Core
Privacy Policy
What data PawOS collects, how it's used and stored, and your rights over it in India, the EU/EEA, Australia, and the United States.
Last updated: 31 August 2026
1. Definitions
"PawOS" means the PawOS desktop application, the pawos.revantaai.com website, and the backend services (authentication, billing, Organization Workspace storage, AI reasoning routing) that support them.
"You" or "User" means the individual or organization using PawOS.
"We," "us," or "our" refers to Revanta AI.
"Account" means a PawOS account created via email/password or Google sign-in, authenticated through our authentication provider (Supabase Auth).
"Self-Service Subscription" means a recurring Paw Go (free), Pro, Pro Max, Team, or Enterprise subscription that you or your organization activate, upgrade, downgrade, or cancel directly inside PawOS without needing to contact sales.
"Seat" means one licensed member of a Team or Enterprise Organization Workspace. Team seats are billed as either a Standard or Premium Seat Type at the rate shown on our Pricing page; Enterprise seats are billed at a uniform base rate plus usage.
"Organization Workspace" (or "Organization") means a shared Team or Enterprise environment scoped to a verified email domain, with its own members, roles, shared credit pool, and audit log.
"AI Credits" and "Ticket Balance" mean the prepaid usage mechanisms that fund, respectively, general AI conversation/reasoning usage on paid individual tiers and the Autonomous Ticket System. Both are prepaid wallets, never a monthly allowance that expires unused.
"Autonomous Ticket System" (or "Autonomous Engineering Task") means PawOS's workflow for autonomously investigating, planning, implementing, testing, and delivering a real engineering ticket, billed only on genuine completion (a real pull request opened and the originating ticket updated) — never for a failed, cancelled, retry-limit-reached, or approval-denied run.
"Companion Runtime" means PawOS's 3D animated companion feature (default character "Paw," or a companion you upload or customize), including its voice, personality, and memory features.
"Browser Automation" and "Desktop Automation" mean PawOS runtimes that, with your confirmation, control a real browser session or take actions on your device (files, applications, processes, terminals) on your behalf.
"Connector" means an integration (for example, Google Workspace, GitHub, GitLab, Linear, Jira, or a hosting/cloud provider) that you explicitly authorize, typically via OAuth or an API token you supply, to let PawOS take actions on a connected third-party account.
"Confirmation Gate" means the approval prompt PawOS shows before a destructive or production-impacting action runs, requiring your explicit confirmation before it proceeds.
2. Who we are
This Privacy Policy is issued by Revanta AI, a business registered under India's Udyam (Micro, Small & Medium Enterprises) registration scheme, based in Hyderabad, Telangana, India, referred to as "we," "us," or "our."
3. What we collect
Account information: your email address and authentication method (email/password or Google sign-in), handled through our authentication provider, Supabase Auth.
Content you explicitly share into an Organization Workspace — for example, a shared document, a CRM contact, or a companion configuration.
Diagnostic reports you choose to submit through the in-app bug/feature reporting tool.
Billing records for completed transactions, processed by our payment processor, Razorpay.
Basic technical data from the pawos.revantaai.com website (IP address, browser type, pages visited) for security and analytics purposes, described further in our Cookie Policy.
We do not collect your local files, companion memory, conversation history, or Workspace Intelligence unless you explicitly share them into an Organization Workspace or submit them as part of a diagnostic report.
4. How your data is handled
Most PawOS data — companion memory, conversation history, local Workspace Intelligence, and project analysis — is stored locally on your device and is never transmitted to us, except where it must pass through a third-party AI provider to generate a response, or where you explicitly share it into an Organization Workspace.
Organization Workspace data is hosted with our infrastructure provider, Supabase, with row-level security scoping every record to the requesting organization so that one organization's data is never visible to another, or to us, outside of what is necessary to operate the service and respond to a valid legal or support request.
5. How we use your data
To operate your account and authenticate you; to process subscription and Ticket Balance payments; to respond to support requests, grievances, and security reports; to maintain the security and integrity of PawOS (fraud prevention, abuse detection, rate limiting); and to understand aggregated, non-identifying product usage so we can improve PawOS.
We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you, and we do not sell your personal data.
6. AI processing
When you use an AI-powered feature, the relevant request content — your message, or the context needed to complete a task — is sent to our third-party AI provider(s) to generate a response, and is handled under that provider's own terms of service, not ours.
We do not use your conversation content to train our own AI models.
7. Sub-processors
We rely on the following categories of sub-processor to operate PawOS: cloud database and authentication infrastructure (Supabase); payment processing (Razorpay); email delivery for account and billing notifications; and third-party AI providers that generate reasoning responses when you use an AI-powered feature. Each is bound by its own data-processing terms with us, and none is authorized to use your data for purposes beyond providing its service to us.
We will notify Organization customers of a material change in sub-processor (for example, a new AI provider) via the Changelog or direct notice, consistent with the Changes to this document section above.
