Privacy Policy

Last Updated: 16 September, 2026

TOOLSTR PRIVATE LIMITED (“Toolstr,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use our applications, websites, platforms, APIs, affiliate program, and related services, including Apploy, Super Local Delivery, Super QR Codes, Addressly, Inventric, and other current or future products and services operated by Toolstr (collectively, the “Services”).

This policy applies to:

• Merchants — store owners and businesses that install or use our Services

• Drivers — delivery personnel using our delivery and driver applications

• Customers — individuals who shop with or interact with stores using our Services

• Messaging Participants — vendors, customers, recipients, or other individuals who participate in business messaging enabled through our Services

• Affiliates — individuals, businesses, partners, or other entities that participate in Toolstr's affiliate or referral programs

• Website and Platform Users — individuals who visit or interact with Toolstr websites, applications, or other online services

Not every Service collects or processes all categories of information described in this Privacy Policy. The information collected depends on the particular Service, features enabled by the merchant, and how you interact with the Service.

1. Information We Collect

From Merchants

Account & Contact Information

• Name

• Email address

• Phone number

• Business and store details

• Billing and payment information

• Account credentials and authentication information

Shopify and Store Data

Depending on the Service and permissions granted by the merchant, we may process:

• Orders

• Products

• Customers

• Inventory

• Locations

• Shipping and delivery information

• Checkout-related information

• Store configuration and settings

• Other Shopify data required to provide the Service

We access and process Shopify data only to the extent reasonably necessary to provide, maintain, secure, and improve the applicable Service.

Usage Data

We may collect information about how merchants use our Services, including:

• App settings and preferences

• Feature usage

• Configuration information

• Log data

• Diagnostic information

• Analytics relating to Service usage

Messaging Integrations

When a merchant connects a messaging service, we may process:

• Connected business phone numbers

• Messaging account identifiers

• Vendor or customer phone numbers provided by the merchant

• Message templates configured by the merchant

• Message metadata, including timestamps and delivery or read status

• Message content where required to provide the messaging functionality

From Drivers

Account Information

• Name

• Phone number

• Email address

• Vehicle information, where provided

• Authentication information

Location Information

Where required for delivery functionality and enabled by the merchant or driver, we may collect real-time or periodic GPS/location information for:

• Route planning

• Delivery tracking

• Navigation

• Delivery status

• Proof of delivery

• Driver activity and performance reporting

Delivery Activity

This may include:

• Assigned deliveries and routes

• Delivery status

• Check-ins

• Delivery timestamps

• Proof-of-delivery photos

• Signatures

• Ratings or feedback

• Other delivery-related activity

From Customers

Order Information

• Name

• Contact information

• Shipping or delivery address

• Ordered products or services

• Order and fulfillment information

Location Information

Where enabled and necessary for a Service, we may process location information for purposes such as delivery, pickup, routing, or determining service availability.

Device and Usage Information

We may collect:

• IP address

• Browser type

• Device type

• Operating system

• Application information

• Interaction and usage data

• Log and diagnostic information

Feedback & Support

We may process ratings, messages, support requests, and other information voluntarily provided to merchants or Toolstr.

From Messaging Participants

Where messaging functionality is enabled by a merchant, we may process:

• Phone numbers provided by merchants or messaging platforms

• Message content, where required to provide or support the messaging functionality

• Message timestamps

• Delivery and read status

• Group membership information

• Messaging interaction metadata

Where this information is provided by a merchant or third-party messaging platform, Toolstr may process it on behalf of the merchant. Toolstr does not independently obtain recipient information for advertising purposes.

From Affiliates

If you participate in a Toolstr affiliate or referral program, we may collect:

Account & Contact Information

• Name

• Email address

• Phone number

• Business or organization details, where applicable

• Account and login information

Referral Information

• Affiliate or referral ID

• Referral links or codes

• Information about customers or merchants referred to Toolstr

• Referral dates and status

• Attribution information used to determine whether a referral is eligible for commission

Commission & Payment Information

• Commission amounts

• Commission status and history

• Payment or payout information

• Tax or other information required to process payments or comply with applicable law

Affiliate Activity

We may collect information about how affiliates use our affiliate platform, including clicks, referrals, conversions, account activity, and related analytics.

Affiliates refer prospective customers to Toolstr. Toolstr does not provide affiliates with customers' or merchants' private information except where disclosure is necessary to operate the affiliate program, required by law, or otherwise permitted by the applicable terms and law.

2. How We Use Information

We may use information to:

• Provide, operate, maintain, and improve our Services

• Process and fulfill merchant and customer orders

• Facilitate local delivery, pickup, shipping, and routing

• Optimize delivery routes

• Track delivery activity and performance

• Enable merchants to communicate with customers, vendors, and other participants

• Enable one-to-one and group messaging

• Send transactional, operational, and service-related notifications

• Provide delivery status and message tracking

• Provide customer and technical support

• Authenticate users and secure accounts

• Monitor and improve the reliability and performance of our Services

• Operate and administer our affiliate and referral programs

• Track referrals and attribute customers to affiliates

• Calculate and pay affiliate commissions

• Communicate with affiliates regarding referrals, commissions, and the affiliate program

• Detect, prevent, and investigate fraud, abuse, security incidents, and unauthorized activity

• Comply with applicable laws, regulations, platform requirements, and contractual obligations

• Enforce our terms and protect the rights, property, and safety of Toolstr, our users, and others

Where permitted by applicable law, we may also use aggregated or de-identified information for analytics, research, product improvement, and business purposes.

3. How We Share Information

We may disclose information in the following circumstances:

With Merchants

Customer, vendor, driver, and delivery information may be made available to the merchant operating the applicable store or business where necessary to provide the Services.

Merchants are responsible for their own handling of information they receive through our Services.

