Privacy Policy

1. Who we are

SarvamSync ("SarvamSync", "we", "our", or "us") is an AI assistant delivered entirely through WhatsApp. It is operated by SarvamSync and accessible at sarvamsync.com.

SarvamSync helps you manage your Google Calendar, track expenses, capture notes, and more — all inside a single WhatsApp thread. This Privacy Policy explains what personal data we collect when you use SarvamSync and how we handle it.

2. What we collect

Information you give us directly

• Your WhatsApp phone number (provided automatically when you message us)
• Your email address (collected during signup to link your Google account)
• Messages you send to SarvamSync — text, voice-note transcriptions, expense entries, task descriptions, and notes

Information from Google (with your explicit consent)

• Google account email address
• Google Calendar events — only read and written with your permission via OAuth
• OAuth tokens (access token + refresh token) required to act on your calendar on your behalf

Information we do NOT collect

• Credit or debit card numbers
• Bank account details
• Location (beyond what you explicitly share inside a message)
• Contacts or any data from your phone outside WhatsApp

3. How we use it

We use the data above solely to operate SarvamSync's features:

• Identifying your account and matching WhatsApp messages to your profile
• Creating, reading, updating, and deleting Google Calendar events on your behalf
• Generating AI responses using your conversation history for context
• Logging expenses and tasks you dictate so you can query them later
• Sending you confirmations and nudges via WhatsApp

We do not sell your data to any third party. We do not use your data for advertising. We do not train public AI models on your personal messages without separate explicit consent.

4. Third-party services

SarvamSync relies on the following third-party platforms:

5. Data storage & security

All data is stored in MongoDB Atlas with encryption at rest and in transit (TLS 1.2+). Google OAuth tokens are stored encrypted and are only decrypted server-side when SarvamSync makes a Calendar API call on your behalf.

We apply the principle of least privilege: our server only requests the Google Calendar and email scopes — nothing else.

While we take reasonable technical precautions, no system is 100% secure. Please message us immediately if you suspect unauthorised access to your account.

6. Data retention

• Account data & Google tokens — retained while your account is active. Deleted within 30 days of an account deletion request.
• Conversation history — retained for up to 12 months to provide context-aware responses, then automatically purged.
• Expense & note records — retained until you delete them or close your account.

7. Your rights

Depending on your jurisdiction you may have the right to access, correct, port, or delete your personal data. To exercise any of these rights:

• Message SarvamSync on WhatsApp and type "Delete my account" — we will confirm and permanently erase all data within 30 days.
• Revoke Google Calendar access at any time in your Google Account permissions. Revoking access does not delete your SarvamSync account data.
• Email us directly at kalkiaerospace@gmail.com for any other data request.

8. Children

SarvamSync is not directed at children under 13 (or under 16 in the EU/UK). We do not knowingly collect data from minors. If you believe a minor has used SarvamSync, please contact us and we will delete the data promptly.

9. Policy changes

We may update this policy as SarvamSync grows. When we make material changes we will notify you via WhatsApp at least 7 days before the change takes effect. Continued use after that date constitutes acceptance of the revised policy.

10. Contact

Questions about this policy? Reach us at: