1. Introduction

This User Data Retention & Deletion Policy (“Policy”) explains how Tosset, a product of Trishara Ventures LLP (“we”, “our”, “us”), manages, retains, and deletes user data collected through www.tosset.com and the Tosset mobile application. This Policy is compliant with the Digital Personal Data Protection (DPDP) Act, 2023 and applicable Indian privacy laws.

2. Data We Collect and Store

Tosset retains the following types of data:

• Personal identifiers such as name, email, phone number, gender, and profile photo.
• Professional and modeling details including portfolios, comp cards, and work history.
• Account and authentication data (login details, preferences, and verification records).
• Transactional data such as subscription details and payment confirmations.
• Communication records, feedback, and correspondence via messages or support requests.

3. Purpose of Data Retention

Data is retained strictly for:

• Providing uninterrupted services and maintaining user accounts.
• Legal compliance, including KYC, taxation, and fraud prevention.
• Performance analytics and platform improvement.
• Resolving disputes and enforcing agreements.

4. Retention Periods

Tosset follows structured retention timelines:

• Active Accounts: Data is retained as long as your account remains active.
• Closed or Inactive Accounts: Data will be retained for up to 24 months post-closure for audit, dispute resolution, or legal purposes.
• Legal Records: Financial or compliance-related data is stored for up to 7 years as per Indian statutory requirements.
• Cookies and Analytics: Retained for up to 12 months unless cleared earlier by the user.

5. Data Deletion Requests

Users can request deletion of their data by contacting us at support@tosset.com. Upon verification, we will permanently delete personal data from active databases within 30 days and from backups within 90 days, unless retention is legally required.

Certain minimal data (such as billing or compliance logs) may be retained under legitimate business or legal obligations.

6. Backups and Archival Policy

Tosset maintains secure backups for disaster recovery. Backup copies are encrypted and automatically purged within 90 days after data deletion. Archived datasets are anonymized and used solely for research, performance, and analytics.

7. User Rights Under DPDP Act, 2023

As per Indian law, you have the right to:

• Access, correct, and update your personal information.
• Withdraw consent at any time for processing your data.
• Request deletion or anonymization of your personal data.
• File a grievance with the Data Protection Officer (DPO) if concerns remain unresolved.

All rights requests should be sent to support@tosset.com with the subject line “Data Rights Request – Tosset”.

8. Security of Data

We employ industry-standard encryption, firewalls, and access control mechanisms to protect stored and retained data. Data access is limited to authorized personnel and subject to audit.

9. Contact Information

Trishara Ventures LLP
Office No. 201, Lane 218/3, N Vihar, Newforest,
Dehradun, Uttarakhand, India, 248006
Email: support@tosset.com
Website: https://tosset.com

10. Updates to This Policy

Tosset reserves the right to modify this Policy periodically. Any updates will be posted on this page with a revised effective date. Users are encouraged to review this Policy regularly.