Privacy Policy

Last updated: 10 July 2026

Thozhilly (“we”, “us”) is a local-services discovery platform for Tamil Nadu. This policy explains what personal data the Thozhilly mobile app and website collect, why, and the choices you have. We follow the Digital Personal Data Protection Act, 2023 (DPDP Act) and, for Aadhaar data, the Aadhaar Act, 2016.

What we collect

• Account: your name and email from Google or Apple Sign-In (the only login methods). We never see or store passwords.
• Phone number: verified by OTP and linked to your account — required only when you offer a service or rate a completed job. It is shown to the other party of a work request so you can talk directly.
• Profile & listing: the details you enter — name, gender, city/street service areas, trade category, services and prices.
• Aadhaar verification (workers only): identity verification is performed through Cashfree’s regulated verification service. We store only the verified name and the last 4 digits of the Aadhaar number, plus a one-way cryptographic hash used solely to prevent one Aadhaar from creating multiple accounts. We never store your full Aadhaar number. Verification runs only after your explicit consent in the app.
• Payments: membership payments are processed by Cashfree Payments. We store the order id, amount, status and date — never your card/UPI credentials.
• Requests & ratings: work requests you send or receive, quotes, and ratings/reviews of completed jobs.
• Device: push-notification tokens (Firebase Cloud Messaging) and basic diagnostics. We do not collect GPS location — city matching is by the city you choose.

Why we collect it

• To connect hirers with verified workers and operate work requests, quotes and ratings.
• To verify worker identity (trust and safety) and process membership payments.
• To prevent fraud and abuse (rate limits, duplicate-account prevention, fake-lead reporting).
• To send service notifications (new request, quote received, and similar).

Who we share it with

• Other users: your listing is public to browsers of the app; your phone number is revealed to the counterparty of a work request.
• Processors: Google Firebase (authentication, database, notifications — data stored in Mumbai, India), Cashfree Payments (payments and Aadhaar verification). They process data under their own security and compliance obligations.
• No selling. We never sell personal data or share it for advertising.
• Legal: we may disclose data if required by Indian law or a lawful order.

Retention

Account and listing data is kept while your account is active. Payment and verification records are retained as required by Indian tax and financial regulations. You may request deletion (below); some records must be retained where the law requires.

Your rights

Under the DPDP Act you may request access to, correction of, or erasure of your personal data, and may withdraw consent. Write to support@thozhilly.com from your registered email. Grievances are addressed by our Grievance Officer at the same address within the timelines the law prescribes; unresolved complaints may be escalated to the Data Protection Board of India.

Children

Thozhilly is for users 18 and older.

Changes

We will post updates to this policy here and note the date above. Material changes are notified in the app.

THOZHILLY · Udyam-registered MSME · Tamil Nadu, India · support@thozhilly.com