Clarveda ("we", "us", "our") is a data analysis platform that lets you ask questions about your spreadsheets in plain English and receive instant answers powered by artificial intelligence. We are based in Pune, Maharashtra, India.
For any privacy-related questions, contact our Grievance Officer:
Name: Aditya
Email: hello@clarveda.io
Phone: [To be updated]
Address: Pune, Maharashtra, India
We will respond to all grievances within 30 days as required under the Information Technology
(Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
When you create an account, we collect:
We collect the following usage information to operate and improve the service:
To generate answers, we send only the following to our AI provider (OpenAI):
PII including names, email addresses, phone numbers, Aadhaar numbers, and PAN numbers are automatically detected and replaced with asterisks before any data is sent to OpenAI.
Payments are processed by Razorpay. We do not store your card number, CVV, UPI ID, or any payment credentials on our servers. Razorpay is PCI-DSS compliant. We only store your plan type, subscription status, and transaction reference IDs.
We send transactional emails via Resend including: welcome emails on signup, password reset links, and billing notifications. We do not send unsolicited marketing emails. You may contact us at hello@clarveda.io to opt out of any non-essential communication.
If you consent during signup, we collect anonymous usage patterns — which features you use, how many questions you ask per session, and what file formats you upload. We do not collect the content of your data or questions for analytics purposes. You may withdraw consent at any time from your account settings.
| Purpose | Legal basis |
|---|---|
| Providing and operating the Clarveda service | Contract (Terms of Service) |
| Sending transactional emails (welcome, password reset, billing) | Contract / Legitimate interest |
| Enforcing plan limits and preventing abuse | Contract / Legitimate interest |
| Processing payments via Razorpay | Contract |
| Improving AI query quality using anonymised question logs | Legitimate interest |
| Anonymous usage analytics (with consent only) | Consent |
| Complying with legal obligations | Legal obligation |
We do not use your data for advertising. We do not sell your data to any third party. Ever.
We share data only with the following service providers, strictly to operate Clarveda:
| Provider | Purpose | Data shared | Location |
|---|---|---|---|
| OpenAI | AI query generation | Column names, masked sample rows, your question | USA |
| Railway | Cloud hosting and database | All app data (encrypted at rest) | USA (East) |
| Razorpay | Payment processing | Email, plan type, transaction amount | India |
| Resend | Transactional email | Email address, email content | USA |
We do not share your data with any other third party, including advertisers, data brokers, or analytics companies, without your explicit consent.
We may disclose your data if required by Indian law, court order, or government authority. We will notify you of such requests to the extent permitted by law.
Your account data is stored in a PostgreSQL database hosted on Railway in the US East region, encrypted at rest and in transit using TLS 1.2 or higher.
Your spreadsheet data is held only in server memory during your active session and is never written to disk or database. It is automatically cleared when your session ends.
We implement the following security measures:
| Data type | Retention period |
|---|---|
| Account information (email, mobile, password hash) | Until you delete your account |
| Chat history and questions | Until you delete the chat or your account |
| Spreadsheet data | Session only — deleted when session ends |
| Payment transaction records | 7 years (required by Indian tax law) |
| Session tokens | 24 hours from creation |
| Usage logs (anonymous) | 90 days |
| Audit logs | 1 year |
When you delete your account, all personal data is permanently deleted within 30 days, except payment transaction records which must be retained for 7 years under Indian accounting and tax regulations.
Under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP), you have the following rights:
To exercise any of these rights, email hello@clarveda.io with the subject line "Privacy Request". We will respond within 30 days. Account deletion can also be performed directly from your account settings.
Clarveda is available to users aged 13 and above. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us at hello@clarveda.io and we will delete the account and all associated data within 7 days.
Users aged 13–17 must have parental or guardian consent to use Clarveda and to make any paid purchases.
Clarveda does not use tracking cookies or third-party cookies. We use the browser's sessionStorage API (not cookies) to store your session token locally. This data is automatically cleared when you close your browser tab and is never shared with any third party.
We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts.
Your data is stored and processed in the United States (East region) via Railway's infrastructure. By using Clarveda, you consent to your personal data being transferred to and processed in the United States. We ensure all transfers are protected by appropriate contractual safeguards with our service providers.
We do not transfer your data to any country that does not provide an adequate level of data protection without appropriate safeguards in place.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and display a prominent notice on clarveda.io at least 14 days before the changes take effect.
Continued use of Clarveda after the effective date of a revised policy constitutes your acceptance of the changes. If you do not agree to the changes, you must delete your account before the effective date.
The date at the top of this page indicates when this policy was last updated. Previous versions are available on request by emailing hello@clarveda.io.
This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Pune, Maharashtra, India.
If you have a complaint about how we handle your data, you may also file a complaint with the Data Protection Board of India once it is constituted under the DPDP Act, 2023.
For any privacy-related questions, requests, or complaints: