Privacy Policy

Information you give us:

• Account information: your name, email address and password. We never store your password itself, only a one-way hash of it. If you sign in with Google, we receive your name, email address and profile photo from Google.
• Gmail sender: to send emails from your own Gmail we need an app password. If you choose "Remember app password" we store it encrypted. If you do not, it is used only for that send and is not stored.
• Recipient files and messages: the file with your recipients, your subject, message and attachments. We use them only to send your emails and do not keep them afterwards (see Data retention).
• Payments: when you buy a pack, payment is taken by Razorpay. We never see or store your card or bank details. We keep the payment ID, amount, pack and date.
• Messages to us: anything you send to our support channels.

• Login history: the date and method (email or Google) of your sign-ins.
• Tool usage: which tools you used and when, for example "sent 12 emails, 1 failed". This shows in your dashboard and is used to count your free emails.
• Page time: how long each page (Dashboard, Profile, Bulk Mail) is open on your screen. We store only the page name and the number of seconds, never what is on the page. It helps us see which parts of KaruviHub are useful.
• Technical data: basic request and error information that helps us keep the service running and secure.
• Cookies: one sign-in cookie. See our Cookie Policy.

• To run your account and sign you in.
• To send the emails you ask us to send, and to show you the result.
• To send you account emails such as email verification, password reset and account notices.
• To count your free email allowance and, later, your purchased credits.
• To keep KaruviHub safe, prevent abuse and follow the law.

Emails you send with KaruviHub are delivered through your own Gmail account, so they appear in your Sent folder and recipients see your Gmail address. Google's terms and sending limits apply to those emails.

We do not read your Gmail inbox. We only use your app password to send the emails you ask us to send.

We protect your data with measures such as:

• Passwords are stored as one-way hashes.
• Saved Gmail app passwords are encrypted before they are stored, and are never shown back to you or to our admins.
• Connections to KaruviHub are encrypted in transit (HTTPS) in production.
• Sign-in sessions use short-lived tokens, and all your sessions end when you reset your password.
• Admin access is limited to approved staff, and every admin action is logged.

No system is completely immune to breaches. Use a strong, unique password and keep your Google account secure. You can revoke a KaruviHub app password at any time from your Google Account.

• Account data: kept while your account is active. When you delete your account we remove your profile, login history, tool usage, saved Gmail app password and any pending verification or reset links.
• Recipient lists, messages and attachments: not stored. They are held in memory only while your send is running.
• Tool usage: removed automatically after 90 days.
• Page time: removed automatically after 180 days.
• Failed-delivery details: kept for about one hour after a send so you can download them.
• Payment records: kept even after you delete your account, as long as accounting and tax rules require.
• Admin audit logs: records of actions taken by our admins may be kept for security and accountability.

We do not sell your data. We share information only in these cases:

• Service providers: Google (sign-in with Google and sending through your Gmail), Razorpay (payments), Resend (our account emails such as verification and password reset) and MongoDB Atlas (database hosting). They only get what they need to do their job.
• Legal requirements: when the law or a valid legal request requires it.
• Business transfers: if KaruviHub is merged with or acquired by another company, with appropriate safeguards.

Depending on where you live, you may have the right to:

• Access: see the personal data we hold about you. Much of it is on your Profile page.
• Correction: update your name on your Profile page, or ask us to fix anything else.
• Deletion: delete your account yourself from Profile, Danger zone.
• Portability: ask us for a copy of your data.

To use any of these rights, write to support@karuvihub.com.

KaruviHub may link to other websites, such as Google's help pages. We are not responsible for their privacy practices, so please read their policies.

KaruviHub is not meant for anyone under 13 and we do not knowingly collect data from children. If you think a child has given us information, contact us at support@karuvihub.com and we will remove it.

We may update this policy when our practices or the law change. For significant changes we will email you or show a notice on the website. If you keep using KaruviHub after a change, you accept the updated policy.

Questions about this page? We are here to help.

Email: support@karuvihub.com