Privacy Policy

1. Information we collect

• Account information — your name, email address, and password (stored in hashed form by our auth provider).
• Business profile — details you choose to add, which may include your city, address, PAN, GSTIN, and bank/UPI details, used to auto-fill your contracts. This can include sensitive financial identifiers, which we store to provide the service.
• Content you provide — client names and emails, meeting recordings and transcripts, notes, and the proposals and contracts you create.
• Payment information — handled by our payment processor (Razorpay). We do not store your full card details on our servers.
• Usage & technical data — IP address, device/browser information, and cookies necessary to keep you signed in and to secure the service.

2. How we use your information

• To provide and operate Torckit — generating proposals and contracts, transcribing recordings, and delivering shareable links.
• To process subscriptions and payments.
• To secure the platform, prevent abuse, and comply with legal obligations.
• To send you service-related communications (e.g. approvals, password resets).

3. AI processing and meeting recordings

When you upload a recording or notes, the audio/text is transcribed and processed by AI to generate your documents. To do this, relevant content is sent to the third-party processors listed below. We do not sell your content, and we do not use your client content to train our own models.

4. Who we share information with (subprocessors)

We share data only with service providers that help us run Torckit, under agreements that require them to protect it:

• Supabase — database and authentication.
• Vercel — application hosting.
• Deepgram, Cloudflare, Groq — speech-to-text transcription of recordings.
• Google (Gemini), Groq — AI generation of proposals and contracts.
• Resend — sending emails on your behalf.
• Razorpay — payment processing.
• Meta (Facebook) — advertising measurement and analytics via the Meta Pixel, so we can understand which ads lead to sign-ups. This does not include your uploaded client content.

We may also disclose information if required by law, or to protect the rights, safety, and security of Torckit and its users.

5. Data retention

We keep your account and document data for as long as your account is active. Uploaded recordings and transcripts are retained only as long as needed to generate and let you edit your documents, and are deleted or anonymised thereafter. You can delete individual documents at any time, and you can ask us to delete your account and associated data.

6. Security

We use industry-standard measures including encryption in transit, database row-level security so users can only access their own data, access controls, and rate limiting. No method of transmission or storage is 100% secure, but we work to protect your information.

7. Your rights

Subject to applicable law, you can request to access, correct, export, or delete your personal information, and object to or restrict certain processing. To exercise any right, email us at torckit.hq@gmail.com and we will respond within a reasonable timeframe.

8. Your rights under India’s DPDP Act, 2023

If you are in India, you have rights under the Digital Personal Data Protection Act, 2023, including the right to access, correct, and erase your personal data, and to grievance redressal. Contact our Grievance Officer at torckit.hq@gmail.com (see our Contact page).

9. Your rights under US / California law (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to correct it. We do not sell your personal information for money. We use the Meta Pixel to measure our advertising, which — depending on your jurisdiction — may be considered “sharing” for cross-context behavioural advertising; you can opt out using your browser controls and your Meta ad-preference settings (see Cookies below). You will not be discriminated against for exercising these rights. To make a request, email torckit.hq@gmail.com.

10. Cookies & advertising

We use essential cookies required to keep you signed in and to keep the service secure. We also use the Meta Pixel, which sets cookies and shares limited event data (such as page views and sign-ups) with Meta so we can measure and improve our advertising. We do not share your uploaded client content with Meta. You can control or block these cookies through your browser settings and adjust ad personalisation in your Meta account’s ad preferences.

11. Children

Torckit is not intended for anyone under 18, and we do not knowingly collect data from children.

12. International transfers

Torckit and its providers may process data in countries other than yours. Where we transfer data internationally, we take steps to ensure it remains protected under applicable law.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above and, for material changes, take reasonable steps to notify you.

14. Contact us

For any privacy question or request, email torckit.hq@gmail.com.