Please read each section carefully. If anything is unclear, contact our team before continuing to use the service.
Who controls the platform
Avoqra is operated by Shanku Labs. For the purposes of the Digital Personal Data Protection Act, 2023, Avoqra acts as a Data Fiduciary for account, subscription, support, billing, and platform operations data submitted by users.
Business users remain responsible for the legality and accuracy of personal data they add about their own customers, contacts, staff, vendors, and other third parties while creating invoices, quotations, reminders, or reports.
Personal data and business data we process
Avoqra processes account details such as name, email, mobile number, OTP verification status, password hash, login activity, plan, subscription, payment status, support messages, feedback, and privacy request records.
Avoqra also processes company profile data, logos, brand colours, GST/tax details, bank details, customer master data, item master data, invoices, quotations, payment status, reminders, PDF outputs, and document metadata entered by the user.
Payment card, UPI, mandate, and payment instrument details are handled by Razorpay or the relevant payment provider. Avoqra stores gateway identifiers, subscription references, payment status, and plan metadata needed to operate subscriptions.
Purpose of processing
We process data to create and verify accounts, authenticate users by email OTP/password, create company workspaces, generate invoices and quotations, create PDFs, send emails/reminders, process subscriptions, enforce plan limits, provide dashboards, manage support, improve reliability, secure the service, detect misuse, and comply with law.
Marketing, onboarding tips, newsletter messages, and product update emails are sent only when the user has opted in or where permitted for service communications. Users can request withdrawal or change of marketing preference from Account Settings or support.
With permission through Analytics preferences on public pages, we measure visits, campaign sources, coarse click locations and scroll depth to improve those pages. We do not record public-page form contents, session videos, invoice contents or account-screen heatmaps. Declining or withdrawing permission stops optional browser analytics and clears its browser identifiers. Operational authentication, payment and security records are separate.
Superadmin views are limited to SaaS operations such as user status, company list, subscriptions, usage, feedback, privacy requests, and platform health. Customer transaction details are tenant-owned and are not used for unrelated purposes.
Sharing and processors
Avoqra may use cloud hosting, PostgreSQL database hosting, Microsoft 365 SMTP/email delivery, Razorpay payment/subscription services, DNS/CDN/security services, and operational tools required to run the application.
Processors and service providers receive only the information needed for hosting, delivery, payment, security, support, or legal compliance. We do not sell customer business data.
Security safeguards
Avoqra uses HTTPS, role-based access, tenant isolation, server-side validation, OTP verification, hashed passwords/OTPs, private infrastructure access, audit logs, restricted upload handling, and operational monitoring.
No internet service can be guaranteed perfectly secure. Users should keep OTPs, passwords, payment credentials, AWS credentials, and devices private and should report suspected account compromise immediately.
Retention and deletion
We retain account, billing, subscription, invoice, quotation, payment, and tax-related data for as long as needed to provide the service, meet legal/accounting obligations, resolve disputes, prevent fraud, and maintain audit trails.
When data is no longer needed for the specified purpose or legal retention, it may be deleted, anonymised, or archived. Users can submit access, correction, erasure, withdrawal, nomination, and grievance requests from Account Settings.
Children
Avoqra is a business SaaS product and is not intended for children. Users should not create accounts for children or upload child personal data unless they have the required authority and lawful basis.
Privacy contact
For privacy requests, account deletion, data export assistance, grievance escalation, or security concerns, use Account Settings or email admin@avoqra.app with the subject line Avoqra Privacy Request.