Privacy policy

1. Who we are

Tody is operated by TACHY EDTECH PRIVATE LIMITED (“TACHY”, “we”, “us”), an Indian company registered in India. References to “the platform” mean the Tody Android app, tody.in website, Tody Business Messaging API, and related services.

2. What we collect

We collect data you provide directly (name, email, phone, profile photo, messages, business registration), data generated by your use of the platform (device identifiers, delivery events, log data), and data we are required to collect for compliance purposes (business KYC for the API).

3. Why we collect it

To operate the platform, deliver messages, prevent abuse, bill businesses, respond to support requests, and comply with legal obligations. We do not sell personal data to third parties.

4. Sharing

We share data only with sub-processors required to operate the platform (hosting, payment gateways, infrastructure providers). A current list of sub-processors is available on request to privacy@tody.in.

5. Where data is stored

Data is hosted in Indian data centres. Cross-border movement happens only for customer-side integrations the customer explicitly configures.

6. Retention

We retain data for as long as your account is active and as long as required for legal, accounting, or audit purposes. You can request earlier deletion subject to legal retention requirements.

7. Your rights

You have rights of access, correction, erasure, restriction, and grievance redressal under the Digital Personal Data Protection Act, 2023. Send requests to privacy@tody.in; grievances to grievance@tody.in.

8. Security

TLS in transit, bcrypt for passwords, hashed API keys, audit logs, and rate limits. See the Security page for the full posture.

9. Changes

We update this policy when our practices change. Material changes are announced on the website and via direct notice to enterprise customers.

10. Contact

Privacy: privacy@tody.in · Grievance: grievance@tody.in · Security disclosures: security@tody.in.