Legal

Privacy Policy

Last updated: 29 October 2026

Qlarity (qlarity-dashboard.vercel.app) helps companies compare their ad spend with the leads, qualified leads and sales in their CRM. It is run by Shetty Harikrishna, an individual based in India (“we”, “us”). This policy explains what personal data Qlarity handles, why, where it is kept and the choices you have.

1. The data we handle

Account data, about the people who use Qlarity

• Your name (if you add one) and email address.
• Your password, stored only as a one-way scrypt hash; we can't see or recover it.
• Sign-in times, the workspaces you belong to and your role in each, and your personal view settings.
• Emails we send you: account confirmation and password-reset links.

Customer data, which a company brings into its workspace

• Ad data from Meta Ads or Google Ads (campaigns, ad sets, ads, spend, results, impressions, clicks), uploaded as files or read with the company's own access token.
• CRM lead data (uploaded or pushed from the CRM): lead id, dates, source, campaign, status, the team member assigned, and the lead's name, phone number and email address.
• Website visits, only if the company adds Qlarity's tracking script to its own website: an anonymous visitor id, the page, the referring site, ad click ids and campaign tags. When a visitor submits a form, the phone or email they typed is sent so the lead can be matched to its visits; it is stored only as a one-way hash, never in readable form. The company can switch tracking off for visitors who decline it.
• Workspace settings, tokens and keys: brands, rules, targets, team members; Meta, Google and AI provider tokens (stored encrypted); API keys (stored only as a hash).

2. Who decides about lead data

For customer data, the company that uses Qlarity decides what is collected and why. Under India's Digital Personal Data Protection Act, 2023, that company is the Data Fiduciary, and we process the data on its behalf and only on its instructions. Each company is responsible for having a lawful basis, such as consent, for the lead data it brings to Qlarity and for telling its own leads and website visitors about it.

If you are a lead or a website visitor of a company that uses Qlarity, please contact that company first. We will help it answer your request.

3. How we use data

• To run Qlarity for the workspace: reports, attribution, alerts, the AI analyst and the features the company switches on.
• To create and secure accounts, send account emails, and prevent abuse.
• To give support when a company asks for it.

We don't sell personal data, don't use it for advertising, and don't use customer data to train AI models. Each workspace's data is used for that workspace only.

4. Where data is kept and who helps us

Qlarity's database and its backups are stored in India, in Amazon Web Services' Mumbai region. We use these service providers:

Only when a workspace turns them on, data also goes to:

• Meta and Google Ads: Qlarity reads the company's ad data with its own token. If the company switches on Meta's Conversions API or audiences, the phone numbers and emails of its leads are sent to Meta as one-way hashes, as Meta requires.
• Telegram: alerts and reports go to the person the company chooses.
• The AI provider the workspace owner chooses (for example Anthropic, OpenAI, Google or another service): see section 5.

5. AI features

Ask Qlarity and the morning digest send the question and the business numbers needed to answer it to the AI provider the workspace owner has chosen, using that owner's own key. The AI may see campaign names, lead ids, statuses and the names of the team members assigned to leads. It never receives a lead's name, phone number or email address. Each provider handles that data under its own terms, which the workspace owner accepts when adding the key.

6. How we protect data

• All traffic uses HTTPS. The database can't be reached from the internet, only through Qlarity's API.
• Every row is tagged with its workspace, and the database itself refuses to show or change another workspace's rows.
• The server's disk is encrypted. Tokens are stored encrypted, passwords and API keys only as one-way hashes.
• A password change or reset signs out every other session. Ten wrong passwords in a row lock the account for 15 minutes.
• Backups are private, and the server can add backups but can't read or delete them.

We, as the operator, have administrative access to the server to run and maintain it, and we use it only for that. No system is perfectly secure. If a breach affects your data, we will tell the affected companies and, where the law requires it, the authorities, without undue delay.

7. How long we keep data

• Workspace data is kept while the workspace is active. When a company asks us to delete its workspace, or its account is closed, we delete it within 30 days.
• Backups are kept for 14 days on the server and 30 days in storage, so deleted data disappears from backups within 30 days after that.
• One-time email links expire (48 hours for confirmation, 1 hour for password reset) and are cleared out after that; only a hash of each link is ever stored.
• Short technical logs kept by our providers are removed on their usual schedules.

8. Cookies and browser storage

The Qlarity dashboard uses no advertising or analytics cookies. It keeps your sign-in session and a few preferences (theme, last workspace, view settings) in your browser's storage; signing out removes the session.

Qlarity's tracking script, if a company adds it to its own website, sets a first-party cookie there to recognise returning visitors. That company is responsible for describing it in its own cookie notice and for asking consent where needed.

9. Your rights

You can ask to access, correct or erase your personal data, ask how it is used, and nominate someone to act for you, as provided by the Digital Personal Data Protection Act, 2023. You can change your name and password in Qlarity yourself. For anything else, contact us (section 12). For lead or visitor data held by a company that uses Qlarity, please contact that company; we will help it respond.

10. Children

Qlarity is a business tool for people aged 18 or over. We don't knowingly hold children's account data.

11. Changes

When we change this policy we update the date above. For significant changes we also tell workspace owners by email before they take effect.

12. Contact and grievances

Questions, requests and grievances about personal data: Shetty Harikrishna, harikrishnashetty1@gmail.com. We reply as soon as we can and within the time the law requires.