Data processing

Who is who

You decide which of your customers get asked for a review, and what the message says. That makes you the controller of their details. We only act on your instructions, which makes us the processor. TOTOSLOCAL ONE PRIVATE LIMITED is the company behind FiveStariz.

What we process, and why

For each person you ask, we hold a first name, and a mobile number or an email address, or both. We hold what was sent, when it was sent, and what came back. We use it only to send what you asked us to send, and to show you what happened.

What we never do

• We do not sell your customers’ details, and we do not rent or share them for marketing.
• We do not message your customers for our own reasons.
• We do not use your customers’ details to train anything.

Who else touches it

To send a message, it has to pass through the company that carries it. If you use your own accounts, that is Twilio for texts and your own email server for email, and we are not in the middle. If you use ours, your message passes through our sending accounts. Our server is a virtual machine rented from DigitalOcean.

How long we keep it

We keep it while your account is open. Healthcare accounts can set a shorter time, after which old contacts are removed automatically. Ask us to delete your account and we remove it and its data.

Keeping it safe

Everything travels over HTTPS. Keys and passwords you give us for other services are encrypted before they are stored. Each person on your team only sees what their role allows. Opt outs are permanent and cannot be undone by a new upload.

If something goes wrong

If your customers’ details are ever exposed, we will tell you what happened, what was affected and what we did, without waiting to be asked.

A signed agreement

If your own rules need a signed data processing agreement, write to radhika@totodreammarketing.com and we will send one. We would rather sign yours than pretend a web page is the same thing.