8. Cookies
The PawOS desktop application does not use browser cookies. The pawos.revantaai.com website uses strictly necessary cookies for authentication and checkout, and optional analytics cookies subject to your consent. See our Cookie Policy for full detail and how to change your choice.
9. Data retention
We retain account data for as long as your account is active, plus a reasonable period afterward to handle disputes and comply with legal obligations. Billing and invoice records are retained for the period required by applicable tax and accounting law. Locally stored data (companion memory, conversation history, Workspace Intelligence) is retained on your device under your own control and is deleted when you delete it or uninstall PawOS.
10. International data transfers
Personal data we hold is processed in India, where Revanta AI is based, and by sub-processors located in other countries as described above. See the EU/EEA section below for our current position on cross-border transfer safeguards.
11. Your privacy rights by region
The rights below apply regardless of which plan or Organization you use PawOS under, and are in addition to, not a replacement for, the general description of your rights elsewhere in this document.
12. India — Digital Personal Data Protection Act, 2023
If you are located in India, you have the right to obtain a summary of the personal data we process about you and the processing activities carried out, to correct, complete, and update your personal data, to have it erased once it is no longer needed for the purpose it was collected for (subject to our legal retention obligations, for example completed billing records), to withdraw consent at any time with the same ease with which it was given, to nominate another individual to exercise your rights in the event of your death or incapacity, and to file a complaint with our Grievance Officer and, if unresolved, with the Data Protection Board of India.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, and may mean a feature that depends on that processing (for example, sharing data into an Organization Workspace) is no longer available to you.
13. European Union / European Economic Area, including Finland — GDPR
If you are located in the EU/EEA, the GDPR applies to our processing of your personal data because we offer PawOS to you. We process your personal data on the legal bases of contract performance (operating your account and subscription), legitimate interest (security, fraud prevention, and improving PawOS), and consent (for example, optional analytics or communications). You have the right to request access to, rectification of, or erasure of your personal data, to request that we restrict processing, to request a copy of the data you provided to us, and to object to processing based on legitimate interest. We handle these requests manually on a case-by-case basis at privacy@revantaai.com; we do not yet offer a self-service export or deletion tool inside PawOS itself.
Personal data is transferred to and processed in India, where we are based, and in the other countries where our sub-processors operate. We have not executed Standard Contractual Clauses or another formal Article 46 transfer mechanism with every sub-processor as of this writing; we rely instead on each sub-processor's own standard data-protection terms.
Revanta AI has not appointed a representative in the EU under Article 27 GDPR. EU/EEA data subjects can direct any GDPR request to privacy@revantaai.com and retain the right to lodge a complaint with their local supervisory authority regardless — for users in Finland, the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).
14. Australia — Privacy Act 1988
Given Revanta AI's current size, we are likely a "small business operator" as defined by the Privacy Act 1988 (Cth), meaning the Act's Australian Privacy Principles (APPs) may not apply to us as a strict legal obligation. We have not built the specific mechanisms the APPs contemplate (for example, a formal APP-compliant collection notice regime).
Regardless, if you are in Australia, you can ask us what personal information we hold about you and request that we correct it by writing to privacy@revantaai.com, and we will respond as a matter of practice. You are also free to raise a concern with the Office of the Australian Information Commissioner (OAIC), though as a likely small business operator we may fall outside the Privacy Act's direct enforcement scope.
15. United States
There is no single federal privacy law of general application in the United States, and a number of states have each enacted their own comprehensive privacy law (for example, California's CCPA/CPRA) with different thresholds and rights. We have not determined which, if any, of these state laws currently apply to us, and this document does not claim compliance with any specific one.
As a matter of current practice, available to every PawOS user in the United States regardless of state: you can email privacy@revantaai.com to ask what personal data we hold about you, to request that we correct it, or to request deletion of your account and associated data, and we will act on that request manually. We do not sell personal data, and we do not share personal data with third parties for cross-context behavioral advertising.
16. Children's privacy
PawOS is not directed at, and is not intended for use by, children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact privacy@revantaai.com and we will delete it.
17. Grievance Officer
Revanta AI designates a Grievance Officer to receive and act on complaints about this document or the handling of your personal data, consistent with the grievance redressal expected of a data fiduciary under India's Digital Personal Data Protection Act, 2023.
Grievance Officer, PawOS — reachable at privacy@revantaai.com (privacy and data-protection matters) or legal@revantaai.com (other legal complaints). We aim to acknowledge and address grievances as promptly as we reasonably can. This role-based contact is intentionally not tied to one named individual, so it stays valid even as our team changes.
18. Contact
General questions about this document: legal@revantaai.com. Privacy and data-protection requests: privacy@revantaai.com. Security reports: security@revantaai.com, following our Vulnerability Disclosure Policy. See also our Grievance Officer contact above where this document includes one.
19. Changes to this document
We may revise this document as PawOS's features or applicable law change. The date at the top of this page reflects the version currently in effect. Where a change is material, we will note it in our Changelog and, where required by law, notify affected users directly (for example, by email or an in-app notice) before the change takes effect. Continuing to use PawOS after a revised document takes effect constitutes acceptance of it.