Privacy Policy

This policy explains what personal data Sarvimo (“we”, “us”) processes when you use sarvimo.com, our apps and our Telegram bot, why, for how long, who we share it with, and what rights you have. It covers the PDF and file tools, Sarvimo Forms, Sarvimo Book, meeting polls, link-in-bio pages, Sarvimo Time, connectors, the whiteboard and the Sarvimo Telegram bot (“SarvimoBot”).

For the file tools you upload a file, our server processes it to do what you asked (merge, compress, convert and so on) and returns the result. We never inspect, share, sell, or use the content of your files for any purpose other than fulfilling that request.

Sarvimo is currently operated by Yash Maheshwari, an individual founder based in India, whose business registration is in progress. Once Sarvimo is incorporated, this section will be updated with the registered legal entity and its details. Until then, requests are handled personally by the founder as described in Section 14 (Grievance Officer and contact). We have not appointed a separate Data Protection Officer or an EU or UK representative.

• Sarvimo as controller (“Data Fiduciary”). For your account, sign-in, plan, usage, security and support data, and for the data of people who use Sarvimo directly, we decide why and how the data is processed. In India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) terms we are the Data Fiduciary, and under the EU and UK GDPR we are the controller.
• Sarvimo as processor (“Data Processor”). For form responses, and for booking guests’ and poll voters’ details that you collect using our apps, you are the controller or Data Fiduciary and Sarvimo processes that data on your behalf and on your instructions, using the providers listed in Section 6. If you need a written data processing agreement for this, contact us.

File tools

• File content. Held only in server memory for the duration of your single request and discarded when the result is sent back. It is not written to disk, not logged and not retained. The one exception is the optional AI features described below.
• AI features (paid plans). If you use PDF summary or “ask a PDF”, or generate a form from a description, the text needed for that request is sent to our AI provider, Anthropic, to produce the answer. We do not store your PDF or the AI’s answer, and we use the provider’s API, under terms that do not allow it to train models on that data. The provider may keep API data for a limited period under its own terms (for example for safety and abuse checks). A generated form is saved as a normal form in your account. Please do not submit sensitive personal data to these features unless you are comfortable with this.

Your account

• Sign-in data. If you continue with Google we receive your name, email address and profile photo. If you sign up with email, we store your email, name and a salted one-way hash of your password (never the password itself). Email verification and password-reset tokens are short-lived and single-use.
• Plan and billing. Payments are handled entirely by Dodo Payments. We never see or store card or bank details, only your plan, subscription status, billing period and identifiers Dodo gives us.
• Usage. For signed-in users we record which tool was used and when, to show “recently used tools” and apply your daily allowance. For signed-out visitors, daily usage and rate limits are counted against a network identifier such as your IP address. We never link this to file content.
• Team seats. On a Business plan, invited teammates’ email addresses and membership status are stored.
• Your agreement. When you create an account we record the age band you chose, that you agreed to the Terms and Conditions and this Privacy Policy, the version of these documents, and the date and time.

Sarvimo Hisaab (dues, invoices and receipts)

• Items, stock and staff. The items you sell (names, prices, GST rates, stock counts and a note of stock changes) and the email addresses and roles of any helpers you add. A helper you add can see and work on your shop's records within their role, and we may email them to tell them they were added. If you turn on the morning email, we send you a list of who to remind and what is running low. Reports and backups are created when you ask and are sent only to you.
• On your device. To work with weak signal, Hisaab keeps the app files, a copy of the last data you opened and any sales made offline in your browser's storage. It is removed when you log out.
• Your business details. Your business name, address, state, GSTIN, phone, email, bank details, UPI ID and signatory name, which you choose to save so they print on your invoices and receipts.
• Your customers. The names and (if you add them) phone numbers of the people you bill, the amounts they owe, and the invoices and receipts you issue to them, including any address or GSTIN you type. These people are not Sarvimo users and have not given us their details: you add them, and you should only add people you have a reason to contact. We use this data only to run Hisaab for you, we do not sell it, and we do not message your customers ourselves. Reminders are sent by you, from your own WhatsApp.
• Pay links. Each amount has a link that anyone who holds it can open. It shows your business name, the customer’s name, the amount, and your UPI ID so they can pay you. When a customer taps “I have paid”, we store that it was tapped and when. Treat a pay link like a private message.
• Statements and receipts. Account statements, business statements and printed receipts are worked out from the customers, dues, payments and bills you entered. Invoices and receipts are saved as they were issued so you can open them again. Statements are made when you ask and are not kept as files. When you print on a Bluetooth or USB printer, the print data goes from your device straight to your printer and does not pass through Sarvimo.
• Where it is kept. This data is stored with our database provider, Supabase, separately from your sign-in details. Invoice and receipt PDFs are made on request and are not kept as files.
• If a customer asks. A person you added can ask you, or us at the contact address below, to correct or remove their details, and you can delete any customer, invoice or receipt in the app.

