Privacy Policy

Introduction

Rasava provides an AI-powered business assistant and unified inbox for small businesses at rasava.ai. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the rights available to you under applicable data protection laws (including GDPR).

Information We Collect

• Account information: name, email, and account identifiers.
• Integration data: Google account identifiers and Meta/WhatsApp integration tokens needed to connect inboxes.
• Messages and metadata: message snippets, timestamps, sender/recipient identifiers (email or phone), thread IDs.
• Usage analytics: basic, aggregated events for product improvement.

Why We Collect It & Legal Bases

We process personal data for the following purposes and legal bases:

• Providing the service: processing your account, routing and displaying messages, and delivering functionality — legal basis: contract.
• Integrations: storing tokens and identifiers to interact with Google/Meta APIs on your behalf — legal basis: contract/consent (where required by providers).
• Product improvements & analytics: aggregated analytics — legal basis: legitimate interests.
• Compliance & safety: preserving data for legal obligations and abuse prevention — legal basis: legal obligation or legitimate interests.

Retention

We retain data as long as needed to provide the service and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce agreements. If you delete your account we will delete most personal data within 30 days, except for limited records we must retain for legal reasons (see Data Deletion page).

Your Rights

Depending on your jurisdiction you may have rights to access, correct, port, restrict, or erase your personal data, and to object to certain processing. To exercise these rights contact us atsupport@rasava.ai or follow the steps on our Data Deletion page.

Cookies and Analytics

We use minimal cookies and third-party analytics to understand product usage. We do not use tracking for advertising. You can opt out of analytics by contacting support.

Third-Party Processors

We use third-party providers to operate the service, including Vercel (hosting), Clerk (authentication), Google APIs (Gmail), Meta (WhatsApp Cloud API), and our database provider (Postgres). These providers process data on our behalf under contracts that include data protection obligations.

International Transfers

Data may be transferred and stored outside your country. Where transfers occur from the EU/EEA, we rely on appropriate safeguards such as standard contractual clauses or transfers to providers that implement adequate protections.

Security

We employ reasonable technical and organizational measures to protect personal data. However, no system is completely secure — if you suspect a security issue contact us atsupport@rasava.ai.

Children

Our services are not intended for children under 16. If you believe a child has provided us personal data, contact support and we will promptly address the request.

Contact

For privacy requests or questions: support@rasava.ai