will be addressed in accordance with the DPDPA and
applicable rules.
20. CONTACT
US
For any
questions, concerns, or requests relating to this Privacy Policy or the
processing of your personal data, please contact us at:
|
General
Privacy Queries |
support@tolious.com |
|
Account
Deletion Requests |
support@tolious.com |
|
Grievance
Officer |
support@tolious.com |
|
Customer
Support |
support@tolious.com |
|
Registered
Address |
REDSHIFT
TECHNOLOGIES, No.1-356(1)(1) Korangrapady Village, Alevoor, Udupi - 576115 |
By using the
Tolious Platform, you acknowledge that you have read, understood, and consent
to the collection, use, and disclosure of your personal data as described in
this Privacy Policy.
For queries or
to exercise your rights: support@tolious.com
© 2026 Tolious.
All Rights Reserved.