Privacy Policy
About This Privacy Policy
Tossuu ("Tossuu", "we", "us", or "our") is a technology platform that enables users to discover, communicate with, and book Companions for planned activities and scheduled sessions.
This Privacy Policy explains:
- what personal data Tossuu collects;
- why we collect and use it;
- how we protect it;
- when we share it;
- how long we retain it;
- how users can access, correct, delete, or otherwise manage their personal data;
- how identity verification, location, chat, bookings, payments, safety and fraud-prevention information are handled; and
- how to contact Tossuu regarding privacy matters.
Tossuu aims to follow the principles of collect less, expose less, retain less, and give users control.
This Policy should be read together with Tossuu's Terms & Conditions, Community & Safety Guidelines, Booking/Cancellation and Refund Policies, Verification Policy, Cookie Policy, and other applicable notices.
Scope
This Privacy Policy applies to personal data processed through:
- the Tossuu mobile application;
- the Tossuu website;
- Tossuu accounts and profiles;
- bookings and scheduled sessions;
- in-app communication;
- identity verification;
- payments and payouts;
- safety and reporting features;
- customer support; and
- other Tossuu services that link to this Privacy Policy.
It applies to both Clients and Companions.
Personal Data We Collect
We collect only personal data that is reasonably necessary for the relevant Tossuu function, service, safety purpose, legal obligation, or other permitted purpose.
The actual data collected depends on the features a user uses.
We collect personal data to provide, secure, and improve our services. This may include:
- Account & Profile Data: Name, contact details, date of birth, photos, bio, and preferences.
- Service & Booking Data: Selected activities, packages, scheduling, location details for sessions, and transaction history.
- Identity & Verification: Government IDs or selfies when identity verification is required.
- Communications: Chat messages, attachments, and support interactions.
- Technical & Usage Information: IP address, device details, app usage, cookies, and platform interactions.
- Safety & Security: Account activity, reports, blocks, and verification results to maintain a secure environment.
Tossuu collects the minimum necessary data to provide our features and ensure a safe experience.
How We Use Personal Data
Tossuu may use personal data for the following purposes, depending on the data and service involved:
- creating and managing accounts;
- authenticating users;
- displaying and managing profiles;
- enabling Clients to discover Companions;
- enabling Companions to offer activities/services;
- facilitating bookings and scheduled sessions;
- coordinating meeting and pickup information;
- processing payments, refunds, settlements and payouts;
- enabling in-app communication;
- providing customer support;
- verifying identities;
- preventing fake accounts and impersonation;
- preventing fraud, scams, abuse and harassment;
- maintaining platform and user safety;
- investigating reports, complaints and incidents;
- enforcing Tossuu's Terms and Community/Safety Guidelines;
- improving reliability, security and performance;
- providing analytics where implemented and permitted;
- sending service and account communications;
- sending promotional communications where applicable and permitted;
- complying with applicable legal obligations;
- responding to lawful requests;
- resolving disputes; and
- protecting Tossuu, its users and other persons from harm or misuse.
Legal Basis and Consent
Tossuu will process personal data in accordance with the applicable legal framework.
Depending on the processing activity and applicable law, processing may be based on:
- the user's consent;
- providing or enabling a requested service;
- compliance with applicable legal obligations;
- responding to lawful requests;
- security, fraud prevention, safety or other permitted purposes; or
- another lawful basis available under applicable law.
Privacy Notice and User Choices
Tossuu will aim to provide clear and understandable information about:
- the personal data being collected;
- the purpose of collection;
- the service or feature enabled;
- relevant third-party processing;
- applicable user choices; and
- available privacy rights and grievance mechanisms.
Where consent is required, the mechanism for withdrawing consent should be reasonably easy compared with the mechanism used to provide it.
Public Profile and Privacy
Certain information may be visible to other Tossuu users so that they can discover and evaluate Companions and coordinate bookings.
Depending on the feature and settings, this may include:
- display name;
- profile photo;
- age or age range;
- city/locality;
- interests;
- languages;
- bio;
- activities;
- availability;
- ratings/reviews; and
- verification status/badge.
The following should not be publicly displayed:
- government ID information;
- Aadhaar number;
- PAN;
- bank account information;
- UPI credentials;
- exact residential address;
- emergency contact information;
- internal verification records; and
- internal fraud/risk information.
Tossuu aims not to expose personal information to another user unless it is reasonably necessary for the relevant platform function.
Sharing of Personal Data
Tossuu may share relevant personal data with service providers and other recipients when necessary for the purposes described in this Policy.
- Service Providers: Third-party vendors that help us operate our platform (e.g., payment gateways, cloud hosting, OTP/SMS providers, analytics).
- Other Users: Limited information is shared between Clients and Companions to facilitate requested bookings.
- Legal Authorities: We may disclose data when required by applicable law, court orders, or valid law enforcement requests.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
Data Retention
Tossuu will retain personal data only for as long as reasonably necessary for the purpose for which it was collected, applicable legal obligations, security, fraud prevention, disputes, accounting, or other permitted purposes.
Account Deletion
Users are provided with a clear mechanism to request account deletion.
In-App Deletion:
You can delete your account directly within the Tossuu app by navigating to Profile → Delete account.
Web Deletion Request:
If you no longer have the app installed, you can request account deletion at any time by visiting our dedicated deletion page:
Click here to request account deletion
What gets deleted:
When your account is deleted, we permanently remove your profile, photos, documents, interests, availability, packages, notifications, and login sessions.
