Privacy Policy

PLACEHOLDER — the registered entity operating Thottam and its address go here.

Thottam is operated from Kerala, India. For privacy questions, email sales@thottam.online or call +91 81138 86914.

Sign-in details. Most accounts are a phone number and a six-digit PIN. The PIN is stored by our sign-in provider the way a password is, as a one-way hash: we never see it and cannot read it back. If you sign in with Google instead, we receive your name, email address and profile picture from Google.

The name you type into the app: on your account, on a listing, or on a buyer or curing-unit profile.

Farm data you enter yourself: farms and plots, crops, daily harvest entries, sales, expenses, reminders, and on the dryer side your machines, customers and batch records.

Marketplace listings you post: the crop, the kilos, the grade, the village or town, the name you chose to show, your notes and your photographs. See “Marketplace listings are public” below.

Your approximate location, only when you press “Use my location” on the listing form. The position is rounded to about a hundred metres before it leaves your phone, is used once to look up the village or town name, and is not stored. Only the place name goes on the listing.

Credits and unlocks, for buyers: which listings you paid credits to see a phone number or a quality report for, and the credits you asked for and were given. Credits are arranged by phone with our team; no card or bank details are entered on the site.

Push notification subscriptions, only if you turn notifications on in the app.

Basic technical data your browser sends automatically, such as device type and IP address.

If you allow measurement and advertising cookies (see below): how you use the site, and which advert or link brought you here.

A listing is an advertisement. Everything on it — crop, kilos, grade, village or town, the name you chose to show, notes, photographs, and the questions buyers ask with your answers — can be seen by anyone on the internet, including search engines, without signing in. Do not put anything on a listing you would not put on a board at the market.

Your phone number is never on a listing. A buyer gets it in two ways only: when you accept that buyer's offer, or when the buyer pays Thottam credits to see it. In both cases the buyer's own name and number are shown to you as well.

You can edit or delete a listing yourself at any time from “My listings”. Deleting it removes the photographs too.

If a buyer asks for a quality report on your listing, our team rings you to arrange a sample. The report is shown to the buyers who paid for it and does not carry your phone number.

To run your account: show you your own records, calculate yields and totals, run the marketplace, and send the reminders and alerts you have set — including notifications on your phone if you turn them on.

To manage free trials, Pro plan access and buyer credits, and to respond when you contact us for support.

With your permission, to measure how people find and use the site and whether our advertising works, through the services listed below.

We do not sell your data, and we do not use your farm records for advertising.

Supabase, which provides our sign-in, database and file storage — your account, records and listing photographs live there.

Our application server, which runs the Thottam website and app.

OpenStreetMap (Nominatim), which receives a rounded position when you press “Use my location”, to answer with a village name. It receives nothing else about you.

Only if you allow measurement and advertising cookies: Google (Analytics and Ads), Meta (Facebook) and Microsoft Clarity. Google and Meta measure visits and advertising. Clarity records how the screen is used — taps, scrolling and what was on screen — so we can see where people get stuck. None of them receive your farm records from us, but Clarity's recording can include what was on your screen at the time.

Also only with that permission, when you sign up or finish setting up a farm, our server tells Meta that it happened, together with a hashed (scrambled, one-way) form of your phone number, email address and first name, plus your IP address and browser type. Meta uses this to match the sign-up to an advert click. The hashed values cannot be turned back into your number or name.

Other Thottam users: a buyer whose offer you accept, or who pays credits for your number, sees your name and phone number. If you approve a link request from a curing unit, that unit sees your name and phone number and the batches they run for you, and you see what they log about your crop. Nothing is shared without that approval or payment.

We also share data where the law requires it.

Your records and photographs are stored in Supabase's cloud, and the application runs on our own server. Both are reached only over encrypted connections.

Your records are kept for as long as your account exists — including after a trial ends, when the account turns view only. Nothing is deleted automatically.

A listing stays on the public marketplace for sixty days, or until you mark it sold, take it down or delete it. A withdrawn or sold listing stays in your own list until you delete it.

A push notification subscription is removed when the phone stops accepting notifications.

When you ask us to delete your account, we delete your records with it, as described under Your rights.

You can see and correct your records in the app itself at any time, and edit or delete your own listings.

To get a copy of your data, or to delete your account and everything in it, email sales@thottam.online or call +91 81138 86914 and we will do it for you.

You can change your answer to the cookie question at any time using the link at the bottom of this page.

If you are in India, these rights follow the Digital Personal Data Protection Act, 2023. If you are in the European Economic Area or the United Kingdom, they follow the GDPR, and you may also complain to your local data protection authority.

Necessary, always on: sign-in cookies from Supabase (and from Google, if you sign in with Google) keep you logged in; a small cookie remembers your chosen language; and another remembers your answer to the cookie question for six months.

Optional, only if you allow them: cookies and scripts from Google Analytics, Google Ads, Meta and Microsoft Clarity, described above, and a cookie of our own that remembers for ninety days which advert or link first brought you here. If you decline, none of these are set. Until you answer, nothing optional is loaded.

The installed app keeps small counters on your device (for example, whether it has already shown you the install prompt) and caches pages so that screens you have already opened still open when you are offline.

Thottam is a tool for running a farm, a curing unit or a buying business, and is meant for adults. You must be 18 or older to open an account.

When this policy changes, we update this page and the date at the top. Meaningful changes take effect from that date.

For privacy questions, email sales@thottam.online or call +91 81138 86914.