Privacy Policy

• Your Sarvyam account, billing and use of our website: we decide how this data is used, so we are the data controller (under GDPR) and data fiduciary (under India’s Digital Personal Data Protection Act, 2023).
• Data a business stores about its own clients (names, contact details, event details, quotes and payments): the business is the controller/fiduciary and we process it on its behalf. If you are a client of a business that uses Sarvyam, please contact that business first; we will help them respond.

• Account data: name, email, password (stored only as a secure hash), business name, country, currency, timezone, phone and address you choose to add.
• Business content: catalog items, prices, packages, quotes, bookings, tasks, photos and website content you add.
• Billing data: plan, invoices and payment records. Card details are handled by our payment provider; we never see or store full card numbers.
• Usage and device data: sign-in times, IP address, browser type, pages used and error logs, to keep Sarvyam secure and working.
• Messages: emails you send us and support conversations.
• Inquiries through a business’s Sarvyam page: the details a visitor types into the form, delivered to that business.

• To provide Sarvyam — create your account, run the features you use, send quotes and notifications you ask us to send (contract).
• To keep it secure — prevent fraud, abuse and unauthorised access; keep audit logs (legitimate interests / legal obligation).
• To bill you and keep records required by tax and company law (legal obligation).
• To support and improve Sarvyam — answer questions, fix problems, understand which features help most, using aggregated data where possible (legitimate interests).
• To tell you about Sarvyam — product updates and offers, only where you have agreed or the law allows; you can unsubscribe at any time (consent / legitimate interests).

• We do not sell personal data.
• We do not use your business’s clients’ data for our own marketing, or show it to other businesses.
• We do not use your content to train third-party AI models.

Only with service providers (“sub-processors”) that help us run Sarvyam, under contracts that require them to protect the data and use it only for us:

• Cloud hosting and databases (e.g. Hostinger) — servers and backups.
• File storage and delivery (e.g. Cloudflare) — photos and documents.
• Email delivery providers — account and notification emails.
• Payment providers (e.g. Stripe) — subscription billing and, where you connect it, your clients’ payments.

We may also disclose data where required by law or to protect rights and safety, and to a successor if our business is sold (with this policy continuing to apply).

Sarvyam serves businesses worldwide, and our providers may process data in India and other countries. Where data from the EU, UK or other regions with transfer rules leaves that region, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK Addendum.

• Account and business content: while your account is active, and up to 90 days after you close it (to allow recovery), then deleted.
• Invoices and billing records: for the period required by tax law (currently up to 8 years in India).
• Security logs: up to 12 months.
• Backups roll over and are overwritten within 35 days.

We use encryption in transit (HTTPS), hashed passwords, separation of each business’s data, access controls, audit logs and regular backups. No system is perfectly secure; if a breach affects your personal data we will notify you and the relevant authority as the law requires (including the Data Protection Board of India and, where applicable, EU/UK supervisory authorities within 72 hours).

Depending on where you live, you can ask to access, correct, delete or export your personal data, to withdraw consent, to object to or restrict certain uses, and to nominate someone to exercise your rights (India). California and other US-state residents may request to know, delete and correct data and will not be discriminated against for doing so.

Most account data can be updated in your settings. For anything else, email privacy@sarvyam.com. We respond within 30 days (or sooner where the law requires) and may need to verify your identity. You may also complain to your data-protection authority.

We use only essential cookies: one to keep you signed in securely and one to remember your theme. We do not use advertising or cross-site tracking cookies. If we add optional analytics in future we will ask for your consent where required.

Sarvyam is for businesses and is not intended for anyone under 18. We do not knowingly collect children’s personal data.

Privacy questions: privacy@sarvyam.com. Grievance Officer (India): [Grievance Officer name], grievance@sarvyam.com — we acknowledge within 24 hours and aim to resolve within 15 days. Postal address: [Registered office address, City, State, PIN, India].

We will post any changes here with a new effective date and tell account owners about significant changes by email or in the app.