What is kept:
Booking and payment/transaction records are securely retained for tax, accounting, and legal compliance purposes, with personal details removed.
Retention period: 8 years.
The 30-Day Deletion Window:
When you request deletion, your account is locked immediately. It will be permanently deleted after 30 days. If you log in to the Tossuu app during this 30-day window, your deletion request will be automatically cancelled.
When a deletion request is made, Tossuu will:
- verify the request where necessary;
- identify data that can be deleted;
- delete or anonymize applicable data;
- retain only information that must or may lawfully be retained;
- apply applicable vendor deletion procedures where relevant; and
- maintain appropriate records of the deletion process.
Some information may remain after account deletion where necessary for:
- legal obligations;
- accounting/tax requirements;
- fraud prevention;
- security investigations;
- safety incidents;
- disputes;
- payment disputes;
- regulatory requirements; or
- other lawful purposes.
Deletion of an account does not necessarily mean immediate deletion of every historical transaction or security record.
Privacy Rights
Subject to applicable law, users may have rights relating to their personal data, including mechanisms for:
- obtaining information about personal data processing;
- accessing applicable personal data;
- correcting or updating inaccurate information;
- requesting deletion/erasure where applicable;
- withdrawing consent where processing relies on consent;
- raising a privacy grievance; and
- exercising other applicable statutory rights.
Tossuu will provide the applicable method for exercising these rights through:
Privacy request channel: [PRIVACY REQUEST URL/EMAIL]
Grievance channel: [GRIEVANCE URL/EMAIL]
Requests may require reasonable verification to protect accounts from unauthorized requests.
Tossuu will handle requests according to applicable law and the procedures that apply to the relevant request.
18+ Requirement
Tossuu is intended to operate as an 18+ platform.
Users must be at least 18 years old to create or use a Tossuu account.
Users must not:
- create an account while under 18;
- misrepresent their age; or
- use another person's identity to bypass age or verification controls.
If Tossuu becomes aware that an account belongs to a minor, it may suspend or delete the account and take appropriate action concerning the associated personal data in accordance with applicable law.
Safety, Fraud and Abuse Prevention
Because Tossuu facilitates interactions between people who may not previously know one another, safety and trust are important parts of the platform.
Tossuu may process relevant information to:
- detect fake accounts;
- verify identities;
- prevent impersonation;
- detect fraud and scams;
- prevent harassment and abuse;
- investigate safety incidents;
- handle reports and complaints;
- protect users;
- enforce Community & Safety Guidelines;
- investigate disputes; and
- secure the platform.
Reporting, Blocking and Safety Incidents
Users can report other users, messages, or safety incidents, and block users when necessary. We process these reports to investigate incidents, enforce platform rules, resolve disputes, and protect our community. Safety-related information may be retained longer for investigations or legal obligations.
Security Measures
Tossuu will implement reasonable and appropriate technical and organizational safeguards appropriate to the nature of the personal data and the risks involved.
User Responsibilities
Users are responsible for ensuring that information they provide to Tossuu is accurate and lawful.
Users should not:
- impersonate another person;
- provide fraudulent identity information;
- upload another person's government ID without authorization;
- share passwords or OTPs;
- post another person's private information without authorization;
- use Tossuu for unlawful activity;
- use chat to share sensitive financial credentials; or
- misuse another user's personal information.
Users should also review Tossuu's Community & Safety Guidelines and Terms & Conditions.
Third-Party Links and Services
Tossuu may integrate with or link to third-party services.
Third-party services may have their own privacy policies and terms.
Where a user interacts directly with a third-party service, the third party's privacy practices may apply to information collected directly by that service.
Data Breach and Security Incidents
Tossuu maintains an internal incident-response process intended to address personal-data and security incidents.
The process may include:
- detection;
- classification;
- containment;
- investigation;
- risk/impact assessment;
- evidence preservation;
- vendor coordination;
- required notification;
- recovery; and
- corrective action.
Where required by applicable law, Tossuu will notify relevant authorities and/or affected users within the applicable requirements and timelines.
Government and Law-Enforcement Requests
Tossuu may disclose information where required or permitted by applicable law.
This may include valid:
- court orders;
- government requests;
- law-enforcement requests;
- statutory requirements; or
- other legally valid processes.
Tossuu will assess requests and disclose information only to the extent required or permitted by applicable law.
Children's Data
Tossuu is intended for users aged 18 and above.
Tossuu does not intentionally design the platform for children.
If Tossuu learns that it has collected personal data from a person who is under the applicable minimum age, it may take appropriate steps to suspend the account, delete or otherwise handle the data as required by applicable law, and investigate how the information was collected.
Changes to This Privacy Policy
Tossuu may update this Privacy Policy when:
- the platform changes;
- new features are introduced;
- data practices change;
- vendors change;
- legal requirements change; or
- security/privacy practices are updated.
The latest version will be made available through the Tossuu application or website.
Where changes materially affect users or require additional notice/consent under applicable law, Tossuu will provide appropriate notice and obtain consent where required.
Contact and Grievance Redressal
For privacy questions, requests, or complaints:
Privacy and Grievance Contact:
Email: tossuu.companion@gmail.com
Users should provide sufficient information for Tossuu to identify the relevant account and understand the request.
Tossuu will process grievances and privacy requests according to applicable law and its internal procedures.