Legal

Privacy Policy

We collect the minimum we need. Here's what, why, and how long.

Last updated: February 2026

1. What we collect

  • Account data: Name, email address, role (learner or teacher).
  • Verification data: For teachers — test scores, ACU verification results.
  • Session data: Booking timestamps, session duration, ratings.
  • Payment data: Transaction IDs only. Card details are handled by Razorpay and never touch our servers.
  • Usage data: Pages visited, booking flow interactions. Used for product improvement only.

2. What we don't collect

  • Session recordings (sessions are not recorded unless both parties consent to a future feature).
  • Government ID or Aadhaar numbers.
  • Data from minors — you must be 18+ to use the platform.

3. How we use your data

  • To operate the platform: bookings, payments, session delivery.
  • To enforce quality: tier calculations, rating systems.
  • To communicate with you: booking confirmations, support responses.
  • To improve the product: aggregate, anonymised usage analytics.

4. Who we share it with

We do not sell your data. We share it only with:

  • Razorpay: Payment processing. Governed by Razorpay's own privacy policy.
  • GetStream: Video session delivery. Session metadata only.
  • AWS: Infrastructure (hosting, database). Subject to our data processing agreement.

5. Data retention

  • Account data: retained until you delete your account.
  • Session data: retained for 2 years for dispute resolution.
  • Payment records: retained for 7 years as required by Indian financial regulations.

6. Your rights

  • Request a copy of all data we hold about you.
  • Request deletion of your account and personal data.
  • Correct inaccurate data.
  • Withdraw consent for marketing communications at any time.

7. Cookies

We use session cookies for authentication and analytics cookies to understand how the platform is used. We do not use third-party advertising cookies.

8. Security

All data is encrypted in transit (TLS) and at rest. We use industry-standard authentication practices. If you discover a security vulnerability, please contact us at support@totle.co before disclosing publicly.