Effective Date: 14 September 2026 Last Updated: 14 September 2026
TOTO – Every Card Matters
This Privacy Policy explains how TOTO ("TOTO", "we", "us", or "our") collects, uses, stores, processes, and protects information when you use the TOTO mobile application, website, and related services (collectively, the "Service").
TOTO is a business networking application that allows users to scan visiting cards, extract business information, save contacts, organize networking relationships, set networking goals, and explore businesses based on information associated with saved contacts.
By creating an account or using TOTO, you acknowledge that you have read and understood this Privacy Policy.
1. Information We Collect
We collect information reasonably required to provide and improve the Service.
1.1 Account Information
When you register for TOTO, we may collect: • Name • Email address • Mobile number, where applicable • Password or authentication credentials • Profile information • Account creation and login information Passwords are not stored in plain text.
2. Visiting Card Information
TOTO allows you to photograph or upload visiting cards. When you scan a visiting card, the Service may process information visible on the card, including: • Person's name • Designation • Company/business name • Phone number • Alternate phone number • WhatsApp number • Email address • Website • Business address • Area, City, State, Country • Postal code • Business category • Other information visible on the card This information is processed to extract structured contact information and make it easier for you to save and manage business relationships.
3. Visiting Card Images
When you scan or upload a visiting card, TOTO may store the original card image associated with your account. Scanned card images are treated as private user data. They are not intended to be publicly accessible and are not made available to other TOTO users by default.
4. AI and OCR Processing
TOTO may use third-party artificial intelligence, optical character recognition (OCR), or image-processing services to extract information from visiting cards. The purpose of this processing is to convert information appearing on a card into structured contact information. Where third-party processing is used: • Data is transmitted only as necessary to perform the requested function. • Service providers may process information on our behalf. • Appropriate security and contractual safeguards are used where applicable. • Information is not intentionally provided to service providers for unrelated purposes except where permitted by applicable law and contractual arrangements. TOTO will not intentionally ask an AI system to invent information that is not visible on the visiting card.
5. Contact Information
Contacts saved within TOTO are associated with your account. Your contacts may include: • Names, Companies, Designations • Phone numbers, Email addresses, Websites • Business addresses, Categories • Notes, Lead status, Follow-up information • Other information you choose to save Your saved contacts are private by default.
6. Device Contacts
TOTO may provide an option to save a TOTO contact to your device's native contacts. TOTO requests access to device contacts only when required for a specific contact-related action. You may deny contact permission. If you do not provide contact permission, you can continue using other parts of TOTO that do not require access to your device contacts. TOTO does not access your device contacts simply because you installed the application.
7. Location and Map Features
TOTO may provide map-based functionality to help you explore businesses associated with your saved contacts. Business locations may be derived from addresses contained in visiting cards or information you provide. Where necessary, TOTO may use geocoding services to convert an address into geographic coordinates. Location information associated with your saved contacts is private by default. TOTO does not automatically make your private contact locations publicly available. If a feature allows you to make business information discoverable, appropriate controls will be provided and only information permitted by that feature will be made public.
8. TOTO Goals
TOTO includes a networking goals feature designed to help users develop networking habits and generate business opportunities. The Service may process information such as: • Number of new contacts • Number of visiting cards scanned • Follow-up activity • Potential leads • Goal completion • Networking streaks • Daily, weekly, and monthly progress This information is used to provide your personal networking goals and progress. Your individual goals remain associated with your account and are not automatically made public.
9. Lead and Business Information
You may classify contacts or business relationships for networking and lead-generation purposes. This may include potential lead status, follow-up status, networking notes, business category, and relationship-related information. You are responsible for ensuring that information you enter into TOTO is accurate and that you have an appropriate basis for storing or processing personal information belonging to other individuals.
10. Payment and Subscription Information
TOTO may offer paid subscriptions. The current subscription structure may include Premium at ₹199 per year. Payments may be processed through a third-party payment provider. Depending on the payment provider, TOTO may receive information such as transaction ID, payment status, subscription status, purchase date, expiry date, and payment-related metadata. TOTO does not intentionally store complete payment card numbers, CVV numbers, UPI PINs, or other sensitive payment authentication information. Payment information is handled by the relevant payment provider according to its privacy policy and security practices.
11. Usage and Technical Information
We may automatically collect limited technical information required to operate and secure the Service, including: • Device type, Operating system, App version • Browser information where applicable • IP address, Login activity • Error logs, Crash information • Performance information • Approximate usage statistics We use this information for security, troubleshooting, reliability, and service improvement.
12. How We Use Information
We may use information to: create and manage your account; authenticate users; process visiting-card images; extract information from visiting cards; create and manage contacts; store scanned card images; provide search and organization features; provide map and business exploration functionality; provide networking goals and progress; process subscriptions; provide customer support; prevent fraud and abuse; maintain security; diagnose technical problems; improve application performance; comply with legal obligations; and enforce our Terms of Service. We do not sell your private contact database or scanned visiting-card images to third parties.
