← Home

Privacy Policy

This version: July 2026

This policy explains what TooHeal (operated by XTENSU SOFTTECH SOLUTIONS PRIVATE LIMITED) collects, why, and the choices you have. It is written to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

What we collect

To arrange and deliver a session we collect your name, email, phone number, the concern you choose to share, and your booking and payment history. If you contact support, we keep that correspondence. We record basic technical logs (such as IP address and browser type) to keep the service secure.

What we do NOT collect or keep

Sessions are never recorded. Clinical notes are held by your therapist under their own professional obligations and are not accessible to the wider TooHeal team. Card and bank details are entered directly with our payment processor — TooHeal never receives or stores them.

Why we use your data

We use it only to: match you with a therapist, take payment, deliver and remind you about sessions, provide support, meet legal and accounting obligations, and keep the platform secure. We do not sell your personal data, and we do not use session content for advertising.

Who can see it

Your therapist sees what you share to arrange care. Our payment processor (Cashfree) handles the transaction. Limited operational staff may access booking records to run the service. We disclose data outside these cases only where legally required, or where a therapist is professionally obliged to act on a serious and immediate risk to life.

Your rights

Under the DPDP Act you may request access to, correction of, or erasure of your personal data, and you may withdraw consent for optional processing. To exercise any of these, email contact@tooheal.com. We will respond within the timelines the law requires.

Retention

We keep booking and payment records for as long as needed to provide the service and to meet tax and legal obligations, then delete or anonymise them. You can ask us to delete your account data sooner, subject to those obligations.

Not yet legal advice. This is a thorough starting draft, not a substitute for review by a qualified Indian data-protection lawyer. Have it checked — and appoint your grievance/Data Protection contact — before you publish.

See also: Privacy · Terms · Refunds · Disclaimer