Privacy Policy

Account data: your name, email address and a one-way hashed password (Argon2id). If you sign in with Google or GitHub we receive your name and email from that provider.

Content: boards, cards, shapes, calculations, uploaded files, extracted document text, and your conversations with the AI assistant.

Usage and technical data: plan, AI credit and storage usage, and server logs (IP address, browser type, timestamps) used for security, rate limiting and debugging.

Private boards: boards created in offline mode are stored only in your browser and are never sent to us.

• To provide the service: sync boards, run AI features, enable collaboration and search.
• To secure accounts: verification codes, login protection, abuse and fraud prevention.
• To send essential emails such as sign-in codes and account notices. We don’t send marketing email without your consent.
• To fix bugs and improve reliability.

We do not sell personal data, show ads, or use your content to train AI models.

When you use an AI feature, the relevant content from the active board (or your selection) and retrieved related passages are sent to our AI model provider to generate a response. Documents are converted into search embeddings so the assistant can find relevant passages. The AI never reads your other boards.

We share data only with providers that help us run Raxiv, under their own security and confidentiality obligations:

• Cloud hosting and storage (Amazon Web Services).
• AI model and embedding providers, for AI features you choose to use.
• Email delivery providers, for verification codes and account emails.
• Google and GitHub, if you choose to sign in with them.

Some providers may process data outside India. We may also disclose data if required by law.

We use your browser’s local storage to keep you signed in and to remember preferences such as theme and canvas settings, and to store offline private boards. We do not use advertising or third-party tracking cookies.

Traffic is encrypted in transit (HTTPS). Passwords are hashed, uploaded files are stored privately with randomized names, secrets stay server-side, and access to every board is checked on each request. No system is perfectly secure; please use a strong, unique password.

We keep your data while your account is active. Deleting a board removes its content and files. Deleting your account (Account settings → Danger zone) locks it at once and permanently removes the account and its cloud data 7 days later; residual copies in backups expire as backups rotate out. Server logs are kept only as long as needed for security and debugging.

You can access, correct, export or delete your personal data, withdraw consent, and raise a grievance. Most of this is available on the Account page; for anything else email hello@raxiv.in from your account email. We aim to respond within 30 days.

Raxiv is not directed at children under 13. Users under 18 should use Raxiv only with the consent of a parent or guardian. If you believe a child has given us data without consent, contact us and we will delete it.

We will update this page when our practices change and revise the date above. For material changes we will notify signed-in users.

Data controller: Raxiv, India. For privacy questions, data requests or grievances, email hello@raxiv.in.