wallrasPrivacy policy
This policy explains what personal data Wallras (“we”, “us”) collects through wallras.com, your account and the Wallras software, why we collect it, who we share it with, and the rights you have. Wallras is operated from India. For the personal data described here, we are the data fiduciary (under India’s Digital Personal Data Protection Act, 2023) and the data controller (under the GDPR, where it applies).
1. The short version
- Your AI data never reaches us. The Wallras software runs on your own servers. Your prompts, answers, traces and logs stay there, under your control.
- Licensed installations send us three things: the license key, a random installation id and a monthly count of successful requests, so we can renew your license and bill correctly. On the Free plan the software sends us nothing.
- For your account we keep your email address, how you signed in, and your plan and billing history.
- No advertising, no tracking cookies, no data sales. We never sell or rent personal data, and we don’t use it to train AI models.
2. What we collect
- Account data: your email address; your name and profile picture if your sign-in provider (Google, GitHub or Microsoft) shares them; and an account id from that provider. If you sign in with email, we never see your password in plain text: it’s stored only as a secure hash by our sign-in provider.
- License and usage data: license key, installation id, monthly count of successful requests, the time of each license check and the IP address it came from.
- Billing data: your plan, invoices, billing name, country and tax details. Card, UPI and other payments are processed by our payment provider, Dodo Payments, as merchant of record; we receive payment confirmations, never your full card number or bank credentials.
- Communications: messages you send us, and our replies.
- Security logs: standard server logs (IP address, time, page or API endpoint requested, and errors), used to keep the service secure and working.
- Trial records: a normalised form of your email address, so each person receives one free trial.
We don’t collect sensitive personal data (such as health, financial account or biometric data) about you, and we ask that you don’t send it to us.
3. Why we use it, and on what basis
- To provide the service you signed up for: your account, licenses, trials, usage limits and support (performance of our contract with you).
- To bill and keep records required by tax and accounting law (legal obligation).
- To keep the service secure: detecting abuse, fraud, repeated trials and license misuse (our legitimate interests, and yours, in a secure service).
- To tell you about your account: usage warnings, bills, security notices and important changes (performance of contract).
- Product news only if you ask for it (consent, which you can withdraw at any time).
4. Cookies and local storage
We use no advertising or analytics cookies, and this website loads no scripts, fonts or trackers from other companies. When you sign in, your browser stores a session token in local storage so you stay signed in; signing out removes it. That storage is strictly necessary for the service and is never used to track you.
5. Who we share it with
We share personal data only with service providers that help us run Wallras, each bound to use it only to provide their service to us:
- Supabase: sign-in and account authentication.
- Render: hosting for this website and our license server.
- Dodo Payments: payments, invoicing and tax, as merchant of record.
- Google, GitHub and Microsoft: only if you choose to sign in with them.
- Our email provider: to send and receive email.
We may also disclose data when required by law or a valid legal request, to protect our rights or the safety of others, or as part of a merger or sale of the business, in which case this policy continues to protect it. We never sell personal data.
6. International transfers
Some of our providers process data outside India, including in the United States and the European Union. Where the law requires, transfers are covered by appropriate safeguards such as standard contractual clauses.
7. How long we keep it
- Account data: while your account is open, and up to 90 days after you close it.
- License and usage records: 24 months, so bills can be checked.
- Billing records: as long as tax and accounting law requires (generally up to 8 years in India).
- Security logs: up to 30 days, longer only while investigating an incident.
- Trial records: for as long as needed to keep trials to one per person.
8. How we protect it
Connections are encrypted (HTTPS), access to production systems is limited and protected by two-factor authentication, license keys are cryptographically signed, and our software and server are tested for security on every release. See our security page. If a personal data breach affects you, we’ll notify you and the relevant authority as the law requires.
9. Your rights
Depending on where you live, including under the DPDP Act and the GDPR, you can:
- access the personal data we hold about you, and get a copy;
- correct or complete it;
- have it erased, unless we must keep it by law (for example, billing records);
- object to or restrict certain uses, and withdraw consent at any time;
- nominate someone to exercise your rights if you’re unable to;
- complain to the Data Protection Board of India or your local data protection authority.
Email privacy@wallras.com. We reply within 30 days and may need to confirm your identity first. California residents: we don’t sell or share personal information for cross-context advertising.
10. Grievance officer
For any concern about your personal data, contact our grievance officer at privacy@wallras.com. We acknowledge grievances within 72 hours and resolve them within 30 days.
11. Data inside your Wallras installation
Data that passes through Wallras on your servers (your users’ prompts and answers, for example) is controlled by you, not us. You decide what is recorded, for how long, and you can delete it at any time with the built-in deletion tools. You are responsible for having a lawful basis and giving your own users any notices the law requires.
12. Children
Wallras is a business service and isn’t meant for anyone under 18. We don’t knowingly collect data from children; if you believe a child has given us data, contact us and we’ll delete it.
13. Changes
If we change this policy in a way that matters, we’ll update the date above and email account holders before the change takes effect.
14. Contact
Privacy questions: privacy@wallras.com. Everything else: hello@wallras.com.