How Sarthi uses your data

Who is responsible

Sarthi is run by Bookpilot Technologies Pvt Ltd, which is responsible for your data. Sarthi is for adults (18 and over).

What we read

When you sign in with Google you let Sarthi read your Gmail. It cannot send, change or delete anything in it.

It reads each new email as it arrives. When you first connect, it also reads back the last 60 days of your mail, at most 3,000 emails, the same way.

Each email is first checked by fixed rules, which are designed to drop one-time codes, password and security emails before any model reads them. Nothing of the emails they drop is kept.

Every other email, personal emails included, is read by an AI model to find bills, insurance renewals and subscriptions, and who they are for.

When we send your digest, we look up the sender, date and folder of the email each item came from, so you can tell where it came from. We do not keep them.

What we keep

What the model finds in your emails. For bills, renewals and subscriptions: who to pay, how much, by when, the pay link or UPI ID in the email, account and policy numbers, and the names of insured people. The model also records orders (shop, items, delivery date), bookings (service, time, address), service contacts (name, phone, email) and bank or card notices (bank, amount, the other party, date). Each item keeps a reference to the email it came from.

Your email address and Google account ID, and a Google refresh token, encrypted, so we can keep reading new mail.

During this private test Sarthi makes no reminders or task log for you: it makes them only for the founder's own household.

Our sign-in provider (Supabase Auth, in the same database in Mumbai) keeps your email address, when you signed in and the IP address you signed in from.

Your time zone, taken from your browser when you sign up and changeable on your account page, so your digest comes in your morning.

The name the person who invited you gave your invite; which digests we sent you; your answers to them (confirm, not mine, this is wrong); your consent; and any request to delete your data.

What we never keep or do

We never keep your emails or their attachments, and never open password-protected files.

We never ask for or keep passwords, one-time codes or PINs. A statement can show part of a card or account number; we are working to keep none of its digits.

Sarthi never pays anything and never sends email as you. Your digest says where to pay, and you pay in your own bank app or on the company's own website.

Where your data is

Stored in Mumbai, India: our database (Supabase, on AWS ap-south-1).

Read in Mumbai: the AI model (Google Vertex AI, asia-south1).

Your digest, and the one-line note if we lose access to your Gmail, are sent from Mumbai (Amazon SES, ap-south-1), and the app runs in Mumbai (Vercel, bom1). Our hosting provider keeps technical logs, such as IP addresses and page addresses, which may be stored outside India.

Our background job service (Inngest) runs outside India, in the EU. It receives ids, and anything else only encrypted with a key that Sarthi holds and Inngest never has.

No training

Your data is never used to train or improve any AI model, ours or a provider’s. The model providers we use do not train on what we send them.

Who can see it

You. Items we are unsure of come to you to check, not to us.

The founder holds the keys that run Sarthi: the database key, and the key that unlocks the stored Gmail access. With them the founder could technically read your items and your mailbox. They are used only to keep the service running, and the founder's review screen shows no friend's items or mail.

We do not sell your data, show you ads, or share it with anyone except the providers above, who process it only for us.

How long, and deleting it

We keep your data while you use Sarthi.

Use "Delete my data" in any digest or on your account page. We stop reading your mail at once, delete our access to your Gmail and stop your digests. Seven days later, and always within 30 days, we delete your household's data from our database, and your sign-in with us unless you are also part of another household. Copies that are not deleted on request expire on their own within 7 days after that: database backups, encrypted copies in our background job service's history, and our hosting provider's technical logs. After that, we keep only a record, with no personal details, that your household's data was deleted and when.

Withdrawing your consent works the same way: use "Delete my data". You can also remove our access at any time at myaccount.google.com/permissions.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask to see, correct or erase your data, withdraw your consent as easily as you gave it, name someone to exercise your rights if you die or cannot, and have a complaint handled by us within 30 days. If we do not resolve it, you can complain to the Data Protection Board of India.

Contact: admin@flowpointconsulting.com

Google user data

Sarthi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Changes

If this notice changes in a way that matters, Sarthi stops sending your digest until you have read the new one and agreed to it, at your next sign-in.