Privacy Policy
TSA Legacy Ventures ("we", "us", "our") operates the TSA Legacy platform. This policy explains what information we collect, how we use it, and how we protect it when you use the service.
1. Information We Collect
Account Information: When you register, we collect your name, email address, phone number, business name, and business address.
Business Data: Information you enter into the platform including products, invoices, sales, purchases, customer details, supplier details, and financial records.
Usage Data: We automatically collect information about how you interact with our Service, including IP address, browser type, pages visited, and timestamps.
Payment Data: Payment processing is handled by Razorpay. We do not store your credit/debit card details. Please refer to Razorpay's privacy policy for their data handling practices.
2. How We Use Your Information
- To provide, operate, and maintain the TSA Legacy platform
- To process your transactions and manage your subscriptions
- To send you service-related communications (account verification, billing, security alerts)
- To improve our Service and develop new features
- To comply with legal obligations and enforce our terms
3. Data Isolation & Multi-Tenancy
TSA Legacy operates as a multi-tenant SaaS platform. Each business account (tenant) has complete data isolation. Your business data is accessible only to users within your organization. No other tenant can access your data.
4. Data Storage & Security
Your data is stored on Google Cloud Platform servers located in India (asia-south1 region). We implement industry-standard security measures including:
- HTTPS/TLS encryption for all data in transit
- CSRF protection, rate limiting, and security headers
- Role-Based Access Control (RBAC) and optional Two-Factor Authentication (2FA)
- Regular automated backups
- Audit logging for all critical operations
5. Data Sharing
We do not sell your personal data to third parties. We may share data only with:
- Razorpay: For processing payments
- Google Cloud: For hosting infrastructure
- Legal authorities: When required by law or to protect our rights
6. Your Rights
You have the right to:
- Access and download your business data at any time
- Correct or update your account information
- Request deletion of your account and associated data
- Opt out of non-essential communications
7. Data Retention
We retain your data for as long as your account is active. Upon account deletion, your data will be permanently removed within 30 days, unless retention is required by law (e.g., tax records under Indian law).
8. Cookies
We use essential session cookies to maintain your login state and ensure security. These cookies are strictly necessary for the functioning of the platform and cannot be disabled.
9. Children's Privacy
TSA Legacy is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users via email for significant changes.
11. Contact Us
If you have questions about this Privacy Policy:
- Email: triloki@tsalegacy.com
- Business: TSA Legacy Ventures (MSME / Udyam Registered)
- Location: India