Privacy Policy

1. Who we are

Torvath is run by Torvath Technologies Private Limited, Flat No. 1754, FF, Type-A, HBC, Sector-9, Bahadurgarh, District Jhajjar, Haryana 124507, India.

2. Your organisation's mail and our role

Torvath is used by organisations. The mail, files and calendars in an organisation's account belong to that organisation, and its admins decide who can use them. We look after that content on the organisation's behalf and only as this policy and our Terms describe.

If you have a mailbox at an organisation that uses Torvath, its admin is your first contact for questions about your mailbox.

3. What we keep

We keep only what the service needs:

• Account details: names, email addresses, your organisation's name and domains, and who is an admin. Passwords are never stored, only a salted hash of them.
• Your content: mail and attachments, Drive files and folders, calendar events and invitations, and contacts.
• AI writing notes: notes about how you write that you typed or approved. They are never taken from mail you received.
• Sign-in records: your sessions and the phones signed in to your account, so you can see and remove them.
• Email API records: emails sent through the API, their recipients and what happened to each, the events your organisation turned on, and webhook deliveries. Opens and clicks are recorded only when the sender turns on tracking for an email.
• Usage and billing: storage used, emails sent, AI actions used, bills and payments. Card and bank details are entered on our payment provider's pages; we do not see or store them.

4. How we use it

We use this to run Torvath: to deliver and receive mail, store your files, filter spam, make your mail searchable, keep accounts secure, bill you, and help when you contact us.

5. What we never do

• We don't show ads, and we don't sell or rent your data to anyone.
• We don't use your mail or files to train AI models.
• We don't read your mail, except when you ask us to help with a problem, or when the law requires it.
• Images from senders stay blocked until you allow them, so senders can't tell when you read their mail.

6. Services that help us run Torvath

These services process data for us, only to run Torvath:

• Cloudflare: runs the app and stores your mail, files and databases.
• Amazon Web Services: runs our own mail servers, which receive mail for your domain and send some outgoing mail, and sends the rest through Amazon SES.
• OpenAI: writes AI summaries and draft replies. Only the email you ask about is sent, and only when someone asks.
• Cashfree: takes payments and runs autopay.
• Torvath Ledger: our invoicing service, which makes your invoices and keeps the accounts.

7. Where your data is kept

[WHERE DATA IS STORED, FOR EXAMPLE THE CLOUDFLARE AND AWS REGIONS USED]. Some of these services may process data outside India.

8. How long we keep it

• Mail in Trash is deleted after 30 days.
• When an admin deletes a person, their mailbox can be restored for 30 days, then it is deleted.
• Backup copies are removed within a further 30 days.
• Email API events wait in your queue for 7 days, or 30 days on Business.
• The phone app keeps the last 30 days of changes on your phone.
• If your organisation closes its account, you can export everything first. We delete the data within 30 days after closure.
• We keep bills and payment records for as long as Indian tax and accounting law requires.

We never delete mail because a bill wasn't paid.

9. Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask to see the personal data we hold about you, to correct it, or to delete it, and you can raise a complaint. Your organisation's admins can export any mailbox at any time as .eml or mbox files.

Grievance officer: Yogita (Director), grievance@torvathmail.com. We reply within 10 days.

10. Security

Connections to Torvath use HTTPS. Passwords are stored only as salted hashes. Mail you send is signed for your domain with DKIM. You can see the phones signed in to your account and remove any of them.

11. Changes and contact

We will email admins at least 30 days before any important change to this policy takes effect.

Questions: support@torvathmail.com · Contact us