Legal
Privacy notice
What we collect, why, how long we keep it and your rights.
Draft for review: this text has not yet been approved by counsel and may change before launch.
Local by default
Your conversations, files and projects stay on your device unless you choose a cloud feature. The portal never receives the content of your work.
What the portal collects
- Name and email, from your sign-in.
- Country and state, to charge the right GST.
- Device identifiers and licence events, to enforce your plan's device limit.
- Payment references from the gateway (never your card details).
- For organisations: legal name, GSTIN, address, administrators and seats.
Why
To run your account and licence, issue tax invoices, prevent fraud and abuse, meet legal duties and answer you. Optional product updates and usage analytics only with your separate consent.
How long
Account data while your account is open; tax invoices for the period the law requires; security logs for a limited time.
Who processes it
The hosting provider, the identity provider for sign-in and the payment gateway, under contract. The current list is on the Trust page.
Your rights
See the DPDP notice for access, correction, erasure, withdrawal of consent, nomination and complaints.