Privacy Policy

1. Introduction

ToSells ("we," "us," or "our") operates the website tosells.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Site and purchase digital products. This policy is compliant with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Information Technology Act, 2000 (India).

By using our Site, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

• Account Registration: Full name, email address, phone number, and password.
• Order Processing: Billing address, GST number (if applicable), and payment details (processed securely by our payment gateway — we do not store full credit card numbers).
• Seller Registration: Business name, PAN/GSTIN, bank account details for payouts, and identity verification documents.
• Customer Support: Any information you provide when contacting us, including support ticket messages and email correspondence.

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, and device identifiers.
• Usage Data: Pages visited, time spent on pages, click patterns, and referring URLs.
• Cookies: We use cookies and similar technologies for session management, shopping cart functionality, authentication, and analytics. See Section 6 for details.

3. How We Use Your Information

We use the information we collect exclusively for the following purposes:

• Order Fulfillment: To process your purchases, deliver digital license keys via email, and provide order confirmations and invoices.
• Account Management: To create and manage your user account, authenticate your identity, and provide customer support.
• Communication: To send order updates, delivery notifications, security alerts, and (with your consent) promotional offers. You can opt out of marketing emails at any time.
• Platform Improvement: To analyze usage patterns, troubleshoot issues, and improve our services.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes, including tax reporting and fraud prevention.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We may share your information only with:

• Payment Processors: Razorpay and other payment gateways to process transactions securely. These processors are PCI-DSS compliant.
• Sellers: Order-related information (name, email) is shared with sellers solely for order fulfillment and customer support purposes.
• Service Providers: Email delivery services, analytics tools, and cloud hosting providers who are contractually bound to protect your data.
• Law Enforcement: When required by law, court order, or to protect the rights, property, or safety of ToSells, our users, or the public.

5. Data Security

We implement robust security measures to protect your personal information:

• All data transmitted between your browser and our servers is encrypted using SSL/TLS (256-bit encryption).
• Passwords are stored using industry-standard one-way hashing (bcrypt).
• Payment information is processed by PCI-DSS Level 1 compliant payment gateways. We never store full credit/debit card numbers on our servers.
• Regular security audits and access controls are in place to prevent unauthorized access.

6. Cookies & Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for core functionality — user authentication, shopping cart, and checkout process. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our Site (e.g., Google Analytics). These collect anonymized data.
• Preference Cookies: Remember your settings such as language, theme (dark/light mode), and currency preferences.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use the Site.

7. Your Rights

Under GDPR (EU/EEA Users)

You have the right to: access your data, rectify inaccuracies, request deletion ("right to be forgotten"), restrict processing, data portability, and object to processing. To exercise these rights, email us at [email protected].

Under CCPA (California Residents)

You have the right to: know what personal information we collect, request deletion of your data, opt-out of the sale of personal information (we do not sell data), and non-discrimination for exercising your rights.

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, or as required by law. Typically:

• Account data: Retained while your account is active, and deleted within 90 days of account closure upon request.
• Order and transaction data: Retained for 7 years for tax and legal compliance.
• Support tickets: Retained for 3 years after resolution.

9. Children's Privacy

Our Site is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the data immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at:

• Email: [email protected]
• Support Page: tosells.com/p/contact