Privacy Policy

Privacy Policy

This policy explains how Tvara handles account data, lead data, uploaded sheets, external CRM data, Google/email integrations, auto replies, advertising pixels, and workspace privacy.

Last updated: 11 May 2026No sale of customer dataCASA Tier 2 verified

Uploaded sheets

Files stay associated with the relevant account or workspace.

No data pollution

Customer data is separated through account and workspace boundaries.

Ad transparency

Cookies, pixels, and tracking tools are disclosed for ad-review clarity.

Privacy commitment

1. Overview

This Privacy Policy explains how Tvara collects, uses, stores, shares, and protects personal data and business data.

This Privacy Policy applies to Tvara, operated by What A Day Private Limited, Bengaluru, Karnataka, India. It explains how we collect, use, store, share, and protect data when you use our websites, applications, dashboards, integrations, AI tools, analytics, communication tools, and related services.

By using Tvara, creating an account, joining a workspace, uploading data, saving leads, connecting integrations, or using AI-assisted workflows, you acknowledge this Privacy Policy.

Who this applies to

2. Scope of This Policy

This Policy applies to users who visit our website, create a Tvara account, join a company workspace, use Tvara for sales workflows, connect third-party tools, upload files, save leads, or interact with Tvara through ads, landing pages, support, or product communications.

It may also apply to:

  • leads, contacts, prospects, or customers whose data is uploaded, saved, synced, or processed through Tvara;
  • companies, agencies, teams, and organizations using Tvara;
  • users who connect email, CRM, WhatsApp, calling, meeting, or analytics services;
  • visitors who interact with our website, pixels, forms, or advertising campaigns.

Data categories

3. Data We Collect

Account Data

Name, email address, phone number, company name, role, login details, workspace membership, billing metadata, preferences, and support requests.

Workspace and Company Data

Company name, workspace users, admins, settings, plan details, connected integrations, billing metadata, permissions, and workspace usage activity.

Lead and Contact Data

Names, emails, phone numbers, company names, designations, LinkedIn or social links, industry, source, status, communication history, tags, scores, and analytics.

Uploaded Sheets and Files

File name, type, uploaded records, upload timestamp, uploader, workspace association, validation errors, processed records, deduplication status, and matching outputs.

Communication Data

Email metadata and content where permitted, WhatsApp messages, call records, call recordings where enabled, transcripts, summaries, meeting data, campaign replies, and engagement activity.

Website and Usage Data

IP address, device type, browser type, pages visited, session activity, referring URLs, cookies, analytics events, crash logs, performance logs, and feature usage.

Lawful data use

4. Lead Data and Customer Responsibility

Users are responsible for the lead and contact data they upload, save, sync, or process through Tvara.

If you upload Lead Data or connect an integration, you confirm that you have obtained all necessary permissions, consents, notices, or lawful bases required to process that data through Tvara.

Customers must ensure that:

  • Lead Data was collected lawfully;
  • contacts have been given required notices where applicable;
  • required consent or lawful basis exists before outreach;
  • opt-outs, unsubscribe requests, DND/DNC obligations, and suppression lists are respected;
  • Tvara is not used for spam, phishing, deception, harassment, fraud, or unlawful outreach;
  • sensitive or restricted data is not uploaded unless legally permitted and supported by Tvara in writing.

Spreadsheet handling

5. Uploaded Sheets and File Maintenance

When you upload CSV, Excel, spreadsheet, or similar files, Tvara may parse, clean, validate, structure, deduplicate, match, enrich, analyze, and store the uploaded data to provide lead sets, campaign workflows, analytics, and reporting.

Uploaded sheets may be maintained with:

  • file name, file type, upload source, user, workspace, and timestamp metadata;
  • processed records, validation errors, enrichment status, deduplication outputs, and matching results;
  • lead-source information, campaign association, and analytics history.

Uploaded sheets are associated with the relevant account or workspace and are not intentionally shared with unrelated users, customers, or workspaces. Workspace Admins may access uploaded sheets and processed records within their own workspace.

Automation transparency

6. Auto Replies and Automated Communication

Tvara may process communication history, lead data, campaign settings, templates, prompts, and user instructions to generate, suggest, queue, schedule, or send Auto Replies.

Auto Replies may be AI-generated, template-based, rule-based, or triggered through connected channels such as email, WhatsApp, CRM workflows, or other integrations.

