Privacy Policy

Who is responsible

Kaivalya Innovations Private Limited (Saskaware) is the data controller for account and workspace data. For payment processing, our merchant of record Paddle acts as an independent controller of the billing data it collects at checkout — we never receive or store card numbers. Contact for all privacy matters: sales@saskaware.com.

Data we collect

• Account data: name, email address and organization membership, provided through our authentication provider (Clerk) when you sign up or are invited to an organization.
• Operational data you enter: locations, item catalogs, truck types, orders, drivers (names and optionally phone numbers you add to your roster), plans and dispatch records. Driver contact details you enter are personal data you control; only add information you are entitled to share.
• Billing data: subscription tier, invoices and payment status from Paddle. Card details go directly to Paddle and never touch our servers.
• Technical data: server logs (IP address, request identifiers, timestamps) kept for security and debugging, and error diagnostics via Sentry when enabled.
• Anonymous tool usage: the free calculators can be used without an account; requests are rate-limited by IP address and inputs are not linked to a person.

Why we process it (legal bases)

• To provide the Service you contracted for — accounts, planning, dispatch, API access (performance of a contract).
• To meter usage, prevent abuse and secure the Service — rate limits, audit logs (legitimate interest).
• To bill subscriptions through our merchant of record (performance of a contract; Paddle's own basis for its processing).
• To answer support requests you send us (legitimate interest / consent).
• We do not sell personal data, run third-party advertising, or use your operational data to train models.

Cookies

The dashboard uses strictly necessary cookies only: authentication session cookies set by Clerk. We do not set advertising or cross-site tracking cookies, which is why the Service shows no cookie-consent banner.

Processors and subprocessors

Each provider processes only what its function requires, under its own data-processing agreement with us.

• Clerk (authentication and organization management)
• Paddle (merchant of record: checkout, invoicing, sales tax/VAT)
• Amazon Web Services (application hosting and database)
• Vercel (website and dashboard hosting/CDN)
• Sentry (error monitoring, when enabled)

International transfers

The Service is operated from India with infrastructure in the regions listed above; using it may involve transfers of personal data between jurisdictions. Where GDPR applies, transfers rely on adequacy decisions or Standard Contractual Clauses maintained by our subprocessors.

Retention

Workspace data is kept while your organization has an account, because plans double as your operational audit log. If you delete your organization or ask us to, we delete or irreversibly anonymize personal data within 30 days, except records we must keep for tax or legal compliance (kept by Paddle and/or us for the statutory period).

Your rights

Depending on your jurisdiction you may have rights of access, correction, deletion, portability, restriction and objection, the right to withdraw consent, and the right to complain to a supervisory authority. California residents additionally have the rights to know, delete and opt out of "sale or sharing" (we do neither). Indian users may exercise the rights provided by the DPDP Act, including grievance redressal. To exercise any right, email sales@saskaware.com; we respond within 30 days.

Security

All traffic is encrypted in transit (TLS). API keys are stored only as salted hashes and shown once. Access to production systems is restricted and logged. No method of storage is 100% secure; if a breach affects your data we will notify you and the relevant authority as required by law.

Children

The Service is for business use and not directed at children under 16; we do not knowingly collect their data.

Changes

We will post any changes to this policy here and update the date above. Material changes will be announced in the dashboard or by email before they take effect.