Privacy
Policy.

1. Scope and controller

This policy applies to Zevuna, zevuna.tech, its workspace, ecosystem products and related services operated by Hatri Technologies. It is intended to operate alongside applicable data-protection and consumer-protection requirements, including the Digital Personal Data Protection framework where it applies. Before launch, the operator should ensure the legal entity name, correspondence address and designated contacts shown on this page are complete and accurate.

2. Information we may process

Depending on what you use, this can include name, email, profile details, institution and course information, tasks, planner and calendar entries, notes, attendance and academic records you choose to enter, projects, portfolio content, opportunities, group messages, documents, Vault files and their metadata, AI conversations and prompts, code and generated outputs, user-created agent settings and—when enabled—private per-agent memories such as dated plans, intentions, decisions, commitments and preferences, support requests, payment and transaction metadata, security logs and device/browser information.

3. Why we use information

We use information to authenticate accounts, provide requested workspace features, sync content across signed-in devices, operate AI and ecosystem functions, store and retrieve content, process payments, prevent abuse, secure the service, troubleshoot incidents, respond to support requests, comply with law, and maintain legitimate business records.

4. AI, Zev Agents and ecosystem products

When you use Zevuna AI, a custom Zev Agent, ZevLens, ZevNotes, ZevCode, ZevSlide, document analysis or related AI functions, the content needed to answer your request may be processed by Zevuna and relevant technology providers. Custom agents can have private persistent memory: in proactive mode they may save useful plans, intentions, decisions, commitments and preferences; in manual mode they save only when you ask; in off mode they do not use long-term agent memory. Memory records are scoped to your account and the specific agent, and are used to answer later questions by date or topic. You can change the mode in the agent settings and ask the agent to find or forget an individual memory. Existing conversations are not automatically converted into memories. AI output may be wrong, incomplete or unsuitable; do not provide passwords, credentials or highly sensitive information for long-term memory.

5. Vault and personal file storage

Vault is an optional cloud storage feature. When you upload a file, Zevuna stores the file and related metadata under your account so you can retrieve, organize, download or use it with supported AI features. Storage limits, file-size limits, supported types and service availability may apply. Keep independent backups of important files and use the Data Deletion page if you need account data removed.

6. Cookies, local storage and similar technologies

We use essential browser storage for authentication, security, preferences and product state. Optional storage may remember preferences or support service improvement. See the Cookie Policy for details and controls.

7. Service providers

We may use infrastructure and specialist providers for authentication, hosting, storage, payments, AI processing, email, security, analytics and support. Providers only receive the information needed for the relevant service and are subject to appropriate safeguards and contractual controls where applicable.

8. Sharing and disclosures

We do not intentionally sell your private workspace content. We may disclose information when you ask us to, when a provider must process it to deliver a requested feature, or when reasonably necessary to comply with law, valid legal process, enforce agreements, investigate abuse or security incidents, or protect users, the public, or our rights.

9. Payments

Payment providers such as Razorpay process card, UPI or other payment details needed to complete transactions. Zevuna receives transaction identifiers, status and entitlement metadata and does not intentionally store full card numbers.

10. Retention

We retain information only for as long as reasonably necessary for the stated purpose, security, account operation, dispute handling, payment reconciliation, legal obligations and legitimate record keeping. Different categories may have different retention periods. Persistent agent memories have a per-agent record cap and remain available until individually forgotten, the applicable account data is removed, or retention controls change.

11. Your choices and requests

You can update many workspace details in Settings. For custom agents, choose proactive, manual-only or off memory, ask an agent to review its saved memories, or ask it to forget a specific memory. Turning memory off stops future memory searches and writes for that agent; it does not itself erase prior records. You can request access, correction, deletion or other rights available under applicable law through the Contact page. See Data Deletion for account-removal instructions. You can also review or withdraw optional consent, subject to features that require specific consent and technical/security necessities.

12. Security

We use authentication controls, server-side authorization, access checks, rate limits, security headers and other technical and organisational safeguards intended to protect information. No internet service can guarantee absolute security. Please report suspected vulnerabilities promptly through the Grievance page.

13. Age eligibility and verification

Before entering the private workspace, Zevuna may ask for a date of birth to calculate whether the account meets the configured minimum-age requirement. The full date of birth is used only for that eligibility check and is not stored by Zevuna. A security verification challenge may also be required. Zevuna stores only a verification timestamp and policy version needed to remember the completed check.

13. Children and student data

Zevuna is a student productivity service. Use by minors is subject to applicable law and any required parental or guardian involvement. Do not submit another person's personal data without a lawful basis or authorization. The current ZevCampus release does not accept student enrollment, class rosters, attendance, submissions or children's personal records. Do not submit such information through any form or support channel.

13.1 ZevCampus institutional requests

If a school representative requests a ZevCampus workspace, Zevuna processes the submitted school name, representative name, institutional contact email, optional phone and website, intended capacity, the submitting account ID/email, the privacy notice acknowledgement, request status, review notes and administrative audit metadata. We use these details to review institutional eligibility, contact the requester, prevent duplicate or abusive requests, document activation/rejection and secure the school service. Access is limited to the requester and specifically authorized Zevuna platform operators. Do not include identity-document numbers, guardian information, student names, student identifiers or other unnecessary sensitive information in request notes. This notice describes the current request workflow and is not a substitute for school-specific data-processing terms or legal review.

14. Cross-border processing

Depending on the service providers and infrastructure used, information may be processed in countries other than where you live. We use providers and safeguards intended to protect data during such processing, subject to applicable law.

15. Changes to this policy

As Zevuna adds features, providers or legal obligations, this policy may change. Material changes will receive a new effective date and, where appropriate, additional notice or a fresh consent request.

16. Contact and grievances

Privacy requests, complaints and security reports can be submitted through Contact or the Grievance & Complaints page. Nothing in this policy removes mandatory statutory or consumer rights, including rights that may apply under India's data-protection and consumer-protection framework.