Users remain responsible for:

  • enabling, disabling, reviewing, approving, and monitoring Auto Replies where required;
  • ensuring replies are lawful, accurate, non-deceptive, and appropriate;
  • ensuring recipients have not opted out;
  • complying with email, WhatsApp, calling, SMS, telecom, advertising, and anti-spam laws;
  • avoiding spam, harassment, impersonation, phishing, illegal offers, or misleading claims.

Tvara may log Auto Replies, delivery status, related prompts, metadata, and campaign context for analytics, auditability, quality, troubleshooting, and compliance.

Connected tools

7. External CRMs and Integrations

Tvara may allow you to connect external services such as Gmail, Outlook, Zoho Mail, CRMs, WhatsApp tools, Twilio, calling tools, meeting tools, analytics services, and other business applications. When you connect a service, Tvara may access, process, sync, store, send, receive, or display data from that service based on the permissions you grant.

Integration data may include:

  • contacts, leads, accounts, deals, notes, tasks, activities, and pipeline status;
  • email, call, WhatsApp, and meeting records;
  • API tokens, authentication metadata, sync settings, and sync logs;
  • campaign associations, reply status, and communication analytics.

You can disconnect integrations through the Platform where available or by contacting us. Tvara is not responsible for the privacy practices, security, availability, or accuracy of third-party services.

OAuth and inbox data

8. Google and Email Account Data

When you connect Google or other email accounts, Tvara accesses only the data permitted by the scopes and permissions you authorize.

This data may be used to provide requested product features such as inbox sync, outreach tracking, reply analysis, campaign analytics, meeting context, auto-reply workflows, and sales activity insights.

Tvara does not intentionally:

  • sell Google user data or email account data;
  • use Google user data for unrelated advertising targeting;
  • allow unrelated customers to access your email or workspace data;
  • use one customer's email or inbox data to enrich another customer's private workspace.

Tvara's Google OAuth application has completed CASA Tier 2 verification through TAC Security, supporting secure handling of Google-connected services and application security review expectations.

Purpose of processing

9. How We Use Data

We use data to:

  • create and manage accounts, users, workspaces, and permissions;
  • provide the Tvara Platform and related services;
  • create lead sets, offering sets, templates, and campaigns;
  • save, enrich, organize, match, score, and analyze leads;
  • generate AI-assisted insights, summaries, replies, recommendations, and analytics;
  • enable Auto Replies and communication workflows;
  • sync with external CRMs and integrations;
  • analyze calls, emails, WhatsApp messages, meetings, replies, and campaigns;
  • provide dashboards, reports, and sales performance insights;
  • improve product reliability, security, usability, and performance;
  • prevent fraud, abuse, spam, unauthorized access, and policy violations;
  • comply with law, legal requests, platform requirements, and contractual obligations;
  • send service, security, billing, support, and product communications;
  • run lawful marketing and advertising with required notices and consent where applicable.

Cross-customer separation

11. No Data Pollution Between Customers

Tvara is designed to prevent data pollution between users, customers, workspaces, and clients.

We use logical separation, account identifiers, workspace identifiers, user permissions, and internal access controls to keep Customer Data associated with the correct account or workspace.

We do not intentionally:

  • expose one customer's private lead lists, uploaded sheets, CRM data, campaigns, communication history, or workspace information to another customer;
  • use one customer's private data to enrich another customer's private database;
  • allow unrelated users or workspaces to access each other's saved leads, files, campaigns, replies, calls, or analytics.

We may use aggregated, anonymized, or de-identified data to improve performance, security, product quality, analytics, and reliability, provided such data does not identify a specific customer, workspace, user, or lead.

Admin visibility

12. Personal Account vs Workspace Account Privacy

Personal Accounts

For Personal Accounts, the individual account holder controls their own saved leads, uploaded files, campaigns, integrations, and settings unless the account is added to or migrated into a Workspace.

Workspace Accounts

For Workspace Accounts, the company or workspace owner may control workspace data, users, permissions, integrations, saved leads, uploaded files, campaigns, replies, calls, meetings, and analytics.

Admin Access

Workspace Admins may view activity inside the workspace, manage users, connect or disconnect integrations, export or delete workspace data, and review campaign and communication records.

Work Email Use

If you use Tvara as part of a company workspace, your activity inside that workspace may be visible to that workspace's admins and governed by your organization's internal policies.

