This policy explains what Andril Labs Pvt. Ltd. (“Andril Labs”, “we”, “us”) does with information when you visit www.tolam.in or use TOLAM. We have written it plainly rather than defensively, and it describes what actually happens — not what a template says might happen.
1. Who we are
Andril Labs Pvt. Ltd., registered in India at [REGISTERED ADDRESS] (CIN [CIN]). TOLAM is our product. For anything in this policy, write to hello@tolam.in.
2. What this website collects
Cookies, analytics and browser storage
None. We set no cookies, load no analytics or advertising scripts, and write nothing to local storage. There is no consent banner because there is nothing to consent to.
Forms
The “sample brief” and “get a quote” buttons do not submit anywhere. They open a pre-addressed message in your own email application. Nothing reaches us unless you press send, and what we receive is simply an email.
Hosting logs
The site is hosted on Vercel. Like any web server, Vercel records requests — IP address, approximate region, timestamp, page requested, browser type — for delivery, security and abuse prevention. We do not use these logs to build a profile of you.
Fonts
Typefaces load from Google Fonts, which means your browser contacts Google’s servers and Google receives your IP address. If you would rather that did not happen, a content blocker will stop it and the site will still work.
3. What we collect when you contact us
If you email, message us on WhatsApp or book a call, we keep what you send: your name, email address, phone number if you give it, your company, and whatever you tell us about your business. We use it to reply, to prepare a proposal, and to keep a record of our dealings with you. Nothing more.
4. Data we handle when you become a client
This is the part that matters most, because TOLAM reads systems you already run.
- You stay the owner. Operational data in your CRM, accounting, inventory or HR systems remains yours. We process it on your instructions, as a data processor, to produce your brief.
- Access is scoped and granted by you. We connect only to the systems you authorise, with the narrowest permission that works — read-only wherever the system allows it.
- We do not train models on your data and we do not use it to build products for anyone else.
- We do not sell data. Not to anyone, in any form, ever.
- Personal data inside your systems — your customers, staff, vendors — is handled under the written agreement between us. Where that agreement conflicts with this page, the agreement governs.
5. Who else sees it
We share data only with service providers needed to run the service, and only as far as they need it: [LIST SUBPROCESSORS — e.g. hosting, email, AI model provider, error monitoring]. We will also disclose information if the law requires it. Any AI model provider we use is engaged on terms that prohibit training on your content.
6. How long we keep it
Enquiries: up to [N] months if they do not become work. Client data: for the life of the engagement plus whatever period tax and company law require. On request after an engagement ends, we will delete or return your operational data — see clause 4.
7. Your rights
Under India’s Digital Personal Data Protection Act, 2023 you may ask us for a summary of the personal data we hold about you, ask us to correct or complete it, ask us to erase it, nominate someone to exercise these rights on your behalf, and complain to the Data Protection Board. Write to hello@tolam.in and we will respond within the period the law allows.
If you are in a jurisdiction with additional rights — the UK or EU, for example — those rights apply to you too and the same address reaches us.
8. Grievance Officer
As required under the DPDP Act and the Information Technology Rules: [NAME], [EMAIL], [ADDRESS].
9. Security
We use encrypted connections, least-privilege access to connected systems, and credentials held in a secrets manager rather than in code or spreadsheets. No system is perfectly secure; if a breach affects your data we will tell you and the Data Protection Board as the law requires.
10. Children
TOLAM is a business product and is not directed at anyone under 18. We do not knowingly collect children’s data.
11. Changes
If we change this policy we will update the date at the top. Material changes affecting existing clients will be told to you directly, not left here to be discovered.