Privacy
Privacy notice for this website and our waitlist
This notice explains what we collect when you visit mythodu.in and join the Thodu waitlist, why we collect it, and the choices you have. It covers this website and the waitlist only. The Thodu app will have its own privacy policy, published before you can download it.
Who we are
Thodu is operated by Thodu Private Limited, India. For anything about your personal data, write to account@support.mythodu.in.
What we collect when you join
| Detail | Why we ask |
|---|---|
| First name | To address you in our emails. |
| Email address | To confirm your place, send your invite, and share news about early access. |
| City | To decide which cities open first. |
| Whether you want to travel, to guide, or both | To plan our early access waves, including our first guides. |
| Places on your bucket list | To decide which places and trips to prepare first. |
| The invite code you used, if any | To move the friend who invited you up the list. |
| Your consent, its wording version and its time | To show that you asked us to email you. |
| Where you came from (for example a campaign tag in the link) | To understand which channels work. |
If you join again with the same email address, you keep your place, and we save your new answers alongside your first ones under the same entry.
What is collected automatically
To keep automated sign ups out, the form uses a bot check run by Cloudflare, which processes technical information about your browser and connection, such as your IP address, for that check and may do so outside India. To limit repeated attempts, we keep a protected form of your IP address, not the address itself, for about a day.
Like most websites, our hosting provider keeps standard request logs for security and troubleshooting. They include your IP address, the page you asked for and your browser type, and are deleted after 30 days.
We do not use advertising or third party analytics tools, or tracking cookies. Our hosting and security providers may process limited technical information as described in this notice. For our own use, we record general information about how visitors use the page, such as which parts they view and what they tap, the kind of device used and the website that sent them, and whether each question on the form was answered. We never record what you type unless you send the form. These records are tied to a random visit number, not to your IP address, and if you join, to your entry, so we can see how people find the waitlist. We keep them for 180 days. If your browser sends Global Privacy Control, the page records nothing.
After you join, your browser keeps your invite code so the page can show your place when you return. That stays on your device, and clearing your browser data removes it.
Why we use it, and our legal basis
We use your details only to run the waitlist and tell you about early access. We rely on your consent, which you give by ticking the box on the form, under the Digital Personal Data Protection Act, 2023. Occasional stories and updates are sent only if you tick the second, optional box. You can withdraw your consent at any time by leaving the list.
When your invite comes
When your place comes up, we email you an invite. It works only for the email address you joined with, only once, and for a limited time. So that the Thodu app can recognise your invite when you sign up, we securely pass it what it needs to link the invite to your new account: a protected form of your email address (never the address itself), your first name, and your waitlist details, such as your place on the list and the friend who invited you, if any. The app keeps these with your account to record how you joined, and deletes an invite nobody uses 30 days after it runs out. We may leave some people out of a wave, for example on request, and keep a short note of the reason, which is deleted if you leave the list.
Who helps us
We use trusted service providers, Google Cloud, Cloudflare and Amazon Web Services, to host this website, keep the waitlist on servers in India, protect the form from bots and send our emails. They process your details only on our instructions. We do not sell or rent your personal data, and we do not share it for advertising.
How long we keep it
We keep your entry until you leave the list, or until 12 months after Thodu opens to everyone, whichever comes first. If you never confirm your email, we delete your entry 30 days after we send the confirmation email. If that email could not reach you, your entry stays unconfirmed until you join again, which sends a new one, or ask us to delete it. Records of how the page is used are kept for 180 days, request logs for 30 days, and the protected form of your IP address for about a day.
Your choices and rights
Every email we send has a link to leave the list. Leaving deletes your entry straight away. You can also ask us to show, correct or delete what we hold about you by writing to account@support.mythodu.in. We reply within 7 days.
If you have a concern or a complaint about how we handle your data, write to the Thodu team at account@support.mythodu.in and we will look into it. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
Age
The waitlist is for people aged 18 and over.
Security
We protect the waitlist with access controls and checks on everything sent to it, and nobody can read the list from the website. If you find a security problem, please tell us at account@support.mythodu.in.
Changes
If we change this notice in a way that affects you, we will update the date above and, for important changes, email you before they apply.