Privacy Policy

Service Name: Thulo

Company: Thulo Digital Solutions Pvt. Ltd.

Address: 228/55 Jwagal Madhu Marg, Jwagal Tole, Lalitpur, Bagmati, Nepal

Privacy Contact Email: admin@thulo.com

• Personal Data: Information that identifies or can reasonably identify an individual (e.g., name, phone number, email).
• Customer: A business or organization that subscribes to and uses Thulo.
• End User: A person authorized by a Customer (e.g., staff members) to use Thulo under the Customer’s account.
• Customer Data: Data a Customer or End User uploads, enters, or generates inside Thulo (e.g., leads, contacts, invoices, orders).
• Usage Data: Data about how the Services are used (e.g., activity logs, feature usage).
• Device Data: Data from devices and browsers (e.g., IP address, browser type).

3.1 Information you provide directly

We collect information you provide when you create an account, subscribe, use features, or contact support.

• Account information: Name, email, phone number, username, password (stored in encrypted/hashed form), business details
• Business and operational data: Leads, contacts, customer records, orders, products, invoices, quotations, payment records, delivery data, support tickets, notes, uploaded files
• Communication data: Messages you send to support, feedback, and attachments

3.2 Information collected automatically

• Log and activity data: IP address, login activity, timestamps, pages visited, actions taken, errors, system events
• Device and browser data: Browser type/version, device type, operating system, language settings
• Approximate location: Derived from IP address (not precise GPS location)

3.3 Cookies and similar technologies — We use cookies to support login sessions, security, and performance (see Section 10).

1. Provide and operate the Services — create/manage accounts, enable tools, provide access.
2. Manage subscriptions and billing — process subscriptions, renewals, invoices, payment confirmations.
3. Customer support — respond, troubleshoot, and improve support quality.
4. Security — detect fraud/abuse and protect accounts.
5. Improve Thulo — analytics and performance improvements.
6. Communicate with you — verification, security, and operational notifications.

Thulo is used by businesses to store and manage Customer Data such as leads, customers, orders, and marketing audiences.

If you are a Customer using Thulo to store or process Personal Data of your customers/leads/employees:

• You are responsible for collecting and using that data lawfully
• You are responsible for obtaining any required consent for marketing communications (SMS/email)
• You are responsible for honoring opt-outs and ensuring correct messaging practices

If you are an End User using Thulo under a business account, your access and data handling may be governed by the Customer’s policies.

Thulo supports multiple payment options including: eSewa, Khalti, FonePay, bank transfer, Stripe, and PayPal.

• We do not store card or bank account details inside Thulo.
• We may receive payment confirmations, transaction references, and payment status for recordkeeping and service activation.

7.1 SMS delivery

Some SMS may be delivered using sender identities such as “Thulo_Alert” and “Info_Alert”.

• Marketing SMS: opt-out/STOP handling is supported.
• Notifications and non-marketing SMS: opt-out/STOP handling may not be available.

7.2 Email delivery

Emails may be delivered through systems including Brevo, Google Workspace, ThuloMail, and Thulo’s own servers (as applicable).

• Some emails (such as critical system/admin notifications) cannot be unsubscribed.
• Marketing and non-critical communications may include an unsubscribe option where applicable.

We do not sell your Personal Data.

We may share information only in the following cases:

1. Service providers — hosting, backups, file storage, email/SMS delivery, analytics.
2. Payment providers — to complete transactions and confirm payment status.
3. Legal compliance and protection — if required by law or to protect Thulo and users.
4. Business transfers — mergers/acquisitions/restructuring, subject to safeguards.

• Nepal (DataHub) for primary hosting (as applicable)
• India (DigitalOcean) for hosting (as applicable)
• Singapore (DigitalOcean) for backups (as applicable)

For file/object storage, Thulo uses: DigitalOcean Spaces.

Your data may be processed and stored in Nepal and other countries where our infrastructure or service providers operate.

• Google Analytics
• Meta Pixel
• Google Tag Manager

These tools may use cookies or similar technologies to collect information about usage and performance.

Cookie Consent Banner: Thulo currently does not display a cookie consent banner.

You can control cookies through your browser settings. Disabling cookies may affect login and certain platform functions.

• Tenants may be terminated within 30 days after account closure/termination.
• Backup data may be retained for up to 36 months.

Backup schedule (retained up to 36 months):

• Database backups every 2 hours
• Daily, weekly, monthly, and yearly backups

• Access controls and authentication
• Encryption in transit using HTTPS (where applicable)
• Monitoring and logging to detect suspicious activity
• Backup and recovery practices

No method of transmission or storage is 100% secure, but we work to protect data and continually improve our security practices.

• Update your account/profile information
• Control communications where options are provided
• Request assistance to correct or remove certain information (see Contact)

Thulo is primarily intended for businesses and general users. We do not knowingly collect Personal Data from children. If you believe a child has provided Personal Data, contact us and we will take appropriate steps.

Thulo (Thulo Digital Solutions Pvt. Ltd.)
Email: admin@thulo.com
Address: 228/55 Jwagal Madhu Marg, Jwagal Tole, Lalitpur, Bagmati, Nepal

We may update this Privacy Policy from time to time. We will update the “Last Updated” date when changes are made. Continued use of the Services after an update means you accept the updated policy.