Sarvimo Khata (invite-only expense tracker)

• Your records. The expenses, amounts, notes, categories, dates, budgets, recurring items, savings goals, money lent or borrowed, and the salary and income you enter. Your own salary and income are visible only to you, unless you add income to a group’s shared pool.
• Groups. People in a shared group can see the group’s expenses and payments, and the names, photos and (if you choose to save one) UPI IDs of its members. Invitations use the email address or Sarvimo ID you type, and the person invited receives an email.
• Notifications. If you turn on phone notifications we store the push address your browser gives us (and its keys) so we can send alerts, and a short list of recent group events (kept about 14 days) used for live updates. If you connect Telegram, alerts can also go there. Reminders and summary emails are sent only if you switch them on.
• Voice add. If you use the voice button, the recording is sent to our speech and language provider (Groq) to turn it into an expense. We do not keep the recording. On some phones the voice button uses the browser’s own speech service instead, which has its own privacy terms.
• On your device. Khata keeps some settings on your device, for example your language, whether income is shown, the app lock settings (the PIN is stored only as a salted hash) and a daily welcome marker. These stay on your phone.
• Exchange rates. When you enter an expense in another currency we fetch the day’s rate from a public rate service. No personal data is sent with that request.

Calculators and Resume Maker

• Money Calculators. The numbers you type are worked out in your browser and are not sent to us or stored.
• Resume Maker. Your resume is built in your browser. The details you type are saved only in your browser’s storage on your device so they are there next time, and are not uploaded to us. Saving as a PDF uses your browser’s print function.

Sarvimo Forms

• Forms and responses. The form’s questions and every response submitted are stored so the owner can view and export them. If a form requires sign-in, the respondent’s account is recorded with the response.
• Drop-off analytics. On public forms we record an anonymous, random visit identifier, the last question reached and whether the form was finished. It contains no answers, no name or email and no IP address, and is deleted after 90 days.
• PDF templates and receipts. A fillable PDF imported as a form is kept in private storage so responses can be written back into it. PDF receipts of a response are generated when requested and are not stored.
• Who is responsible. The form owner decides what to ask and what to do with responses, and is responsible for having a lawful basis and giving respondents any required notice. For that data Sarvimo acts as the owner’s service provider.

Sarvimo Book, polls and link in bio

• Booking. Your booking profile (link name, display name, time zone, weekly hours and an optional private calendar address used only to hide busy times) and, for each booking, the guest’s name, email address, time zone and any note they add. We email confirmations and calendar files to the guest and to you.
• Meeting polls. The poll you create and the names and availability voters enter. Voters do not need an account. Anyone with the poll link can see the poll and its votes.
• Link in bio. The page content you publish, including any contact-card details, form links and PDFs you upload. Published pages and uploaded PDFs are public. We keep a simple view counter and do not identify visitors.

Connectors and integrations

• Tokens and keys you provide for services such as Airtable, Notion, Mailchimp, HubSpot, Klaviyo, ConvertKit and Telegram are stored encrypted. If you connect Google, we store the access tokens needed for the limited permissions you granted (for example Google Sheets, or files created by Sarvimo in Google Drive).
• Google user data. We use information we receive from Google APIs only to provide the features you asked for (such as writing form responses to your Google Sheet), not for advertising, and we do not sell it. Sarvimo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time from your Google account or by disconnecting the connector.
• When you turn a connector or webhook on, form responses are sent to that service or address at your direction. What that service does with the data is governed by its own terms.

SarvimoBot on Telegram

• When you connect the bot we store your Telegram chat identifier and username, the link to your account, your alert settings, how many commands you have used and when you last used the bot. Short-lived, single-use connect codes are deleted once used or expired.
• Messages you send the bot are processed to respond. We do not keep them beyond the command counter. Telegram itself processes messages under its own privacy policy, and bot chats are not end-to-end encrypted. Never send passwords, payment details or other secrets to the bot. It will never ask for them.
• Alerts (for example a new form response or booking) include limited details such as a form title and the first few answers, and are sent through Telegram.

