This policy explains what Sarvoch collects, why we collect it, how long we keep it, and the rights you have under India's Digital Personal Data Protection Act, 2023.
1. Who is the data fiduciary
Sarvoch is the data fiduciary for personal data you provide through the app. "We", "us" and "our" refer to the Sarvoch team.
2. Data we collect
- Account data — name, email, and (for Google sign-in) your Google profile identifier.
- Content you create — prompts, chats, uploaded files, images, voice recordings, AI Memory entries, and workspace items.
- Usage & device data — request logs, module usage, error traces, coarse approximate location from IP, and browser/device info, used to run and secure the service.
- Payment metadata — if you subscribe, our payment processor handles card and UPI details; we only receive a subscription status and invoice metadata.
We do not knowingly collect data from children under the age at which consent is required by law without a parent or guardian's consent.
3. Why we process your data
- To provide the features you ask for (chat, voice, docs, image, translate, workspace).
- To authenticate you and keep your account secure.
- To debug issues, fight abuse, and enforce rate limits.
- To communicate service updates, security alerts, and — only if you opt in — product news.
- To comply with legal obligations.
We do not sell your data, and we do not train foundation models on your prompts, files or chats.
4. Where your data lives
Databases, file storage and AI Memory are pinned to Indian regions. See the
Hosted in India page for the full sovereign-hosting story.
5. Third-party AI engines and processors
To generate responses we route requests to trusted processors:
- OpenRouter — routes to the underlying language and image models we select.
- ElevenLabs — text-to-speech and speech-to-text for Bharat-language voice.
- Sarvoch infrastructure — managed Postgres, authentication and object storage in India.
These processors receive only what is needed to serve your request, under contractual data-processing terms. Where an Indian model (for example Sarvam or Krutrim) meets our quality bar, we prefer it.
6. How long we keep data
- Account data — until you delete your account.
- Chats, files and AI Memory — until you delete them or delete your account.
- Server logs — up to 90 days, then aggregated or purged.
- Backups — rotated on a rolling window not exceeding 35 days.
7. Your rights under the DPDP Act
- Access — see the personal data we hold about you.
- Correction — edit or update inaccurate data, including AI Memory entries directly in the app.
- Erasure — delete your account and associated data from the Profile tab.
- Grievance redressal — reach us to raise a complaint; we respond within statutory timelines.
- Nominate — you may nominate another person to exercise your rights in the event of death or incapacity.
8. Security
We use TLS 1.2+ in transit, encryption at rest on managed storage, per-user rate limits on AI endpoints, row-level security on the database, and least-privilege access for the team. No system is perfectly secure, but we work to reduce risk and will notify you promptly of any breach affecting your personal data as required by the Act.
9. Cookies and local storage
We use a small set of first-party cookies and browser local-storage entries to keep you signed in, remember your preferences, and secure your session. We do not use third-party advertising cookies.
10. Children
Sarvoch is not directed at children under the age at which consent is required by law. If you believe a child has created an account without appropriate consent, contact us and we will delete the account.
11. Changes to this policy
We may update this policy as the product evolves. Material changes will be announced in-app or by email. The "Last updated" date above always reflects the current version.
12. Contact & grievance officer
For privacy questions, data-rights requests, or to reach our Grievance Officer under the DPDP Act, contact us from the Profile tab in the app.
This policy works alongside our Terms of Service.