Back

    Privacy Policy

    Last Updated: 15 March, 2026

    1. Introduction

    Corewave Innovations Pvt. Ltd. ("Saveiy", "we", "our", or "us") provides a recurring payment intelligence platform that helps users detect, understand, and manage subscriptions and other recurring financial obligations.

    This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services.

    By using Saveiy, you consent to the practices described in this Policy.

    2. Information We Collect

    We collect only the information necessary to provide subscription and recurring payment intelligence services.

    A. Account Information

    • Name
    • Email address
    • Authentication credentials (via secure providers such as Google OAuth)

    B. Google Account Information (If You Sign In with Google)

    If you connect your Google account, Saveiy may request:

    • Basic profile information (name, email)
    • Read-only access to Gmail (if explicitly authorized)

    We request Gmail read-only access solely to detect subscription-related emails such as:

    • Invoices
    • Renewal confirmations
    • Billing notifications
    • Payment receipts

    We use filtered queries to limit processing to billing-related emails only.

    Saveiy:

    • Does not send, modify, or delete emails
    • Does not use Gmail data for advertising
    • Does not sell Gmail data
    • Does not use Gmail data to train generalized AI models

    Saveiy's use of information received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements.

    Users may revoke Google access at any time through Google Account permissions.

    C. SMS-Based Signals (If Enabled)

    With user permission, Saveiy may analyze SMS notifications to detect recurring payment alerts, billing confirmations, and renewal messages.

    We do not access personal conversations unrelated to billing signals.

    D. Financial Data via Account Aggregator (If Enabled)

    If you provide explicit consent through a regulated Account Aggregator (AA):

    • Transaction metadata
    • Recurring debit indicators
    • Mandate details

    We do not collect bank login credentials. All financial data access occurs through regulated consent-based frameworks.

    E. Technical Data

    • IP address
    • Device information
    • Log data
    • Usage analytics

    This information helps us improve performance and security.

    3. Purpose of Data Processing

    We process personal data only for the following purposes:

    • Detecting and modeling recurring payment behavior
    • Predicting upcoming renewals
    • Identifying duplicate or unused subscriptions
    • Providing optimization insights
    • Improving detection accuracy
    • Ensuring security and preventing fraud
    • Complying with legal and regulatory obligations

    We do not use personal data for targeted advertising.

    4. Data Minimization and Limited Use

    Saveiy follows strict data minimization principles:

    • We collect only data necessary to provide subscription intelligence
    • We store structured billing signals rather than entire email archives
    • We do not sell or commercially exploit user data

    Google user data is used strictly to provide core functionality and in accordance with Google's Limited Use requirements.

    5. Data Sharing

    We may share information only:

    • With infrastructure and hosting providers under confidentiality agreements
    • With regulated financial partners where user consent is explicitly provided
    • When required by law or legal process

    We do not sell personal data to third parties.

    6. Data Retention

    We retain personal data only as long as necessary to provide services or comply with legal obligations.

    Users may request deletion of their account and associated data. Upon verified request, personal data will be permanently deleted within 30 days unless retention is required by law.

    7. User Rights (DPDP Act Compliance)

    In accordance with India's Digital Personal Data Protection Act (DPDP), users have the right to:

    • Access their personal data
    • Correct inaccurate information
    • Withdraw consent
    • Request erasure of personal data

    Consent is explicit and purpose-specific. Users may withdraw consent at any time, including revoking Google OAuth or Account Aggregator permissions.

    To exercise these rights, contact: support@saveiy.com

    8. Data Security

    We implement reasonable technical and organizational safeguards, including:

    • Encryption in transit (HTTPS/TLS)
    • Encrypted storage where applicable
    • Access controls
    • Audit logging

    While no system is completely secure, we continuously improve our safeguards.

    9. Children's Privacy

    Saveiy is not intended for individuals under 18 years of age. We do not knowingly collect data from minors.

    10. Changes to This Policy

    We may update this Privacy Policy periodically. Changes will be reflected by updating the "Last Updated" date above.

    11. Contact Information

    Corewave Innovations Pvt. Ltd.
    Email: support@saveiy.com
    Website: https://www.saveiy.com