Account and workspace operation
Required processingAuthenticate users, maintain workspace membership, and provide the requested Credvara service.
Data categories: account identity, workspace membership, authentication and session metadata.
Privacy notice cleardues-dpdp-readiness-2026-07-v1
Credvara privacy notice
Credvara processes personal data only for specified service, security, billing, legal, and optional feature purposes. Workspace business data remains subject to customer instructions and applicable retention duties.
Effective 2026-07-31. Technical readiness target 2027-05-13. This technical control set supports DPDP readiness. It is not legal advice, a certification, or a representation that every statutory provision is currently in force or applicable in every processing context.
Receivables operations
Required processingProcess customer contacts, invoices, payments, follow-ups, evidence, and related records under workspace instructions.
Data categories: business contact details, invoice and payment records, follow-up and evidence metadata.
Security and abuse prevention
Required processingProtect accounts, investigate misuse, enforce rate limits, and maintain tamper-evident security records.
Data categories: minimized network metadata, security events, audit and request-correlation identifiers.
Billing and legal compliance
Required processingAdminister subscriptions, payment evidence, tax and accounting records, disputes, and lawful requests.
Data categories: billing contact details, provider transaction references, compliance and dispute records.
Optional AI assistance
Optional consentUse approved data to draft follow-ups and summarize evidence for user review without autonomous external action.
Data categories: selected invoice and customer context, user instructions, generated draft metadata.
Optional product communications
Optional consentSend non-essential product updates, research invitations, and service-improvement communications.
Data categories: account email, communication preference.
Your controls
- • Access a clear description of processing purposes and data categories.
- • Grant or withdraw optional consent without changing required processing purposes.
- • Request an export of personal data associated with the verified account.
- • Request erasure review, subject to identity, legal-hold, accounting, security, and contractual constraints.
- • Raise a privacy grievance through the configured support channel.
Service providers and processors
Vercel — Hosting, delivery and application runtime
Request/network metadata and application traffic required to serve Credvara.
Supabase — Authentication, PostgreSQL and storage services
Account/authentication data and tenant-scoped application data required by enabled workflows.
InstantDB — Legacy/compatibility application state and governed operational records
Tenant-scoped records retained by current Credvara compatibility and operational modules.
OpenAI — Optional AI-assisted drafting and evidence summarization
Only approved server-selected context for optional AI features; no autonomous financial or legal authority.
Resend — Transactional and operational email delivery
Recipient address and the bounded email content required for the requested operational message.
Razorpay — Payment checkout and payment verification
Order amount/currency, provider order reference, optional checkout prefill name/email, and payment information supplied directly to Razorpay.
Cookies, analytics and session replay
Credvara currently uses necessary first-party authentication, session, security and short-lived age-eligibility cookies. The application does not currently load advertising trackers, session-replay SDKs, heatmaps, rage-click recorders or non-essential analytics trackers. If a non-essential analytics or replay tool is introduced, it must remain disabled until the user makes an explicit, stored and revocable opt-in choice before that SDK loads.
Contact and grievances
Contact support@cleardues.ai. Credvara configures a grievance-response target not exceeding 90 days, subject to identity verification and applicable law.