Legal
Privacy Policy
Last updated: June 2026
Qyvera is an early-stage platform. We collect only what is needed to provide operational intelligence to your business, and we handle it responsibly. This policy explains what we collect, why, and how to contact us if you have questions.
Who we are
Qyvera is an independent software product operated from India. For questions about this policy, contact us at founder@qyvera.in.
What we collect
- Account information — Email address when you join the waitlist, request early access, or create an account.
- Business documents — Invoices, bills, photos, and other records you upload to the platform. These are stored securely and used exclusively to generate intelligence for your account.
- Extracted data — Structured information derived from your documents — vendor names, amounts, dates — stored to power forecasts and insights.
- Usage data — Basic session and interaction data needed to keep the platform functional (e.g. authenticated session tokens). We do not run behavioural analytics or advertising trackers.
How we use your data
- Generating intelligence — Documents are processed by AI models (see below) to extract structured fields and build operational insights such as vendor forecasts, spend patterns, and activity summaries.
- Product communications — We may email you about your account, service updates, or early access status. You can opt out at any time by replying to any email or contacting us directly.
- Platform improvement — Aggregated, anonymised usage patterns help us understand how the product is used. We do not sell data or share individual records for advertising purposes.
AI and third-party processing
To read and extract information from uploaded documents, Qyvera uses third-party AI services. By uploading documents, you consent to this processing.
- OpenAI — Used for two purposes: (1) reading and extracting structured data from uploaded invoices, photos, and handwritten records; and (2) powering the KAI conversational assistant on the marketing site. KAI conversations are not linked to your business account and do not include your uploaded documents. All OpenAI processing is subject to OpenAI's Privacy Policy.
- Supabase — Provides database storage, file storage, and authentication. Data is stored on Supabase-managed infrastructure.
- Vercel — Hosts the platform. Request and response data passes through Vercel's infrastructure.
- Resend — Used to send transactional emails (confirmations, access notifications).
Data retention
Your documents, extractions, and account data are retained while your account is active. If you would like your data deleted, email us at founder@qyvera.in and we will process your request within 30 days. Because we are at an early stage, there is currently no self-service deletion flow in the product.
Cookies and tracking
Qyvera uses essential cookies required for session management and authentication (set by Supabase, our authentication provider). These cannot be disabled without breaking login functionality.
We may also use optional analytics cookies to understand how the platform is used. These are only set if you consent. We do not use advertising cookies or cross-site tracking.
On your first visit, a cookie notice will ask for your preferences. You can revisit and change your choices at any time using the Cookie settings link in the site footer.
Your consent choice is stored in your browser's local storage (not a cookie itself) under the key qyvera-consent. It contains your preference flags, the policy version, and the timestamp of your choice. It is not transmitted to our servers.
Your rights
Regardless of your location, you may contact us to access, correct, or delete your data. Email founder@qyvera.in and we will respond within 30 days.
Security
All data is transmitted over HTTPS. Database access is controlled by row-level security policies. API keys and service credentials are stored as environment secrets and never exposed in client-side code. We take reasonable precautions, but no system is completely immune to breach. If you discover a security issue, please report it to founder@qyvera.in.
Changes to this policy
We may update this policy as the product evolves. Material changes will be communicated by email to registered users. The “Last updated” date at the top of this page reflects the most recent revision.
Governing law
This policy is governed by the laws of India. Any disputes are subject to the jurisdiction of courts at Siliguri, West Bengal, India.
Questions?
Email us at founder@qyvera.in. We aim to respond within two business days.