The terms "we", "us", and "our" refer to Toksyto. The terms "you" and "your" refer to users of the Site. This Privacy Policy is subject to change at any time; we recommend reviewing it periodically, as continued use of the Site after changes are posted constitutes your acceptance of the revised policy.
Personal Data
We may collect the following categories of personal data from you:
- Personal details such as name, email address, contact details, residential address, date of birth, and identity documents (e.g. Aadhaar, PAN, Voter ID, driving licence, passport) provided to avail our products or services.
- Transaction details including transaction history, balances, and payment details used for transferring money through our payment channels.
- Financial details such as income or credit history, where required for specific products or services.
- Images of documents or photographs required to avail our products or services.
- Voice recordings of your conversations with our customer care team, used to address queries or grievances.
- Device and usage information such as location, contacts and call logs, device model and storage, network information, and transactional or promotional SMS/app notifications, where you use our mobile app.
Use of Personal Data
We use your personal data in our business activities, including to:
- Facilitate and report on transactions;
- Conduct research and analytics to improve our products, services, security, and service quality;
- Process your requests, instructions, or requirements for our products and services;
- Share updates on changes to products, services, and their terms;
- Investigate complaints, claims, or disputes;
- Respond to your queries or feedback;
- Verify your identity before providing products or services;
- Carry out lawfully required credit checks, screenings, or due-diligence checks;
- Monitor and review our products and services;
- Support financial, regulatory, and management reporting, and risk-management models;
- Conduct audits and maintain records; and
- Send selective offers and promotions.
We may share your data with affiliates, trusted businesses, service providers, or partner institutions that help us deliver our products and services, subject to confidentiality and security safeguards. We also use your data to comply with applicable laws, regulations, court orders, and regulatory directives.
Sharing of Personal Information
We may share personal information with our corporate entities and affiliates, including personally identifiable information such as email address, name, phone number, and payment instrument details, in the course of processing transactions.
We may disclose anonymised data derived from your personal information to third parties where necessary to provide our services, comply with legal obligations, enforce our User Agreement, support marketing and advertising activities, or prevent, detect, and investigate fraud or illegal activity. We do not share your personal information with third parties for their own marketing purposes without your explicit consent.
We may also disclose personal information where required by law, in response to a subpoena or court order, or in the good-faith belief that disclosure is necessary to enforce our terms, respond to third-party claims, or protect the rights, property, or safety of our users or the public.
If Toksyto or its assets are involved in a merger, acquisition, or restructuring, your personal information may be shared with the relevant business entity, which will remain bound by this Privacy Policy.
Purging of Your Personal Data
You may delete your account at any time through the Toksyto app or website; once deleted, we stop processing your data externally as described above. We otherwise retain personal data only as long as necessary for the purpose it was collected, except where longer retention is required by law — for example, transaction logs, or data subject to an ongoing legal or regulatory proceeding.
Cookie Policy
A "cookie" is a small piece of information stored by our web server on your browser, which can later be read back by that browser. We may use cookies and similar tracking technology depending on the features you use. No personal data is collected directly through cookies; however, if you have previously provided personal data, cookies may be linked to that information.
Reasonable Security Practices and Procedures
We take appropriate steps to protect your personal data from misuse, loss, unauthorised access, modification, or disclosure, including the use of secure server-layer encryption and access controls. Our safety and security processes are periodically audited by a third-party cybersecurity agency.
Choice / Opt-Out
You may opt out of non-essential promotional or marketing communications from us or our partners after setting up an account. To remove your contact information from our lists and newsletters, use the unsubscribe link included in our emails.
No Information from Children Under 13
We do not knowingly collect or maintain personal data from anyone under 13 years of age, and no part of our Site is directed at persons under 13. If you are under 13, please do not use or access the Site. Where we learn that we have collected personal data from a child under 13 without verified parental consent, we will take appropriate steps to delete it. Certain regions and course offerings may apply additional age restrictions.
Your Consent
By using the app and/or providing your information, you consent to the collection, use, and sharing of your information as described in this Privacy Policy.
Changing Our Privacy Notice
We review our privacy practices from time to time, and our practices are subject to change. Any update will be effective immediately upon posting. We'll notify you of material changes via a notice on our homepage or by email to your registered address, and by updating the effective date on this page. Please check back periodically to stay informed of the current policy.