Other

• Whiteboard. Drawings travel directly between participants’ browsers. Our server only relays short connection messages, which are deleted after about three hours.
• URL shortener. The destination address and a click count are stored for each short link.
• Technical and log data. Standard server logs (for example IP address, timestamp, page or tool used, response status) may be recorded briefly for security, abuse prevention and fair use, never tied to file content.
• Communications. If you contact us, we keep the correspondence to respond to and resolve your query.

India. We process personal data on the basis of your consent, which you give when you create an account or choose to use a feature and can withdraw as described in Section 10, and for the limited “legitimate uses” the DPDP Act allows, such as providing a service you have voluntarily asked for. EU and UK. We rely on the GDPR bases in the table below. Where we rely on consent, you can withdraw it at any time.

• Essential cookie. When you sign in we set a session cookie to keep you signed in. It is needed for the service to work.
• Browser storage. We save small preferences on your device, such as your light or dark theme, a dismissed notice and whether you have seen the cookie banner.
• Analytics. We use cookieless, aggregate analytics (Vercel Web Analytics, and Plausible if we enable it) that do not build profiles of individual visitors.
• No advertising trackers. Any promotional banners on Sarvimo are our own. We do not use third-party advertising or tracking cookies.

Pages you build with Sarvimo (forms, booking pages, link-in-bio pages) are yours. If you add third-party embeds or links to them, those services may set their own cookies.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising or for marketing, as those terms are used in California and other privacy laws. A small number of service providers process limited data strictly on our behalf, only to help operate Sarvimo:

• Vercel: hosting and delivery of the site, and aggregate analytics.
• Supabase: our database, and file storage for the private PDF templates and the public link-in-bio PDFs.
• Resend: sending transactional email (verification, booking confirmations, invites, support replies).
• Dodo Payments: subscription billing, as merchant of record.
• Google: sign-in, and Sheets or Drive only if you connect them.
• Anthropic: the AI features, only when you use them.
• Telegram: delivery of messages to and from SarvimoBot, if you use it.
• Groq: turning a voice recording into an expense, only when you use Khata’s voice button.
• Phone notification services run by your browser or phone maker (for example Google, Apple or Mozilla), which carry the notification to your device.
• Public exchange-rate service: the day’s currency rate, with no personal data.
• Any service you choose to connect (for example Slack, Notion or Zapier), which receives form responses at your direction.

Except for the AI features and Khata’s voice add described in Section 3, none of these providers receive your uploaded file content. If any provider is located outside your country, your data may be transferred internationally. We take reasonable steps to keep it protected, for example by choosing established providers and relying on the transfer safeguards they offer (such as standard contractual clauses in their data processing terms, where applicable). Once we have a registered legal entity we will review and formalise these safeguards.

We may also disclose data where required by law, for example in response to a lawful order from an Indian court or government agency, or to protect the rights and safety of users and of Sarvimo. If Sarvimo is ever sold or reorganised, personal data may move to the new owner, who must honour this policy.

Data in a form response is visible to the form owner and anyone the owner invites as a collaborator. Booking details are shared between the host and the guest. Poll and bio content is visible to anyone with its link.

We follow reasonable security practices appropriate to a service of our size. Data is encrypted in transit over HTTPS. Passwords are stored only as salted hashes. Connector tokens are stored encrypted. Our database is set up so your data is read and written through our server, not directly from the browser. No system is perfectly secure, so please use a strong, unique password.

Sensitive personal data. Under India’s Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, passwords and payment-instrument details count as sensitive personal data. We hold passwords only as one-way hashes and never see card or bank details, which are handled by Dodo Payments. By giving us such information you consent to its handling as described in this policy. You may choose not to provide it, or withdraw consent by writing to the contact in Section 14, but we may then be unable to provide the features that need it.

If a personal data breach affects you, we will notify affected users and the relevant authorities (for example the Data Protection Board of India, CERT-In or an EU or UK regulator) as required by applicable law, without undue delay.