With Drivers

Customer contact, delivery address, order, and other relevant information may be shared with drivers where necessary to fulfill a delivery or provide related services.

With Messaging Platforms

When a merchant enables messaging functionality, relevant information may be transmitted to third-party messaging providers, such as WhatsApp Business and Meta, to facilitate message delivery and related functionality.

With Service Providers

We may share information with third-party service providers that provide services on our behalf, including:

• Cloud hosting and infrastructure providers

• Analytics providers

• Messaging providers

• Payment processors

• Notification providers

• Mapping and routing providers

• Authentication and security providers

• Customer support and communication providers

• Affiliate and referral tracking providers

• Payment and payout providers

Examples may include AWS, Firebase, Meta messaging services, and other providers used by a particular Service.

These providers are permitted to process information only as necessary to provide services to Toolstr or our users, subject to applicable agreements and law.

Affiliate Program

When you participate in a Toolstr affiliate or referral program, we may use affiliate and referral information to attribute referrals, determine commissions, prevent fraudulent or duplicate referrals, and administer the program.

Toolstr does not share merchants' or customers' private information with affiliates for the purpose of enabling referrals or commissions. Affiliates may receive only the information reasonably necessary to confirm or administer their referral relationship with Toolstr, subject to applicable law and the terms of the affiliate program.

Business Transfers

If Toolstr or any of its businesses or assets are involved in a merger, acquisition, financing, reorganization, sale, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

Legal and Safety Reasons

We may disclose information when we reasonably believe disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request

• Detect or investigate fraud or security issues

• Enforce our agreements and policies

• Protect the rights, property, or safety of Toolstr, our users, or others

4. Business Messaging Integrations

Our Services may allow merchants to connect third-party messaging platforms, including WhatsApp Business through Meta.

When messaging functionality is enabled:

• Merchants control the recipients and message content they submit

• Toolstr processes information as necessary to provide the messaging functionality

• Messages may be sent to individuals, businesses, or groups

• We may process and retain messaging metadata for delivery tracking, troubleshooting, security, and service operation

• Message content is not used by Toolstr for advertising purposes

Messages are transmitted through third-party messaging platforms and may be subject to the privacy policies and terms of those providers.

Merchants are responsible for obtaining any required consent from recipients and ensuring that their use of messaging functionality complies with applicable laws, regulations, platform policies, and messaging requirements.

Where Toolstr processes messaging information on behalf of a merchant, Toolstr acts as a service provider or processor, as applicable, and processes such information according to the merchant's instructions and applicable law.

5. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, meeting legal and contractual obligations, resolving disputes, enforcing agreements, and maintaining appropriate business and security records.

Retention periods may vary depending on the type of information and the Service involved.

Merchants

Account and store data may be retained while the merchant account is active and for a reasonable period afterward where necessary for legitimate business, legal, security, or compliance purposes.

Drivers

Delivery, location, and activity data may be retained as reasonably necessary to provide the Services, support merchants, maintain records, and comply with applicable obligations.

Customers

Order and customer-related information may be retained according to the requirements of the applicable merchant, Shopify, and applicable law.

Messaging Data

Messaging metadata may be retained for service operation, delivery tracking, security, troubleshooting, and debugging. Message content may be retained only where required to provide functionality, maintain records, resolve disputes, or comply with applicable obligations.

Affiliate Data

Affiliate account, referral, commission, and payout information may be retained for as long as necessary to administer the affiliate program, calculate and pay commissions, prevent fraud, maintain financial records, resolve disputes, and comply with applicable legal and tax obligations.

6. Your Rights

Depending on your location and applicable law, you may have rights regarding your personal information, including the right to:

• Access personal information we hold about you

• Request correction or updating of inaccurate information

• Request deletion of personal information

• Object to or restrict certain processing

• Request portability of certain information

• Withdraw consent where processing is based on consent

• Lodge a complaint with an applicable data protection authority

Some rights may be subject to legal limitations or exceptions.

To exercise applicable rights or ask questions about our privacy practices, contact:

support@toolstr.com

Where Toolstr processes information on behalf of a merchant, you may also need to contact the relevant merchant directly.

7. Security

We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction.

These measures may include encryption, access controls, authentication mechanisms, monitoring, secure storage, and other security practices appropriate to the nature of the information and Services.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

Toolstr and our service providers may process information in India, the United States, and other countries or regions where we or our service providers operate.

Where personal information is transferred internationally, we take steps required by applicable law to provide appropriate protection for that information.

Third-party providers, including messaging, hosting, analytics, affiliate, and infrastructure providers, may independently process information in other jurisdictions according to their respective terms and privacy policies.

9. Children's Privacy

Our Services are intended for businesses and adults. We do not knowingly collect personal information directly from children under 13.

Certain Services may process information about customers of merchants, and merchants are responsible for ensuring that their collection and use of customer information complies with applicable age and privacy requirements.

If you believe a child has provided personal information to Toolstr in violation of applicable law, please contact us at:

support@toolstr.com

10. Third-Party Services

Our Services may integrate with or contain links to third-party services, platforms, applications, or websites.

Examples may include Shopify, Meta/WhatsApp, Firebase, AWS, payment providers, mapping providers, affiliate tracking providers, and other third-party services.

These third parties may collect or process information under their own privacy policies and terms. Toolstr is not responsible for the privacy practices of third parties that operate independently of Toolstr.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, legal requirements, or technology.

When we make material changes, we may provide notice through our Services, websites, email, or other appropriate means.

The updated version will be effective from the date stated at the beginning of this Privacy Policy.

12. Contact Us

TOOLSTR PRIVATE LIMITED

508, Sukhwani Boulevard Commerz
Sus, Pune - 411045
Maharashtra, India

Email: support@toolstr.com