Privacy policy
Exporo helps export houses track receivables, realisation deadlines and export incentives. This policy explains what we collect, why, who else handles it, and the choices you have. We wrote it to be read, not skimmed past.
What we collect
- Your account: your name, email address and password (stored only as a secure hash), or your Google account email if you sign in with Google.
- Your export house: the company name, IEC, GSTIN, address and AD bank you enter, and who in your team has access.
- Your records: the invoices, buyers, payments, advances, incentive claims and settings you enter or import.
- Your documents: invoices, shipping bills, bank advices and other files you upload.
- Billing: your subscription status and payment references from Razorpay. We never see or store your card or bank details.
- Technical data: basic logs such as IP address, browser type and the times you use the service, kept to run and secure it.
Why we use it
- To provide Exporo: show your book, calculate deadlines, read the documents you ask us to read, and let your team work together.
- To bill your subscription and send service emails such as sign-in links, invites and payment notices.
- To send occasional product news and tips about export rules. Every such email has an unsubscribe link, and unsubscribing doesn’t affect service emails.
- To keep the service secure, fix problems and understand which features are used.
We do not sell your data, and we do not use your records or documents for advertising.
Who else handles your data
We use these providers to run Exporo. Each processes data only to provide its part of the service:
- Supabase: database, sign-in and document storage. Our project is hosted in the Mumbai region.
- Vercel: hosting of the website and its servers.
- Anthropic: when you upload a document and ask Exporo to read it, the document is sent to Anthropic’s Claude API to extract the details. This may involve processing outside India.
- Razorpay: subscription payments.
- Google: only if you choose to sign in with Google.
- Resend: to deliver sign-in, invite and billing emails, and product news if you’ve agreed to receive it.
Who in your company can see what
Everyone you invite into an export house can see and change that export house’s records and documents. Owners can also manage people and billing. People in other export houses cannot see your data; this is enforced by the database, not just the app.
How long we keep it
We keep your records and documents while your export house has an account, including after a trial ends or a subscription lapses, so you can come back or export them. If you ask us to delete an export house, we delete its records and documents within 30 days, except where the law requires us to keep billing records.
Your choices and rights
- Export your invoices any time with Export CSV.
- Correct your details in the app, or ask us to.
- Ask for a copy of your personal data, or for your account or export house to be deleted.
- Withdraw consent by closing your account. This doesn’t affect processing that happened before.
Email exporo.in@gmail.com from the address on your account. We reply within 7 days.
Security
Data is encrypted in transit. Each export house’s records are separated by row-level security in the database, documents are stored privately and shared only through short-lived links, and secret keys never reach your browser. No system is perfectly secure; if we learn of a breach that affects you, we’ll tell you and the authorities as the law requires.
Contact and grievances
For any complaint about how we handle your data, write to our grievance officer, [Seller name], at exporo.in@gmail.com with “Grievance” in the subject.
Changes
If we change this policy in a way that matters, we’ll email account owners before it takes effect.