Last updated: see version history maintained by Tompt Technology LLP. This document has not been reviewed by a lawyer and is published for owner review.
1. Information we collect about you
- Account data: name, email address, a securely hashed password, email confirmation status and account creation date.
- Search history: the mode, query text and filters you submit, and the results returned, so you can review past searches.
- Saved results and lists: results you save, including the public source information shown, and the names of your lists.
- Usage records: monthly search counts used to enforce plan limits.
- Billing records: plan, amount, currency, Razorpay order and payment identifiers, and payment status. We do not receive or store card numbers, UPI PINs or bank credentials.
- Contact submissions: the name, email, subject and message you send, plus notification delivery status.
- Security and operational logs: sign-in events, password changes, rate-limit counters keyed by hashed IP address or account, and error records. We do not log passwords or API secrets.
2. Information about people in search results
Results contain information that third parties have published on public web pages. We retrieve it at the time of your search and store it only within your search history and saved items. We do not build profiles of people across users, and we do not infer sensitive characteristics. If you believe a result about you is inaccurate, contact us and we will review it; corrections to the original page must be made with its publisher.
3. How we use information
To provide and secure the service, authenticate you, enforce plan limits, process payments, respond to messages, send essential account emails (confirmation and password reset), and diagnose failures. We do not sell personal data and do not use it for advertising.
4. Cookies and sessions
We use one essential, httpOnly session cookie to keep you signed in. We do not use advertising or third-party analytics cookies. The Razorpay checkout may set its own cookies when you open it.
5. Service providers
- Brave Search API — receives search queries we construct from your criteria.
- Anthropic Claude via the Emergent LLM integration — receives public source snippets to generate summaries and related-role suggestions on eligible plans.
- Razorpay — processes payments.
- Resend via Emergent managed email — delivers account and contact notification emails.
- Our hosting and database provider — stores application data.
6. Retention and deletion
Account data, search history, saved results and lists are kept until you delete them or your account. You can delete individual searches or all history at any time, and delete your account from Settings, which removes your account, history, saved items and lists. Billing records are retained as required for accounting and tax obligations. Cached search provider responses expire automatically within hours; rate-limit counters expire automatically.
7. Security
Passwords are hashed with bcrypt. Sessions use signed, httpOnly cookies over HTTPS. Secret keys remain on our servers. Access to each private record is restricted to its owner, and administrative access requires an authorised, confirmed email address. No system is perfectly secure, and we cannot guarantee absolute security.
8. Your rights
Depending on where you live, including under India’s Digital Personal Data Protection Act, 2023 and, where applicable, the GDPR, you may have rights to access, correct, delete or obtain a copy of your personal data, and to withdraw consent or object to processing. Contact us to exercise these rights. Grievance officer: [Owner to confirm: name and contact of grievance officer].
9. International transfers
Our service providers may process data outside your country. We rely on their contractual safeguards where required.
10. Changes
We will update this policy when our practices change and indicate material changes in the service.
Contact
Anvaya Connect is a product of Tompt Technology LLP. Questions about this document can be sent through our Contact Us page. Registered office: [Owner to confirm: registered office address].