Limited sharing

13. How We Share Data

We do not sell Customer Data. We may share data only in limited circumstances necessary to provide, secure, maintain, support, or legally operate Tvara.

Data may be shared with:

  • trusted service providers such as cloud hosting, databases, analytics, AI processing, communication infrastructure, support tools, security tools, and payment providers;
  • connected integrations when you authorize sync or connection;
  • workspace owners and admins for data inside their workspace;
  • legal, regulatory, or safety authorities when required by law or necessary to protect rights, safety, and security;
  • successors or acquirers in connection with a merger, acquisition, financing, restructuring, or sale of assets, subject to appropriate safeguards.

AI processing

14. AI and Model Use

Tvara uses AI-assisted systems to provide features such as matching, summaries, reply suggestions, lead insights, call analysis, campaign analysis, recommendations, scoring, and workflow automation.

Customer Data may be processed by AI systems to provide, secure, maintain, and improve the requested Tvara features. Tvara does not intentionally use one customer's private workspace data to train or benefit another customer's private workspace.

Where third-party AI providers are used, they act as service providers or subprocessors for the purpose of providing requested functionality, subject to applicable contractual and technical controls.

Google, Meta, LinkedIn ads

15. Cookies, Pixels, and Advertising Technologies

Tvara may use cookies, pixels, tags, analytics tools, and similar technologies to operate the website, measure performance, and run lawful advertising.

These technologies may be used for website functionality, preferences, analytics, ad conversion measurement, remarketing, campaign attribution, and understanding campaign effectiveness.

These tools may include:

  • Google Ads, Google Analytics, and related Google tags;
  • Meta Ads pixels or conversion tools;
  • LinkedIn Ads insights or conversion tools;
  • other analytics, advertising, or measurement providers.

Where required by law, we request consent before using non-essential cookies or advertising technologies. You can manage cookie preferences through browser settings, consent banners where available, and advertising platform settings.

How long data is kept

16. Data Retention

We retain data for as long as necessary to provide the Platform, maintain accounts and workspaces, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, support security, maintain backups, and operate our business.

When an account is deleted or data deletion is requested, we delete or de-identify applicable data within a reasonable period, unless retention is required by law, security, dispute resolution, fraud prevention, backup, audit, or legitimate business needs. Backups and archived copies may take additional time to expire.

Safeguards

17. Data Security

We use reasonable technical and organizational measures to protect data, including access controls, authentication, internal permissioning, monitoring, and secure infrastructure practices.

Tvara's Google OAuth application has completed CASA Tier 2 verification through TAC Security, supporting secure handling of Google-connected services and application security review expectations.

No method of transmission or storage is 100% secure. Users are responsible for protecting passwords, managing workspace permissions, reviewing integrations, and reporting suspected unauthorized access.

Data locations

18. International Data Processing

Tvara is based in India. Depending on the services, integrations, cloud infrastructure, and subprocessors used, data may be processed in India or other jurisdictions. Where required, we take steps to ensure that cross-border processing is conducted in accordance with applicable law.

Business platform

19. Children's Privacy

Tvara is intended for business and professional users. Tvara is not intended for children. Users must not knowingly upload, target, process, or use children's personal data through the Platform unless they have explicit legal authority and Tvara has agreed in writing to support that processing.

Users must not use Tvara for targeted advertising, behavioral monitoring, or outreach directed at children.

Access and deletion

20. Your Rights

Depending on applicable law, you may have the right to access personal data, correct inaccurate data, update incomplete data, request deletion, withdraw consent, object to certain processing, opt out of marketing, request information about data sharing, and raise a grievance.

If your data was uploaded by a Tvara customer, we may direct your request to that customer because they may be responsible for deciding how and why your data is processed.

Updates

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website or Platform with a revised last-updated date. Continued use of Tvara after changes means you acknowledge the updated Policy.

Bengaluru jurisdiction

22. Governing Law and Disputes

This Privacy Policy is governed by the laws of India.

Any dispute, claim, or proceeding relating to this Privacy Policy, data processing, or use of Tvara shall be subject to the exclusive jurisdiction of the courts located in Bengaluru, Karnataka, India.

Contact

23. Contact and Grievance Redressal

Registered Entity

What A Day Private Limited

Bengaluru, Karnataka, India