Privacy Policy

This policy explains what information xyvora.ai collects and how we use it. We follow the Digital Personal Data Protection Act, 2023 (India) and, for international users, the principles of the GDPR.

What we collect

• Account data: your name, email address and password (stored hashed by our authentication provider).
• Business data you enter: clients, projects, tasks, time entries, invoices, expenses and business details such as GSTIN and UPI ID.
• Payment data: payments are processed by Razorpay (India) or our international merchant of record. We receive a confirmation, amount and email address. We never see or store your card or bank details.
• Technical data: basic logs (IP address, browser type) used for security and to show the right currency.

How we use it

• To provide the Service and keep your account secure.
• To process your purchase and send transactional emails (receipts, account confirmations).
• To respond to support requests.

We do not sell your data and we do not use your business data for advertising.

Where it is stored

Data is stored with our infrastructure providers (Supabase for the database and authentication, Vercel for hosting). Every record is protected by row-level security so only your account can access it, and all traffic is encrypted with HTTPS.

Your rights

You can access, correct or delete your data at any time. To delete your account and all associated data, email support@xyvora.live and we will do so within 30 days.

Cookies

We use only essential cookies needed to keep you logged in. No advertising or tracking cookies.

Contact

Grievance officer: Your Name (Proprietor), trading as Xyvora, Your street address, City, State, PIN, India. Email: support@xyvora.live