Privacy Policy

• Early-access list: if you join, we keep your email address, when you joined and the page you joined from. We use them only to email you about the Pravex launch and product updates. You can unsubscribe at any time.
• Analytics: we use PostHog, hosted in the EU, to understand how the Site is used. Analytics cookies and similar storage are used only if you click Accept. Otherwise we may count visits anonymously, without storing analytics data on your device. You can change your choice at any time with Cookie settings in the footer.
• Hosting: our host, Cloudflare, processes technical data such as your IP address to deliver and protect the Site.
• No selling: we do not sell your personal data or use it for advertising.

The Site is run by Pravex, operated by Saurav Wagh, India ("Pravex", "we", "us" or "our"). Saurav Wagh is the data fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the controller under the EU and UK General Data Protection Regulation ("GDPR"), where those laws apply.

Website: https://pravex.app. Contact for anything about your personal data: pravex@pravex.app.

2.1 Early-access list

• What: your email address, the date and time you joined, and the page you joined from.
• Why: to email you about the Pravex launch and product updates, and to keep a record of your consent.
• Basis: your consent (DPDP Act section 6; GDPR Article 6(1)(a)). We keep the date, time and page because we must be able to show that you consented (DPDP Act section 6(10); GDPR Article 7(1)).

2.2 Emails you send us

• What: your email address, any name you give, and what you write.
• Why: to read and reply to your message and keep a record of it.
• Basis: you gave it to us for this purpose (DPDP Act section 7(a)); our legitimate interest in answering you (GDPR Article 6(1)(f)).

2.3 Analytics without cookies

• What: pages viewed, referrer and campaign (UTM) tags, time on page, scroll depth, browser and device type, and approximate location (such as country), which may be derived from your IP address. To count unique visitors without storing analytics data on your device, PostHog calculates a visitor hash on its own servers from your IP address, browser details and a random value that changes every day.
• When: while you have not accepted analytics cookies, including after you decline them.
• Why: to count visits and understand, in aggregate, which pages and sources are useful.
• Basis: our legitimate interest in understanding how the Site is used (GDPR Article 6(1)(f)). This mode stores no analytics data on your device.

2.4 Analytics with cookies (only if you accept)

• What: the data in 2.3, plus a random visitor ID and session ID stored in your browser, which let PostHog recognise returning visits and measure sessions over time. If we turn on session replay, PostHog also records how pages are used, such as clicks, scrolling and mouse movement, with everything typed into form fields masked.
• Why: to understand how people use the Site over time and to improve it.
• Basis: your consent (DPDP Act section 6; GDPR Article 6(1)(a); the ePrivacy rules on cookies and similar storage).

2.5 Technical request data

• What: IP address, browser and device details, the page or file requested, the referring page, date and time, and security signals.
• When: on every request to the Site. Cloudflare, our host, processes this data and keeps technical, security and bot-traffic logs.
• Why: to deliver the Site, keep it secure, stop bots and abuse, and fix problems.
• Basis: our legitimate interest in running a secure website (GDPR Article 6(1)(f)) and, where the DPDP Act applies, the uses it permits without separate consent (section 7).

You do not have to give us any personal data. You can read the Site without joining the list or accepting cookies. If you do not join the list, you will not receive our emails.

We do not ask for sensitive personal data such as passwords, financial account or card details, health information or biometric data. Please do not send it to us.

We use only the cookies and browser storage listed below. Analytics cookies and storage are used only after you click Accept on our cookie banner. The others are strictly necessary or stay in your browser, so they do not need your consent.

• ph_<project key>_posthog cookie (PostHog, analytics): holds a random visitor ID and session ID. Set only after you accept. Lasts up to one year (PostHog's default), unless you withdraw consent or clear it sooner.
• PostHog entries in localStorage and sessionStorage (analytics): analytics settings and state, and session replay data if replay is on. Set only after you accept. localStorage entries stay until you withdraw consent or clear them; sessionStorage entries are removed when you close the tab.
• Your cookie choice in localStorage (strictly necessary): when you click Accept or Decline, we store that choice in your browser so that we can respect it without asking on every page. It is not sent to us and stays until you change your choice or clear your browser storage.
• __cf_bm cookie (Cloudflare, security): set only when Cloudflare's bot protection runs, to tell people from bots. It expires after 30 minutes of inactivity.
• cf_clearance cookie (Cloudflare, security): set only after you pass one of Cloudflare's security checks. It lasts for the period set in Cloudflare's security settings.
• Display theme: the Site follows your device's light or dark setting. The theme toggle changes only the page you are viewing and nothing about it is stored.

Analytics requests may be sent through a path on our own domain (pravex.app) that forwards them to PostHog. This does not change what is collected, who receives it, or your choice.

To change or withdraw your choice, use Cookie settings in the footer of any page. After you withdraw consent, analytics cookies and storage are no longer used. You can also delete cookies and site data in your browser settings. Withdrawing consent does not affect analytics collected before, but you can ask us to delete it (see section 9).

