Privacy Policy

Last updated: 17 October 2026

Roovy ("Roovy", "we", "us") provides an AI assistant for small businesses that helps manage contacts, reminders, meetings and connected business tools over WhatsApp and the web. This policy explains what data we collect, why, how it is protected, and the choices you have.

1. What we collect

• Account information: your name, email address and password hash when you sign up.
• Business card captures: photos of business cards you send, and the contact details extracted from them (name, company, phone, email, address).
• Contacts data you add: notes, tags, reminders and meetings you create for people in your contact list.
• WhatsApp messages: when you message Roovy's WhatsApp number, we receive and store that conversation so the assistant can respond and keep context.
• Connected account data: if you connect Google, WhatsEase, Krosspost or another business account, we access the data described in Section 3 below, only for the purposes described there.
• Usage and device data: standard web logs (IP address, browser type, pages visited) for security and reliability.
• Payment information: handled by our payment processor (Razorpay); we do not store your card or UPI details ourselves.

2. How we use your data

We use your data only to:

• Operate the features you use — saving contacts, sending reminders, scheduling meetings, answering your questions in chat.
• Process business card photos using an AI vision model to extract contact details.
• Send you messages you've asked for (reminders, daily summaries, account notices) via WhatsApp.
• Secure your account and prevent abuse.
• Improve Roovy's reliability and features, using aggregated, non-identifying analysis.

We do not sell your personal data, and we do not use your data to serve you ads.

3. Google Workspace data (Calendar, Sheets, Gmail, Drive)

If you connect your Google account, Roovy requests only the following, specific scopes, each tied to a feature you explicitly use. We never request broader access than a feature needs.

• Google Calendar (calendar.events) — to create, update and remove calendar events when you set a reminder or book a meeting through Roovy, and to find free time slots when suggesting meeting times.
• Google Sheets (spreadsheets) — to create a spreadsheet in your Drive when you export your contacts, containing only the contact data you chose to export.
• Gmail — read (gmail.readonly) — to search and read your email only when you ask the AI assistant to find, read or summarize a message or thread.
• Gmail — send (gmail.send) — to send or reply to an email only after you have reviewed the exact draft and explicitly approved it in the chat. Roovy never sends email without that approval.
• Google Drive — app-created files (drive.file) — to create, read, rename or trash files only that Roovy itself created, or that you explicitly opened with Roovy. This scope cannot see or access the rest of your Drive.

Limited Use disclosure: Roovy's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not allow humans to read your Gmail or Drive content except: (a) with your explicit direction in response to a specific request you made in the chat, (b) to investigate a security incident or a violation of our Terms, or (c) to comply with the law.

Google account tokens are encrypted at rest (AES-256-GCM) and used only to make the specific API calls a feature needs, at the moment you trigger that feature. You can disconnect Google at any time from Settings in the Roovy app; this immediately revokes Roovy's access with Google and deletes the stored tokens.

4. WhatsApp data

Roovy uses the WhatsApp Business Platform to let you talk to the assistant and to send reminders and updates you've opted into. We store the messages exchanged with Roovy's number so the assistant has conversation context; this is not shared with any other WhatsApp contact. You can unlink your number from Roovy at any time by messaging "unlink" or from Settings.

5. Other connected accounts (WhatsEase, Krosspost)

If you connect a WhatsEase or Krosspost account, we access only the data those platforms expose through their own APIs for the features you use (e.g. reading business summaries for a digest, or posting on your behalf when you ask the assistant to). You can disconnect either account at any time from Settings.

6. AI processing

Roovy uses third-party AI models (currently DeepSeek for chat and card reading, with a vision fallback provider) to process your messages and card photos. These providers process the data needed to answer your specific request and do not use it to train their own models under our agreement with them.

7. Data retention and deletion

We keep your account data for as long as your account is active. You can delete individual contacts, reminders or notes at any time. To delete your entire account and associated data, email connect.roovy@gmail.com — we will delete your data within 30 days, except where we are required to retain limited records (e.g. payment records) for legal or accounting purposes. Business card photos are retained only as long as needed to review and correct the extracted contact and are periodically purged thereafter.

8. Data sharing

We share data only with: the service providers necessary to run Roovy (hosting, database, AI processing, WhatsApp messaging, payment processing), each bound by their own confidentiality and data-protection terms; any third-party account you explicitly connect (Google, WhatsEase, Krosspost), and only the data that connection requires; and law enforcement or regulators when legally required. We never sell your data.

9. Security

Sensitive credentials (OAuth tokens, API keys) are encrypted at rest. Access to production data is restricted to the engineers who need it to operate the service. No system is perfectly secure, and we work to improve these protections on an ongoing basis.

10. Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to withdraw consent for a connected account at any time. To exercise any of these, email connect.roovy@gmail.com.

11. Children

Roovy is intended for business use by adults and is not directed at children under 18.

12. Changes to this policy

We may update this policy as Roovy's features change. We will update the "Last updated" date above and, for material changes, notify you via the app or WhatsApp.

13. Contact

Questions about this policy or your data: connect.roovy@gmail.com.