13. Your Private Data
TOTO is designed around user-controlled business networking data. Your private data may include scanned visiting cards, card images, saved contacts, contact phone numbers, contact email addresses, private notes, lead information, follow-up information, and private business locations. This information is private by default. We do not intentionally make this information available to other users merely because it exists in your TOTO account.
14. Admin Access
TOTO may have a separate web-based Super Admin system for operating the Service. Administrators may have access to account and service-management information such as user account status, subscription status, subscription dates, aggregate scan statistics, aggregate goal statistics, goal completion statistics, system usage information, and account-related administrative information. Important Privacy Restriction: TOTO administrators are not intended to have access to users' private visiting-card images, saved contact records, contact phone numbers, contact email addresses, private notes, device contacts, or private contact locations. Administrative permissions and APIs are designed to enforce this separation technically. Aggregate analytics may be used to understand overall service usage without exposing individual private contact information.
15. Data Sharing
We may share information with trusted third-party service providers when necessary to operate the Service. These providers may include cloud hosting providers, database providers, AI/OCR providers, image storage providers, map/geocoding providers, authentication providers, payment providers, analytics or crash-reporting providers, and customer-support providers. We may also disclose information when required by law, in response to valid legal processes, to protect the rights, safety, and security of TOTO or users, to investigate fraud, abuse, or security incidents, or in connection with a merger, acquisition, restructuring, or sale of relevant business assets, subject to applicable law. We do not sell users' private contact information or scanned card images.
16. Data Security
We take reasonable technical and organizational measures to protect information against unauthorized access, unauthorized disclosure, accidental loss, destruction, alteration, and misuse. Security measures may include encrypted communications, authentication controls, access controls, user-level data isolation, secure server-side processing, restricted administrative access, secure storage of uploaded files, environment-based secret management, and server-side authorization. No method of electronic storage or transmission is completely secure. Therefore, we cannot guarantee absolute security.
17. Data Retention
We retain information for as long as reasonably necessary to provide the Service, maintain your account, provide features you request, maintain transaction records, meet legal obligations, resolve disputes, prevent fraud and abuse, and enforce agreements. Retention periods may differ depending on the type of information. When information is no longer required, we may delete, anonymize, or securely dispose of it in accordance with applicable law and our retention practices.
18. Account Deletion
You may request deletion of your TOTO account through the account-management functionality provided by the Service, where available. Upon account deletion, we will take reasonable steps to delete or anonymize information associated with your account, subject to legal retention requirements, legitimate security requirements, outstanding transactions or disputes, and backup systems that may retain information temporarily before scheduled deletion. Account deletion may result in permanent loss of saved contacts, scanned visiting-card images, networking goals, lead information, and account history. You should preserve information you need before deleting your account where such functionality is available.
19. Your Rights
Depending on applicable law and your location, you may have rights regarding your personal information, including the right to: request access to personal information; request correction of inaccurate information; request deletion of information where legally permitted; request restriction of certain processing; withdraw consent where processing is based on consent; object to certain processing; request information about how your data is processed; and raise a complaint with the appropriate data-protection authority. Applicable requests may be subject to identity verification and other requirements permitted by law.
20. Children's Privacy
TOTO is intended for business networking and professional use. The Service is not directed toward children. We do not knowingly collect personal information from children in violation of applicable law. If we become aware that personal information has been collected from a child in circumstances where such collection is not permitted, we will take reasonable steps to address the situation.
21. Cookies and Similar Technologies
The TOTO website or web-based services may use cookies or similar technologies for authentication, security, session management, preferences, performance, and analytics where applicable. You may be able to control cookies through your browser settings. Disabling certain cookies may affect functionality.
22. Third-Party Services
TOTO may contain integrations with third-party services. Third-party services operate under their own terms and privacy policies. TOTO is not responsible for the privacy practices of third-party services that operate independently from TOTO. Users should review the privacy policies of relevant third-party providers where appropriate.
23. International Data Transfers
Depending on the service providers used by TOTO, your information may be processed or stored in countries other than your country of residence. Where applicable, reasonable steps will be taken to ensure that such transfers comply with applicable data-protection requirements.
24. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When material changes are made, we may notify users through the application, website, email, or another appropriate method. The updated Privacy Policy will indicate its effective date. Your continued use of TOTO after an updated Privacy Policy becomes effective constitutes use subject to the updated policy, to the extent permitted by law.
25. Governing Principle
TOTO is built around a simple principle: Every Card Matters. The visiting cards and business relationships you save in TOTO belong to your networking workspace and are private by default. We use information to provide the features you request, including scanning cards, extracting information, managing contacts, supporting networking goals, and helping you build meaningful business relationships. We aim to collect only information reasonably necessary to provide the Service and protect it through appropriate security controls. Every Card Matters. Your Privacy Matters Too.