Privacy Policy

1. Who we are

Sohovi (“we”, “us”, “our”) is a privacy-first data quality platform operated by Selvaganapathy Pari. Our registered domain is sohovi.com. Contact us at hello@sohovi.com.

2. The core principle: your data stays in your browser

When you upload a file or connect a data source, all profiling, scoring, and analysis runs inside a sandboxed Web Worker in your browser tab. Raw rows, cell values, and file bytes are never transmitted to Sohovi servers. You can verify this in your browser's DevTools → Network tab — you will see zero outbound requests containing your data.

The only things we store on our servers are: data quality scores, rule configurations, workflow definitions, and run metadata (timestamps, row counts, column names). Never your actual row values.

3. Information we collect

Account information — When you sign up, we collect your name and email address via Clerk (our authentication provider). This is used solely to identify your account and send transactional emails (billing, password reset).

Usage metadata — We store non-sensitive metadata about your data assets: asset names, column headers (not values), row counts, DQ scores, rule configurations, and timestamps.

Billing information — Payment is handled by Dodo Payments. We store only your subscription plan and status; we never see or store card numbers.

Cookies & analytics — We use cookies required for authentication (Clerk session cookies). We do not run third-party advertising trackers.

4. Google API services — limited use disclosure

Sohovi offers an optional Google Sheets connector. When you use it:

• You authenticate via Google OAuth 2.0 and grant Sohovi read-only access to your spreadsheets (spreadsheets.readonly scope).
• The OAuth access token is stored in browser memory only and is discarded when your session ends. It is never written to disk, localStorage, or our databases.
• Your spreadsheet data is fetched directly from Google's API by your browser and processed locally. Row values are never sent to Sohovi servers.
• Only non-sensitive metadata (spreadsheet name, sheet tab name, last connected timestamp) is saved to identify the connection — no cell data.

Sohovi's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. How we use your information

• To provide and improve the Sohovi service
• To authenticate you and manage your subscription
• To send transactional emails (receipts, password resets)
• To display your data quality history and scores within the dashboard

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.

6. Third-party services

We use the following sub-processors, each with their own privacy policies:

• Clerk — authentication and user management
• Supabase — database (stores metadata only, never raw data)
• Dodo Payments — payment processing
• Vercel — hosting and edge infrastructure

7. Data retention

Account metadata is retained for as long as your account is active. You may delete your account at any time by contacting us at hello@sohovi.com, and we will delete all associated data within 30 days.

8. Your rights

Depending on your location, you may have rights under GDPR, CCPA, or similar laws to access, correct, export, or delete your personal data. To exercise any of these rights, email us at hello@sohovi.com.

9. Security

We use HTTPS for all communications, SOC 2-compliant infrastructure (Supabase, Vercel), and row-level security on all database tables. Because raw data never reaches our servers, our attack surface for data breaches is significantly smaller than traditional cloud platforms.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified via email or an in-app banner. The effective date at the top of this page always reflects the current version.

11. Contact

For any privacy-related questions or requests, contact us at hello@sohovi.com.