Privacy Policy
Last updated 27 October 2026
This policy explains what personal data eVahi ("we", "us") handles when you use the eVahi-US service and this website, why, and what rights you have.
1. Two kinds of data
- Account data about the people who use the Service: name, work email address, role and the companies they can access, sign-in events, and a record of changes they make. For this we decide how and why it is used.
- Your Data: the accounting records you enter or import (companies, ledgers, invoices, bank lines, customers and vendors, statements and documents). This belongs to you. We store and process it only to run the Service for you, on your instructions. It may include personal data about your own customers, vendors and staff; you are responsible for having the right to enter it.
2. What we use it for
- To provide, secure and support the Service, including sign-in, access control and an audit trail.
- To take payment and manage your subscription (through Paddle, below).
- To answer your messages and send service notices such as security or billing notices.
- To keep the Service reliable and to prevent misuse.
We do not sell personal data, and we do not use Your Data for advertising or to train models.
3. Who else handles it
- Paddle.com is our reseller and Merchant of Record. It collects and processes your payment details and billing information under its own privacy policy. We never see your full card number.
- Supabase provides our database, sign-in and file storage. Your data is hosted in its Mumbai (India) region on Amazon Web Services infrastructure.
- Cloudflare hosts this website and the application's pages and delivers them securely.
These providers act under contract and only to provide their services. We may also disclose information if the law requires it.
4. Where it is kept, and for how long
Your Data and account data are stored in India. If you are in the United States, your data is therefore transferred to and stored in India. We keep data while your account is active and for 30 days after cancellation, then delete it; encrypted backups expire on their normal cycle. We keep billing records for as long as tax law requires.
5. Security
Data is encrypted in transit and at rest. Access is by password sign-in; the account owner assigns each person a role and limits them to specific companies, and the database enforces those limits itself. Changes are recorded. No system is perfectly secure, so use a strong, unique password and tell us at once if you suspect misuse.
6. Cookies and similar technologies
This website uses no advertising or tracking cookies. The application stores a sign-in token in your browser so you stay signed in; it is needed for the Service to work.
7. Your rights
You can ask to see, export, correct or delete your personal data, or to object to or restrict how it is used, subject to the law that applies to you. Write to nishaupadhyay91@gmail.com with the subject "Privacy request". For Your Data about your own customers or staff, you control it; ask us if you need help exporting or deleting it. You may also complain to your local data protection authority.
8. Children
The Service is for businesses and is not directed at children.
9. Changes
We will update this page when our practices change and note the date above. For material changes we will tell the account owner by email.