Privacy Policy

1. Introduction

Welcome to TOLA ("we," "our," or "us"). TOLA is a comprehensive business management platform developed by Vyaap Technologies. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web platform.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us, including but not limited to:

• Name, email address, and phone number
• Business name and business details
• Customer information that you enter into the system
• Transaction and payment information
• Profile information and preferences

2.2 Usage Information

We automatically collect certain information when you use our services:

• Device information (device type, operating system, unique device identifiers)
• Log data (IP address, access times, pages viewed)
• Usage patterns and feature interactions
• Location information (with your permission)

2.3 Camera and Storage Permissions

Our app may request access to your device's camera and storage to enable features such as:

• Uploading product images
• Scanning documents or QR codes
• Profile picture uploads

3. How We Use Your Information

We use the collected information for various purposes:

• To provide, maintain, and improve our services
• To process transactions and manage your business operations
• To send you technical notices, updates, and support messages
• To respond to your comments, questions, and customer service requests
• To monitor and analyze trends, usage, and activities
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our terms

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (e.g., hosting, analytics, payment processing)
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law or to protect our rights and safety
• With Your Consent: With your explicit permission for specific purposes

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Secure cloud infrastructure and backups

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your data in a structured format
• Withdraw Consent: Withdraw consent where we rely on it for processing
• Opt-Out: Opt out of marketing communications

To exercise these rights, please contact us at the information provided below.

8. Third-Party Services

Our services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information to them.

Third-party services we use may include:

• Cloud hosting providers (AWS, Supabase)
• Payment processors (Razorpay)
• Analytics services
• Communication services (WhatsApp Business API)

9. Children's Privacy

Our services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our services, you consent to such transfers. We take steps to ensure that your data receives adequate protection wherever it is processed.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

13. Consent

By using our services, you consent to the collection, use, and sharing of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use our services.