Your data.
Clearly explained.

Where your data lives

Your apps, databases and their backups never leave India: backups are kept in Mumbai and copied to Hyderabad, encrypted, and only Plexivo can restore them. Every new account acknowledges this location when it signs up, and we keep a record of that acknowledgement.

What we keep for your account

• Your name, email address and a one-way hash of your password.
• Your organisation's billing country and state, and its GSTIN if you give one.
• Your wallet, invoices and usage, so every charge can be explained.
• An audit trail of the changes made in your account.
• The policies you agreed to at sign-up, with the date and version.

We never sell your data, and we never use the contents of your apps or databases to train AI models.

Identity verification for a free trial

Creating an account is free and does not require a PAN or card. You can explore Plexivo AI and see your plan and price without a paid identity check. At your first deploy in India, when you choose Approve, we ask for your PAN, name and date of birth, explain the purpose, and ask for explicit consent before anything is created. After verification, that approved deployment continues automatically. We use the check to limit free trials to one per PAN, record your legal invoice name, and help maintain the customer records required by Indian cyber-security directions. CERT-In requires validated customer details; it does not specifically require PAN as the only verification method.

Cashfree Secure ID processes the verification. We do not save your date of birth or the full PAN of an individual. We retain a keyed fingerprint, masked PAN, registered name, verification result and time, and the consent record. Your typed name remains your display name. A different name does not automatically refuse a trial; a date-of-birth mismatch asks you to check and retry.

Where a company or agency check is required, we explain it before asking for a company PAN or GSTIN—for plan purchase, a first tax invoice or partner approval. A company or agency PAN is encrypted and can be revealed only to an authorised operator after protected-action confirmation, with an audit record. PAN verification does not by itself validate an address or contact number; customer-provided details remain distinguished from validated facts.

Verification and service-hire records are kept in India for five years after the account ends, or longer where a specific legal hold requires it. Account deletion does not erase these legally retained records. If you do not have an Indian PAN, message us and we'll set you up through an audited manual review. Aadhaar is not mandatory.

Who helps us run Plexivo

Your apps' own users

When your apps keep personal data about their users in Plexivo — accounts, profiles, files — you decide what is collected and why, and Plexivo processes it only to run your services, as your processor under India's Digital Personal Data Protection Act, 2023. To measure the uptime guarantee we check that your public addresses answer; those checks never read or keep your data.

How long we keep it

You stay in control

• Download a copy of your account data from the console at any time.
• Correct your details in Settings.
• Ask us to erase your account. Invoices, the billing ledger and legally required customer-verification records are kept for the applicable statutory period, and audit records are kept with your identity removed.

This website

plexivo.io does not ask for credentials, use your microphone or connect to your repositories. The demo video plays only when you choose it.

• Your choice comes first. We ask once whether you accept analytics, and we keep a record of that choice and the policy version. Nothing is measured until you accept, and you can change your mind at any time with Cookie settings at the foot of every page.
• If you accept analytics, we count the pages you visit, how far you scroll, the buttons you press and whether you play the film, with your device type, browser and the country, region and city your connection comes from. A random identifier in your browser's storage links one visit to the next. We never ask for your precise location and never store your full IP address.
• When you write to us through the contact form or Plexivo Agent, we keep what you send (your name, email, company, phone if you give it, and your message) so our sales and support teams can answer.
• Plexivo Agent conversations are kept so we can follow up and improve its answers.
• Forms use bot protection, which checks that a person, not a bot, is sending them.
• Session recordings. If you accept analytics here, or agree in the customer or partner console, Microsoft Clarity records how pages are used (clicks, scrolling and where the pointer moves) so we can find what is confusing or broken. Text you type is masked and never recorded, nothing is shared with Microsoft Advertising, and you can stop it at any time with Cookie settings or in the console.

All of this is stored by Plexivo in India, separately from customer accounts, except session recordings, which Microsoft stores. None of it is sold or used for advertising. The country your connection comes from may also be used to show visitors from India an approximate rupee amount next to US dollar prices.

Your rights

Under India's Digital Personal Data Protection Act, 2023 you can ask what personal data we hold about you, have it corrected or erased, withdraw a consent you gave, and name someone to act for you. Withdrawing consent does not undo what was done before it. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Questions and grievances

Open a support request and choose Privacy, or write to support@plexivo.io. Our grievance team answers every request, and within the time the law sets. Plexivo (OPC) Private Limited is responsible for your personal data.