• File content: not retained, discarded immediately after processing.
• Account data: kept while your account is active and deleted on request.
• Legal exceptions: we may keep limited data for longer where the law requires it or where needed to establish, exercise or defend legal claims, and only for as long as necessary.
• Forms, responses, bookings, polls and bio pages: kept until you delete them or your account is deleted. If a paid plan ends, forms above the free limit are locked and can still be viewed and exported for 30 days, after which locked forms are deleted.
• Form drop-off analytics: 90 days.
• Telegram link: until you disconnect (send /logout or use the account page) or delete your account. Connect codes expire after 10 minutes.
• Whiteboard connection messages: about three hours.
• Hisaab records: your customers, dues, invoices and receipts are kept until you delete them, or until you ask us to delete your account data.
• Khata records: kept until you delete them, or until the group or your account is deleted. Recent group events used for live updates are removed after about 14 days. Phone notification addresses are kept until you turn notifications off or remove the app.
• Technical and log data: kept briefly for security, then rotated out.
• Payment records: retained by our payment processor per their policy and applicable financial record-keeping law.

Depending on where you live, you have some or all of the following rights. You can also delete forms, bookings, polls and bio pages yourself and disconnect connectors and the Telegram bot at any time.

• India (DPDP Act). To get a summary of the personal data we process and how; to correct, complete or update it; to have it erased (unless we must keep it by law); to have your grievance redressed (Section 14); and to nominate another person to exercise these rights if you die or become unable to.
• EU and UK (GDPR). To access, correct, erase, restrict and receive a portable copy of your data, to object to processing based on legitimate interests, and to withdraw consent at any time (which does not affect processing done before). You may complain to your local data protection authority.
• California and similar US state laws, where they apply. To know what we hold, to have it deleted or corrected, and to be free from discrimination for using these rights. We do not sell or share personal information as described in Section 6, so there is nothing to opt out of. You can use an authorised agent, and we may need to verify your identity.

To exercise any right, email privacy@sarvimo.com from your registered email address. We will verify it is you and aim to respond within 30 days, and sooner where we can. There is no fee, unless requests are clearly excessive. If you are not satisfied after using the process in Section 14, you may complain to the Data Protection Board of India (once operational), an EU or UK data protection authority, or your state Attorney General in the US.

If you submitted a response to someone else’s form, or booked with someone, they control that data. Please contact them first. We can help if you cannot reach them.

Sarvimo accounts and the apps that need them are for people aged 13 or over. We do not allow accounts for anyone under 13. You can use every PDF and image tool without an account at any age. If you are under 18, you may create an account only with the permission of your parent or guardian.

When someone creates an account (and once for existing accounts) we ask them to confirm their age band and to confirm that permission where it applies, and we keep a record of that confirmation, the date and the version of these documents. A teenager may give a parent or guardian’s email address. If they do, and the account’s own email is verified, we send that address a single notice explaining that the account was opened and how to have it deleted. This is a self-declaration and a courtesy notice, not a full identity check. If you are a parent or guardian and did not agree to an account, contact us and we will delete it. We do not track or monitor the behaviour of children or direct advertising at them. If we learn that an account belongs to someone under 13, we delete it.

People who fill in a form, vote in a poll or book with a host do not sign up with us. The form owner or host is responsible for not collecting data from children unless the law allows it and any required parental consent has been obtained.

Sarvimo is operated from India and uses providers in several countries. By using the service you understand your data may be processed outside your country, subject to Section 6.

We update this page as Sarvimo’s features change. Material changes are reflected in the “last updated” date above, and we will make reasonable efforts to notify signed-in users of significant changes.

In line with the Information Technology Act, 2000, the SPDI Rules 2011, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act, our Grievance Officer is:

• Name: Yash Maheshwari, founder and Grievance Officer
• Email for grievances and complaints: support@sarvimo.com
• Email for privacy and data requests: privacy@sarvimo.com (both addresses reach the same person)
• Postal address: will be published here once our business registration is complete.

Please write to us about any complaint concerning your personal data, this policy, content on Sarvimo, or the exercise of your rights, and include your registered email address and enough detail to identify the issue. We will acknowledge your complaint within 24 hours and aim to resolve it within 15 days. If a privacy or data rights request needs longer, we will tell you why and will respond no later than 30 days from receipt. If you are still not satisfied, you may escalate to the Data Protection Board of India (once it is operational and after using this process) or to the authority named in Section 10 for your region. Complaints about content are handled as described in Section 11 of our Terms and Conditions.