Your data.
Clearly explained.

Where your data lives

Your databases, stored app data and backups are stored in India: backups are kept in Mumbai and copied to Hyderabad, encrypted, and only Plexivo can restore them. Every new account acknowledges this location when it signs up, and we keep a record of that acknowledgement.

What we keep for your account

• Your name, email address and a one-way hash of your password.
• Your organisation's billing country and state, and its GSTIN if you give one.
• Your wallet, invoices and usage, so every charge can be explained.
• An audit trail of the changes made in your account.
• The policies you agreed to at sign-up, with the date and version.
• Where your sign-up came from: the campaign tags of the link you followed (such as utm_source), the website that referred you (its address without any query), the first page you landed on and when, the country your connection came from, and your device type and browser family. We never keep your IP address or a device fingerprint for this.

We never sell your data, and we never use the contents of your apps or databases to train AI models.

Identity verification for a free trial

Creating an account is free and does not require a PAN or card. You can explore Plexivo AI and see your plan and price without a paid identity check. At your first deploy in India, when you choose Approve, we ask for your PAN, name and date of birth, explain the purpose, and ask for explicit consent before anything is created. After verification, that approved deployment continues automatically. We use the check to limit free trials to one per PAN, record your legal invoice name, and help maintain the customer records required by Indian cyber-security directions. CERT-In requires validated customer details; it does not specifically require PAN as the only verification method.

Cashfree Secure ID processes the verification. We do not save your date of birth or the full PAN of an individual. We retain a keyed fingerprint, masked PAN, registered name, verification result and time, and the consent record. Your typed name remains your display name. A different name does not automatically refuse a trial; a date-of-birth mismatch asks you to check and retry.

Where a company or agency check is required, we explain it before asking for a company PAN or GSTIN—for plan purchase, a first tax invoice or partner approval. A company or agency PAN is encrypted and can be revealed only to an authorised operator after protected-action confirmation, with an audit record. PAN verification does not by itself validate an address or contact number; customer-provided details remain distinguished from validated facts.

Verification and service-hire records are kept in India for five years after the account ends, or longer where a specific legal hold requires it. Account deletion does not erase these legally retained records. If you do not have an Indian PAN, message us and we'll set you up through an audited manual review. Aadhaar is not mandatory.

Who helps us run Plexivo

Your apps' own users

When your apps keep personal data about their users in Plexivo — accounts, profiles, files — you decide what is collected and why, and Plexivo processes it only to run your services, as your processor under India's Digital Personal Data Protection Act, 2023. To measure the uptime guarantee we check that your public addresses answer; those checks never read or keep your data.

How long we keep it

You stay in control

• Download a copy of your account data from the console at any time.
• Correct your details in Settings.
• Ask us to erase your account. Invoices, the billing ledger and legally required customer-verification records are kept for the applicable statutory period, and audit records are kept with your identity removed.

This website

plexivo.io does not ask for credentials, use your microphone or connect to your repositories. The demo video plays only when you choose it.

• Your choice comes first. We ask once whether you accept analytics, and we keep a record of that choice and the policy version. Nothing is measured until you accept, and you can change your mind at any time with Cookie settings at the foot of every page.
• If you accept analytics, we count the pages you visit, how far you scroll, the buttons you press and whether you play the film, with your device type, browser and the country, region and city your connection comes from. A random identifier in your browser's storage links one visit to the next. We never ask for your precise location and never store your full IP address. If you accept, a small first-party cookie (plexivo_attr, on plexivo.io and its subdomains, kept for 90 days) also remembers the first and the latest link that brought you here, so that if you create an account we know which post or article helped. It holds only those links' campaign tags, the referring site and page, the landing page and the time — no identifier.
• Without accepting, nothing is stored in your browser. Start free then passes nothing about how you arrived (no campaign tags, no referring site) to the sign-up page.
• Ad measurement. If you accept, and while we advertise, plexivo.io and the sign-up page load the Google tag, the Meta Pixel and the Reddit Pixel so that Google Ads, Meta and Reddit can tell us whether one of our ads led to a sign-up. They set their own cookies on plexivo.io and receive the pages you open there, your browser and network details and the ad click that brought you, under their own privacy policies. When you create an account, and when your organisation makes its first payment, we tell Google and Meta with a one-way hash of your email address (never the address itself) and, for the payment, its amount before tax; Reddit learns of the sign-up and the payment through its pixel, without your email. Ad personalisation is switched off. A small first-party cookie (plexivo_ads, on plexivo.io and its subdomains, kept for 180 days) carries your yes to the sign-up page and holds only the value 1. Decline, or Cookie settings at any time, removes it and switches the tags off.
• Sign-up counts. When the Create account page opens, and when an account is started, we add one to a daily count for the campaign tags of the link you followed (such as utm_source and utm_campaign) or for no tags. These counts hold no identifier, no address and no cookie, and cannot be linked to you; we use them to see which campaigns bring sign-ups.
• The consoles (cloud.plexivo.io and partner.plexivo.io) keep your sign-in in your browser and, once you have signed in, a plexivo_returning flag so they open on Sign in instead of Create account. It holds only the value 1 — no identifier — is never sent to us, and is not analytics.
• When you write to us through the contact form or Plexivo Agent, we keep what you send (your name, email, company, phone if you give it, and your message) so our sales and support teams can answer.
• Plexivo Agent conversations are kept so we can follow up and improve its answers.
• Forms use bot protection, which checks that a person, not a bot, is sending them.
• Session recordings. If you accept analytics here, or agree in the customer or partner console, Microsoft Clarity records how pages are used (clicks, scrolling and where the pointer moves) so we can find what is confusing or broken. Text you type is masked and never recorded, nothing is shared with Microsoft Advertising, and you can stop it at any time with Cookie settings or in the console.

All of this is stored by Plexivo in India, separately from customer accounts, except session recordings, which Microsoft stores. None of it is sold or used for advertising. The country your connection comes from may also be used to show visitors from India an approximate rupee amount next to US dollar prices.

Your rights

Under India's Digital Personal Data Protection Act, 2023 you can ask what personal data we hold about you, have it corrected or erased, withdraw a consent you gave, and name someone to act for you. Withdrawing consent does not undo what was done before it. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Questions and grievances

Open a support request and choose Privacy, or write to support@plexivo.io. Our grievance team answers every request, and within the time the law sets. Plexivo (OPC) Private Limited is responsible for your personal data.