Your data, in plain words.

Toss (“we”) runs this website, the Toss baskets and the Telegram bots that go with them. This page explains what we collect, why, and what you can ask us to do with it. If anything is unclear, email toss.smartlaundry@gmail.com.

What we collect

• Account details: your name, email address and, if you add it, your phone number. If you sign in with Google we receive your name and email from Google; we never see your Google password.
• Pickup details: your pickup address, the area it's in, and its map position so the nearest driver can be sent.
• Basket readings: the weight in your basket, the target weight you set, and whether the basket is online.
• Orders and payments: each pickup's weight, price, status and times, and the UPI reference or cash note used to mark it paid. We never see or store card or bank details; you pay the laundry directly.
• Telegram: your Telegram user ID, when you link your account or use one of our bots, so the bot can talk to you.
• Location when you search: if you use “Use my location” in Find a laundry, your position is used for that search. If you're signed in as a customer we remember it so you don't have to share it again.
• Basket requests: the name, phone, email, city and message you send when you ask about buying a basket.
• Security records: to stop abuse we count sign-in and form attempts. The network address used for this is stored only as a one-way hash, and each record is only a short running count.

Why we use it

• To run pickups: book them, send a driver, weigh, price and invoice them.
• To send you messages you'd expect: pickup updates, invoices, password resets and replies to your requests.
• To show a laundry the customers and orders that belong to it, and nothing from any other laundry.
• To keep accounts safe and the service working.

We don't sell your data, and we don't use it for advertising.

Who sees it

• Your laundry sees what it needs to serve you: your name, contact, address, basket and orders. Its drivers see the pickup address and order for the job they accept.
• Services we run on: Supabase (database and sign-in), Vercel (hosting), Google (sign-in with Google, and email delivery through Gmail), Telegram (the bots) and OpenStreetMap (maps and turning addresses into map positions).
• Toss AI uses Google's Gemini to write a laundry's morning briefing. It is only ever sent totals and customer codes, never names, phone numbers, emails or addresses.
• We may share data if the law requires it.

Cookies and storage

We use only the cookies needed to keep you signed in. They can't be read by scripts on the page and are only sent over a secure connection. Your browser also remembers your light or dark theme choice. There are no advertising or tracking cookies.

How long we keep it

We keep your account and order history while your account is open, because laundries need past orders and invoices. Password reset links expire after a short time, and security counters only ever hold a short running count.

Your choices

• Change your phone number from your dashboard and your pickup address from the Toss Control bot.
• Ask us for a copy of your data, or to correct or delete it, by emailing toss.smartlaundry@gmail.com from the address on your account. We'll reply within 30 days. A laundry may need to keep invoices it is legally required to keep.
• Sharing your location is optional: you can type your area instead. To remove a saved location, unlink Telegram or change anything else, email us.

Security

Data travels over HTTPS, each laundry can only reach its own records, passwords are stored hashed by our sign-in provider, and secret keys never reach your browser. No system is perfect; if we ever learn of a breach that affects you, we'll tell you.

Children

Toss is meant for adults. If you're under 18, use it with a parent or guardian.

Changes

If we change this policy we'll update the date at the top, and tell signed-in users about anything important.