• We do not sell or rent your personal data, or share it for anyone else's marketing.
• We do not show ads, use advertising cookies, or track you across other websites.
• We do not send your email address to PostHog or attach it to analytics data.
• We do not make decisions about you by automated means.
• We do not currently track whether you open our emails or click links in them.

• Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA) and its affiliates host the Site, run the sign-up form, store the early-access list in Cloudflare's D1 database and process technical request data, on our behalf. Cloudflare may also process some network and security data for its own purposes, as its own privacy policy describes.
• PostHog, Inc. (USA) provides our analytics on our behalf. We use PostHog Cloud EU, which is hosted in Frankfurt, Germany.
• Email providers that run our mailbox and, when we send updates, deliver our emails, only for those purposes.
• Authorities, courts and professional advisers, where the law requires it, or where needed to establish, exercise or defend legal claims, to enforce our Terms of Use, or to protect the rights, safety or security of anyone, including the Site.
• A successor, if Pravex or the Site is transferred, for example to a company set up to run it. This policy will keep applying to your data unless you are told otherwise.

We are based in India and may access the data from India. Cloudflare runs a global network, so data it processes may be handled in India and in other countries, including the United States and member states of the European Union. PostHog stores analytics data in the EU, and PostHog staff or its subprocessors may access it from other countries. We transfer personal data outside India only as Indian law permits.

Where the EU or UK GDPR applies, our providers' data processing terms offer safeguards for these transfers, such as the European Commission's Standard Contractual Clauses, and both Cloudflare and PostHog state that they participate in the EU-U.S. Data Privacy Framework. India does not have an EU or UK adequacy decision.

• Early-access list: until you unsubscribe, ask us to delete it, or we no longer need it for launch and product updates, whichever comes first. We then delete it within a reasonable time. We may keep a minimal record, such as your email address and the date you unsubscribed, where needed to respect your choice, to show that we complied with the law, or where the law requires records to be kept. Indian rules may require certain personal data and logs of its processing to be kept for at least one year.
• Emails you send us: as long as reasonably needed to deal with your message, keep a record of it and meet legal duties.
• Analytics data, including any session replays: for the retention period configured in our PostHog project, within the limits of PostHog's plans. We may delete it sooner. Cookie lifetimes are listed in section 3.
• Technical request data: kept by Cloudflare for the limited periods set by its own policies for running and securing its network. We keep our own copy only if needed to investigate abuse or a security incident, or where the law requires, and then no longer than necessary.

We use reasonable security practices and procedures suited to the personal data we hold. For example, the Site is served only over encrypted HTTPS connections, and our data is stored with providers that maintain their own security controls. No website, transmission or storage system is completely secure, so we cannot guarantee the security of your data. If a personal data breach affects you, we will notify you and the relevant authorities where the law requires.

Depending on where you live and which law applies, you may have the right to:

• get confirmation of whether we hold your personal data, a copy or summary of it, and information about how we use and share it;
• have it corrected, completed or updated;
• have it erased;
• withdraw your consent at any time;
• object to or restrict our use of it, and receive it in a portable format (under the GDPR);
• nominate someone to exercise your rights if you die or become unable to do so (under the DPDP Act); and
• have a grievance addressed by us, and complain to a regulator (see section 11).

To use any of these rights, email pravex@pravex.app, ideally from the email address concerned. We may ask you to confirm your identity before we act. Analytics data is linked only to a random ID, so to act on a request about it we may need the ID stored in your browser. We will respond within one month of receiving your request. Where the law allows more time for a complex request, we may extend this and will tell you why. Withdrawing consent does not affect processing that took place before you withdrew it.

• Emails: use the unsubscribe link in any of our emails, or email pravex@pravex.app. We then stop emailing you and handle your data as described in section 7.
• Analytics: use Cookie settings in the footer of any page.

Withdrawing consent is as easy as giving it.

Grievance Officer: Saurav Wagh

Email: pravex@pravex.app (please use the subject line "Grievance")

The Grievance Officer will address your grievance within one month of receiving it.

If you are not satisfied, you may complain:

• in India, to the Data Protection Board of India, where the DPDP Act applies, after first using our grievance process as that Act requires;
• in the European Union or European Economic Area, to the data protection authority where you live or work, or where you think the problem happened; or
• in the United Kingdom, to the Information Commissioner's Office (ico.org.uk).

The Site is not meant for anyone under 18. We do not knowingly collect personal data from anyone under 18, and we do not track or target children. If you believe a person under 18 has joined our list, email us and we will delete their data.

The Site links to other websites, and we post on Instagram (@pravex.app). Those services are run by others and have their own privacy policies. If you message or interact with us on Instagram, we see the information Instagram shows us, such as your username and messages, and use it only to reply to you.

Where the DPDP Act requires, you may ask to receive this policy in English or in any language listed in the Eighth Schedule to the Constitution of India.

We may update this policy by posting a new version on this page with a new effective date. If we want to use your personal data for a new purpose that needs your consent, we will ask for it first.

Pravex, operated by Saurav Wagh, India

Email: pravex@pravex.app