Privacy Policy
Last updated: 15 October 2026
Suvakta is built to be trusted with your shop’s data. This policy explains what personal data we collect, why, who we share it with, and the choices and rights you have — in line with India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. Who is responsible
For data about you as an account holder and for website enquiries, Suvakta is the data fiduciary. For data that a shop records about its own customers, suppliers and staff inside Suvakta, the shop is responsible for that data and we process it on the shop’s behalf.
2. What we collect
| Data | Examples | Why |
|---|---|---|
| Account details | Name, mobile number, email (optional), password (stored only as a secure hash) | To create and secure your account and let you log in |
| Business details | Shop name, type, city, state, GSTIN, branches, staff and roles | To set up your shop, apply correct GST and permissions |
| Business records | Products, stock, sales, purchases, expenses, customer and supplier names, phone numbers and balances | To provide the Service you use |
| Voice and text commands | Audio you record and the resulting text | To understand and carry out your instruction (see section 4) |
| Quote requests | Name, business, mobile, email, city, message | To contact you about your enquiry |
| Technical data | IP address, device/browser type, log entries, error reports | Security, fraud and abuse prevention, troubleshooting |
We do not sell personal data, and we do not use your business records for advertising.
3. Legal basis
We process personal data with your consent (for example when you sign up or submit a quote request) and for legitimate uses permitted by law, such as complying with legal obligations and keeping the Service secure. You can withdraw consent at any time; this will not affect processing already carried out, but we may no longer be able to provide the Service.
4. Voice processing
- When you use the mic, audio is converted to text either by your browser’s built-in speech recognition (which may be provided by your browser vendor, such as Google for Chrome) or by our speech service hosted on Cloudflare.
- The text is interpreted to prepare a proposal. Only the text of the command and the result are kept, as part of your activity history; we do not keep the audio recording after it is transcribed.
- AI features only propose actions. Nothing is saved to your records until you confirm.
5. Who we share data with
- Service providers who host and run the Service for us under contract — primarily Cloudflare, Inc. (hosting, database, file storage, AI and speech processing, email delivery). Data may be processed on their infrastructure inside or outside India, with appropriate safeguards.
- People you choose to share with, for example when you send a WhatsApp reminder to a customer (this opens WhatsApp on your device; we do not send the message).
- Authorities, when required by law or a valid legal process.
- Our support team may access your shop’s data only to help you or keep the Service secure; such access is recorded in the audit log.
6. How long we keep data
We keep account and business records for as long as your account is active and as needed to meet legal, tax and accounting obligations. After you close your account we delete or anonymise personal data within a reasonable period unless the law requires us to keep it. Quote requests that do not become customers are deleted within 24 months.
7. Security
We use encryption in transit (HTTPS), hashed passwords, strict separation between shops, role-based access and audit logs. Read more on our Data Security page. No system is perfectly secure; if a breach affects your personal data we will notify you and the authorities as required by law.
8. Your rights
Subject to applicable law, you can:
- access a summary of your personal data and how it is processed;
- correct, complete or update it (most of it you can edit yourself in Settings);
- ask us to erase it, unless we must keep it by law;
- withdraw consent;
- nominate someone to exercise these rights on your behalf in case of death or incapacity; and
- raise a grievance, and if unresolved, approach the Data Protection Board of India.
To exercise a right, contact us by email at support@suvakta.com or through our contact form. Shop customers whose data was recorded by a shop should contact that shop first; we will help the shop respond.
9. Children
The Service is meant for businesses and is not directed at children under 18. We do not knowingly collect their personal data.
10. Cookies and local storage
We use only essential cookies and device storage needed to keep you signed in and make the app work offline. See our Cookie Policy.
11. Changes
We will post any changes to this policy here with a new date, and notify account owners of significant changes.
12. Grievances
For privacy concerns, contact our Grievance Officer as described on the Grievance Redressal page.