Privacy Policy
Last updated: 24 July 2026
This Privacy Policy explains how Sarva ("we", "us") collects, uses, and protects your information when you use our website and tools (the "Service"). It applies to everyone who uses Sarva. By using the Service you agree to this policy.
1. Who we are
The Service is operated by [Your Legal Name / Business Name], [City, Country]. For any privacy question or request, contact us at [privacy@yourdomain.com].
2. What we collect
- Browser-only tools. Some tools (such as the text, JSON, Markdown, Base64 and image utilities) run entirely in your browser. The files you open in them are not uploaded to us and we never receive their contents.
- Files you upload. For server-side operations (such as PDF, Word, Excel and CSV conversion or editing), the file you choose is uploaded to our servers so we can perform the operation you requested.
- AI feature inputs. When you use an AI feature (for example the text or YouTube summariser), the text you submit — or the transcript we retrieve for the video link you provide — is sent to third-party AI providers to generate a result. See section 5.
- Account information. If you sign in, we use Google to authenticate you and receive your name, email address and Google account identifier. We never receive or store your Google password.
- Technical and usage data. We process your IP address to apply rate limits and protect the Service, and we use privacy-respecting analytics to understand aggregate usage.
3. How we use your information
- To provide the tools and operations you request.
- To authenticate you and maintain your account and plan (free or premium).
- To apply fair-use rate limits and prevent abuse.
- To keep a limited history of your recent activity, where you are signed in.
- To operate, secure, and improve the Service.
We do not sell your personal data, and we do not use your files or AI inputs for advertising.
4. Security and encryption
We protect your data in transit with TLS (HTTPS) and encrypt uploaded files and stored content at rest. This means your data is encrypted on our storage, and our servers hold the keys needed to decrypt it in order to perform the operation you asked for (for example converting a file or summarising text).
Because we must be able to process your content to provide these features, the Service is not end-to-end encrypted: unlike a purely local tool, our systems and the third parties in section 5 can technically access the content while an operation is running. We limit that access to what is needed to provide the Service.
5. Third parties and sub-processors
We rely on a small number of service providers ("sub-processors") to run the Service. They process data only to provide their function to us:
- AI providers(which may include providers such as Google, Groq, OpenRouter and similar) — receive the text or transcript you submit to an AI feature and return a summary. We select providers that do not use your input to train their models; you should review each provider's terms before submitting sensitive content.
- Google — authentication when you sign in.
- Cloud hosting and database providers — to run our servers and store account data and files.
- Analytics provider — aggregate, privacy-respecting usage metrics.
- YouTube — when you submit a video link, we retrieve its publicly available transcript/captions.
6. Data retention
- Uploaded files are stored only as long as needed to complete your operation and are automatically deleted shortly afterwards (within 24 hours).
- Activity history for signed-in users is retained for up to 30 days and then deleted.
- Account data is kept while your account is active. You can ask us to delete it at any time.
7. Your rights
Depending on where you live (including under the EU/UK GDPR and India's Digital Personal Data Protection Act, 2023), you may have the right to access, correct, or delete your personal data, to withdraw consent, and to complain to a data protection authority. To exercise any of these, contact us at [privacy@yourdomain.com].
8. International transfers
We and our sub-processors may process your data in countries other than your own. Where we do, we rely on appropriate safeguards (such as standard contractual clauses) as required by applicable law.
9. Children
The Service is not directed to children under [16], and we do not knowingly collect their personal data.
10. Changes to this policy
We may update this policy as the Service evolves. We will change the "Last updated" date above, and significant changes will be highlighted where practical.
11. Contact
Questions about this policy? Email [privacy@yourdomain.com] or open an issue on our GitHub repository.