Privacy policy

Who we are

Tantragyan Technologies Pvt Ltd, A-103, Jai Estate, MIDC Phase 1, Dombivli, Maharashtra 421201, India. Privacy contact: privacy@tantra-gyan.com.

What we collect

• Free scans — the store address you enter, and the public catalogue data at that address. No account needed.
• Accounts — name and email. We never store a password; signing in sends a one-time link to your email.
• Connected sources — the data described in the scope table below.
• Server logs — scan ids, store domains, counts and error classes. Never a token, a header, a request body or a Google or Paddle response.
• Product usage — we record which steps of the product you use (for example: a scan run, Merchant Center connected, a plan bought) against your workspace, in our own database, so we can see where people get stuck. No third-party analytics, no tracking cookies.
• Waitlists — the email and store count you give when you join a waitlist or ask to be notified. One email when it opens; nothing else.
• Payments — handled by Paddle. We never see or store your card details.

The Google API scope and how it is used

Google’s Merchant API has a single scope, which Google labels read/write; there is no read-only scope to request. RevenueCue is read-only by design — we only ever read; the app never writes to your Merchant Center. The only Merchant API calls in the code list and get accounts, products and reports. We never request billing, Ads, Search Console or account-management scopes.

RevenueCue’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not allow humans to read it except where you have explicitly asked us to help with a support issue, where required by law, or for security investigation.

What we never do

• Sell or rent your data.
• Use your data to train models sold to anyone else.
• Write to your store, your feed, or your Merchant Center.
• Share your data with other customers, or build benchmarks from it. Every figure you see is computed from your own store.

How long we keep it

• Scan results — kept so shareable links keep working and the closure ledger can show change over time.
• Account data — while your account is open, then deleted within 30 days of closure.
• OAuth tokens — encrypted at rest; replaced in place when you reconnect or change account. “Disconnect” on the store page revokes RevenueCue’s access at Google and deletes the stored token at once. Revoking at Google directly stops the token working at once too, and we delete it on request.
• Invoices — retained as long as tax law requires.

How it is protected

OAuth tokens and credentials are encrypted at rest with AES-256-GCM and decrypted only in memory for the call they were issued for. Credentials never appear in logs, error reports, or API responses. See Security.

Sub-processors

• Paddle — payments and merchant of record
• Brevo — transactional email
• Our VPS provider — infrastructure hosting. We self-host on our own servers (Docker); this line will name the specific provider once one is chosen.
• Google — only the APIs you connect

Your rights

Access, correction, deletion, export, and objection. Email privacy@tantra-gyan.com and we will respond within 30 days. You can revoke Google access at any time yourself: Disconnect under Merchant Center on the store page (Stores → your store) revokes it at Google and deletes the token, or remove RevenueCue at myaccount.google.com/permissions without going through us. Scan results already made stay in your history; email us to have them deleted.

Changes

Material changes are announced by email at least 30 days before taking effect.