Privacy Policy

• Account info (email, display name) from Supabase Auth
• Business profile you enter (legal name, GSTIN, address, etc.)
• Invoice and payment data you create
• Standard server logs (IP, user agent) for security and debugging
• Aggregate usage analytics on our marketing site (Google Analytics, and Microsoft Clarity for heatmaps and session replays) so we can see which pages are confusing. Aggregate rather than anonymous: both set a client identifier and derive rough location from your IP address. Neither runs inside the app

• To operate the app and your invoices
• To generate PDFs and store them in private Supabase Storage
• To email transactional messages (receipts, password resets)

• We do not sell your data
• We do not run third-party advertising trackers
• We do not read your invoice contents for marketing

Your data is stored on Supabase infrastructure in the Mumbai region (ap-south-1), inside India. Every record is scoped to your business with row-level security. PDFs live in private storage and are served only through short-lived signed links.

These are the third parties that process data on our behalf. There is nothing else in the path.

• Supabase — Database, authentication and private file storage (Mumbai (ap-south-1), India)
• Vercel — Hosting for mavoin.com and app.mavoin.com (Global edge network)
• Cloudflare — DNS, CDN, and the anti-abuse check on the free tools (Global edge network)
• Razorpay — Subscription payments. Card details go to Razorpay, never to us (India)
• Resend — Transactional email — sign-in and password-reset mail, and invoices you send from the app, with the PDF attached (Global)
• Google Analytics — Aggregate page analytics on this marketing site only (Global)
• Microsoft Clarity — Heatmaps and session replay on this marketing site only (Global)

The same list, with more context, is on the trust page.

• Export your data — Settings → Data in the app. CSV, a full JSON archive, or a bulk download of your invoice PDFs. Free on every plan, including the free plan.
• Delete your account and data — Settings → Account. Deletion is held for 30 days so you can undo it, exports keep working throughout, and the records are purged after that.
• Would rather ask a person for either? Email hello@mavoin.com and we'll do it for you.