Privacy Policy
Effective 1 September 2026. This policy applies to chavery.in and to the Chavery Research Companion application.
Chavery is owned and operated by Nidz&Co, a proprietorship with its registered and operational address at [Street address — to be confirmed], Chennai, Tamil Nadu [PIN — to be confirmed], India (“we”, “us”, “our”). This policy explains what personal data we collect, why, how long we keep it, and the rights you have over it.
1. Data we collect
1.1 Data you give us
- Account data. Your email address. We sign you in with a one-time link sent to that address, so we do not ask for or store a password.
- Profile data. Your name, institution, department, degree and registration number, where you choose to enter them for your dissertation title page.
- Research data. Everything you enter into a research project: your research question, objectives, study design, variables, master chart data, analyses, written sections and references.
- Correspondence. What you write to us when you contact support.
1.2 Data we collect automatically
- Technical data. IP address, browser type, device type, and the pages you visited, collected in server logs for security and to diagnose faults.
- Usage data. Which features you used and when, so we can see what is working.
1.3 Data we receive from others
- Payment confirmation. Razorpay tells us that a payment succeeded or failed, its amount, its reference and the payment method type. We never receive your card number, CVV, UPI PIN or net-banking credentials.
- Institutional enrolment. Where your institution buys a licence for you, it tells us your name, email and department to allocate that licence.
2. Your research data
Your research data is yours. The following commitments are absolute and are built into how the system works, not only into this policy.
- We do not use your research to train anything. Chavery performs no generative AI, and your data is not used to build or improve any model, by us or by anyone else.
- We do not send your research to any external AI or language-model service. All statistical computation, writing checks and document generation happen on our own systems.
- We do not sell your data, ever, to anyone.
- We do not publish or share your unpublished research.
- We do not silently change your research data. Where a value is corrected, the change is yours to make and is recorded with the reason you gave.
2.1 Who else can see your project
Access is enforced in the database itself, not only in the interface.
- You see and control everything in your project.
- Your assigned guide or supervisor sees your project in full so they can supervise it, and can comment on, approve or send back your written sections. They cannot alter your data or your text.
- Your institution’s administrator sees administrative records — membership, departments and licence use — and does not see your research data. Where an institution requires research-data access, it must be granted explicitly and is recorded.
- Other faculty or students at your institution see nothing of your project unless you share it with them.
2.2 If your research involves human participants
You are the data controller for any personal data about your research participants. Do not enter names, hospital numbers, contact details or any other direct identifier into Chavery. Use coded participant identifiers and keep the key that links a code to a person separately, as your ethics committee requires. We provide the tools; responsibility for ethical approval, informed consent and participant confidentiality remains yours.
3. Why we process your data
| Purpose | Data used | Basis |
|---|---|---|
| Providing the service you bought | Account, profile, research data | Performance of our contract with you |
| Signing you in | Email address | Performance of our contract with you |
| Taking payment and issuing an invoice | Account data, payment confirmation | Contract and legal obligation |
| Support | Account data, correspondence | Contract and our legitimate interest |
| Security, fraud prevention and fault diagnosis | Technical data | Our legitimate interest in a secure service |
| Meeting tax and accounting obligations | Transaction records | Legal obligation |
4. Who we share data with
We share personal data only with the service providers below, only to the extent each needs it, and never for their own marketing.
| Provider | Purpose | What they receive |
|---|---|---|
| Razorpay Software Private Limited | Payment processing | Name, email, amount and order reference. Card and UPI details go directly to Razorpay and never reach us. |
| Supabase | Database and authentication hosting | Account and research data, stored encrypted |
| Vercel | Website and application hosting | Technical data in server logs |
We may also disclose data where the law requires it, where a court or regulator orders it, or to establish or defend a legal claim. If we are ever compelled to disclose your data we will tell you, unless we are legally prevented from doing so.
5. Where your data is stored
Your account and research data are stored in a data centre in India (Mumbai region). Some of our service providers process limited technical data outside India. Where that happens, it is under contractual terms requiring a standard of protection equivalent to that described in this policy.
6. How long we keep it
| Data | Kept for |
|---|---|
| Research project data | While your account is open, and for 90 days after you close it, so accidental deletion can be undone |
| Account data | While your account is open, then deleted within 90 days |
| Payment and invoice records | Eight years, as required by Indian tax and company law. These cannot be deleted on request. |
| Server logs | Up to 12 months |
| Support correspondence | Three years |
7. Your rights
Under the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, you may:
- Access the personal data we hold about you;
- Correct anything inaccurate or incomplete;
- Export your research project in a usable format;
- Delete your account and research data, subject to the records we must keep by law;
- Withdraw consent where we relied on it;
- Nominate another person to exercise these rights on your behalf in the event of your death or incapacity;
- Complain to us, and to the Data Protection Board of India if you are not satisfied with our response.
Write to support@chavery.in. We respond within two working days and complete the request within one month.
8. Security
- All traffic is encrypted in transit with TLS.
- Data is encrypted at rest.
- Access is enforced by row-level security in the database itself, so a fault in the interface cannot expose another researcher’s project.
- Sign-in is by one-time email link, so there is no password of yours for us to lose.
- Our payment credentials are never held in the browser, and payment confirmation is verified server-to-server with Razorpay rather than trusted from the browser.
No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and the Data Protection Board of India as the law requires.
9. Cookies
We use only cookies and local storage that are strictly necessary: one to keep you signed in, and one to remember interface preferences such as which tab you last opened. We do not use advertising cookies, and we do not track you across other websites. Because none of our cookies are for advertising or profiling, no consent banner is required.
10. Children
Chavery is for postgraduate researchers and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, write to us and we will delete it.
11. Changes to this policy
If we change this policy we will post the new version here and update the effective date. Where a change materially affects your rights we will email you at least 30 days before it takes effect.
12. Contact and grievances
Write to support@chavery.in for any privacy question. Formal complaints go to our Grievance Officer at grievance@chavery.in; full details are on the Contact us page.