Legal
Privacy Policy
Your data matters. Here's what we collect, why we need it, and how we keep it safe.
Order data
Name, address, phone — only to deliver your gift
Personalization
Photos & notes stay tied to your order
Secure storage
Hosted on Supabase with industry-standard security
Last updated · June 9, 2026
Information we collect
- •Account & order data: name, email, phone, delivery address, order details
- •Gift personalization: messages, photos, playlist links
- •Memory Hall: stories you choose to share publicly
- •Technical data: browser, device, pages visited (if analytics enabled)
How we use your data
- ✓Process and deliver orders within Pune (411/412 pincodes)
- ✓Respond to contact and support requests
- ✓Improve our products and website
- ✓Send order updates (marketing only if you opt in)
- ✓Comply with legal obligations
Data storage
Orders and catalog data live in Supabase (hosted PostgreSQL). Payment details are handled by our payment provider — we don't store card numbers on our servers.
Who we share with
We don't sell your personal data. We only share with service providers needed to run the store (hosting, payments) and our Pune studio or courier partners for fulfilment. Third parties are used only when the law requires it.
Cookies
Essential cookies power your cart and session. Optional analytics cookies may help us understand site usage. Control them in your browser settings anytime.
Your rights
Request access, correction, or deletion of your data at hello@tohfastory.com. Indian users may have additional rights under applicable data protection laws.
Contact
Privacy questions? Contact us or email hello@tohfastory.com.