Last updated 19 October 2026

Privacy policy

Short version: we collect what we need to run Qelvra, we use your Google data only to give you SEO insights, we never sell your data, and you can ask us to delete it at any time.

1. Who we are

Qelvra ("Qelvra", "we", "us") is operated by [Registered business name], having its registered office at [Registered address], India. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for personal data you share with us through qelvra.in and the Qelvra app.

2. What we collect

Account details — name, email address and profile photo from the sign-in method you choose.
Website and business details — the domains you add, your industry, target markets and any context you give the agent.
Connected-service data — if you connect Google Search Console, Google Analytics, WordPress or Shopify, we access the data those services expose under the permissions you grant (for example search queries, clicks, impressions and page lists).
Conversations — messages you send to the agent and the answers, reports and drafts it produces.
Billing details — plan, invoices, GSTIN (if provided) and payment status. Card, UPI and bank details are collected and stored by our payment processor, Razorpay; we never see or store full card numbers.
Usage and device data — pages visited, features used, IP address, browser type and error logs, used to keep the service secure and working.

3. Why we use it

We process personal data only for these purposes, on the basis of your consent or for legitimate uses permitted by the DPDP Act:

To create and run your account and provide the Qelvra service.
To analyse your sites and generate recommendations, content and reports you request.
To process payments, issue GST invoices and meet tax and accounting obligations.
To send service emails (such as weekly reports and billing notices). Marketing emails are opt-in and you can unsubscribe at any time.
To prevent fraud and abuse, and to comply with law.

4. Google user data

Qelvra's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we request read-only access to Search Console and Analytics; use that data only to provide and improve the insights you see in Qelvra; do not sell it, use it for advertising, or allow humans to read it except with your permission, for security purposes or where required by law; and do not use it to train general-purpose AI models.

5. Who we share it with

We do not sell your personal data. We share it only with service providers that help us run Qelvra, under contracts that require them to protect it:

Cloud hosting and database providers.
AI model providers, which process your prompts to generate answers and are contractually barred from training on them.
SEO data providers, which receive domains and keywords (not your personal details) to return search data.
Razorpay, for payments.
Email delivery and error-monitoring providers.

Some providers may process data outside India. Where they do, we transfer data only to countries not restricted by the Government of India under Section 16 of the DPDP Act, and with appropriate safeguards.

6. How long we keep it

We keep your data while your account is active. If you delete your account, we erase your personal data within 30 days, except billing records, which we are required to keep for up to 8 years under Indian tax law. Disconnecting a Google account immediately revokes our access and deletes stored tokens.

7. Your rights

Under the DPDP Act you have the right to:

Access a summary of the personal data we hold about you and how it is processed.
Correct, complete or update your personal data.
Have your personal data erased, and withdraw consent at any time (this won't affect processing done before withdrawal).
Nominate another person to exercise these rights in the event of your death or incapacity.
Seek grievance redressal from us, and then from the Data Protection Board of India.

To exercise any right, email hello@qelvra.in. We respond within 30 days.

8. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made under it, and the DPDP Act, our Grievance Officer is [Grievance Officer name], reachable at hello@qelvra.in or by post at [Registered address]. We acknowledge complaints within 24 hours and resolve them within 15 days.

9. Security

We use encryption in transit (TLS) and at rest for sensitive data such as OAuth tokens and API keys, role-based access controls, and regular reviews of our providers. No system is perfectly secure; if a breach affects your personal data, we will notify you and the Data Protection Board as the law requires.

10. Cookies

We use essential cookies to keep you signed in and remember preferences such as sound settings. We use privacy-friendly analytics to understand how the site is used. We do not use third-party advertising cookies.

11. Children

Qelvra is a business tool and is not meant for anyone under 18. We do not knowingly process children's personal data.

12. Changes

If we make material changes we will email you and update the date above before they take effect. Questions? Write to hello@qelvra.in.