Privacy Policy

1. Who this applies to

This policy applies to all users of the Service, including organization admins, approvers, and proposers ("you," "your").

2. Information we collect

Account information: full name, email address, and role within your organization.

Organization information: organization name and logo, billing/subscription details.

Content you create: Architecture Decision Records (ADRs), Tech Stack Registry entries, approval decisions and comments, and file attachments.

Payment information: We use Razorpay to handle subscription billing. We do not store your full card or bank account details — Razorpay processes and stores this data directly.

Usage and technical data: log-in timestamps, IP address, and browser type, collected for security and debugging purposes.

3. How we use your information

To provide and maintain the Service, enforce access control and organizational data isolation, process payments, communicate with you, improve the Service, and comply with legal obligations.

4. AI-assisted features

The Service may use Anthropic's Claude API to help draft ADR content when you explicitly request AI assistance. We do not use your ADR content to train AI models ourselves.

5. Data storage and security

Your data is currently stored using Supabase, hosted in the Mumbai (ap-south-1) region. We use Row Level Security (RLS) and database-level access controls to ensure your organization's data remains isolated from other organizations. File attachments are stored in access-controlled private storage buckets. Data is encrypted both at rest and in transit.

6. Data sharing

We do not sell your personal data. We share data only with Razorpay (payments), Supabase (hosting), Vercel (application hosting), Anthropic (only when you use AI-assisted drafting), or law enforcement/regulators if legally required.

7. Data retention

We retain your data for as long as your account or organization remains active. If your subscription lapses and is not renewed within 90 days, we may archive the associated data. Archived data is retained for up to 1 year, after which it may be permanently deleted.

8. Your rights

You have rights to access, correct, export, or request deletion of your personal data. We provide these rights to all users of the Service, in line with the Digital Personal Data Protection Act, 2023.

You can view and download your personal data anytime from your Profile page. To request deletion of your account, contact your organization's admin, or reach out to our Grievance Officer below.

9. Children's privacy

The Service is not directed at individuals under 18. We do not knowingly collect data from minors.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice.

11. Contact us & Grievance Officer

Questions about this policy? Contact us at contact@adrgov.com.

Registered office: D-704, Rose Icon, Pimple Saudagar, Pune - 411027, Maharashtra, India.

Grievance Officer: Shailesh Rane, Founder. If you have a grievance regarding how your personal data is processed, please write to contact@adrgov.com. We aim to acknowledge and resolve grievances within 30 days.