COVEXA
Privacy Policy
Last updated: August 27, 2026

Covexa (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have, in line with India's Digital Personal Data Protection Act, 2023 (DPDPA) and applicable IT Act regulations.

1. Information We Collect

  • Account information: name, email address, phone number, business name, password (stored encrypted/hashed, never in plain text).
  • Billing information: subscription plan and billing history. Card/bank details are collected and processed directly by our payment processor (e.g. Razorpay); we do not store full card numbers.
  • User content: material databases, prices, custom formulas, measurements, project data, BOQs, quotations, and invoices you create in Covexa.
  • Usage data: log data, device/browser type, IP address, and interactions with the Service, collected to maintain security and improve performance.

2. How We Use Your Information

  • To provide, operate, and maintain the Service, including storing your projects and generating documents.
  • To process subscription payments and send billing-related communications.
  • To respond to support requests and communicate service updates.
  • To detect, prevent, and address security incidents, fraud, or abuse.
  • To improve and develop new features, using aggregated or anonymized data where possible.

3. How We Store and Protect Your Data

Your data is stored with reputable cloud infrastructure providers using industry-standard security practices, including encryption in transit (HTTPS/TLS), encrypted or hashed storage of credentials, access controls limiting data visibility to your own account, and regular security review of dependencies. No online system can be guaranteed 100% secure, but we take reasonable, layered measures to protect your information from unauthorized access.

4. Sharing of Information

We do not sell your personal information. We share data only with:

  • Payment processors, to complete subscription transactions.
  • Cloud hosting and database providers, solely to operate the Service.
  • Law enforcement or regulators, where required by applicable law.

Any third party we share data with is required to protect it under contractual or platform-level obligations.

5. Cookies and Similar Technologies

We may use cookies or similar technologies to keep you logged in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings. See our Cookie Policy for details.

6. Your Rights

Subject to applicable law, you may:

  • Access, correct, or update your personal information via your account settings.
  • Request deletion of your account and associated personal data, subject to any legal retention requirements (e.g. billing records).
  • Withdraw consent for optional data processing, where applicable.

To exercise these rights, contact us at support@covexaapp.com.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service, comply with legal obligations (such as tax/invoicing records), resolve disputes, and enforce our agreements.

8. GDPR — Additional Rights for EU/EEA Users

If you are located in the European Union or European Economic Area, we process your personal data under the General Data Protection Regulation (GDPR), in addition to India's DPDPA. Specifically:

  • Legal basis: we process your data based on your consent (given at sign-up) and contractual necessity (to provide the subscription service you signed up for).
  • You have the right to access, correct, delete, and export your data (data portability) at any time via support@covexaapp.com.
  • You have the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
  • You have the right to lodge a complaint with your local data protection authority.

We do not use your data for automated decision-making with legal or similarly significant effect, and we do not sell personal data to third parties.

Your data may be transferred to and processed in India and other countries where our service providers (hosting, database, payment processing) operate, under appropriate safeguards.

9. Children's Privacy

Covexa is intended for business use by individuals 18 years or older. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice before taking effect.

11. Contact Us

For privacy-related questions or requests, contact us at support@covexaapp.com.