Privacy Policy

Peoval is operated by Peoval Private Limited ("Peoval", "we", "us"), a company incorporated in India. This policy explains what we collect, why, and the rights you have as a Data Principal under India's Digital Personal Data Protection Act, 2023 (DPDP Act). It applies to peoval.com and the Peoval product.

Who is the Data Fiduciary

Peoval Private Limited, FL-1081, 10th Floor, Jasmine Gaur Saundaryam, Knowledge Park-I, Greater Noida, Gautam Buddha Nagar, Uttar Pradesh 201310, India. Udyam registration UDYAM-UP-28-0226445 · DPIIT-recognised startup DIPP267211.

What we collect

• Account details you give us (email, name, city, role, region, source).
• Your Peoval workspace content, tasks, skills, tools, learning notes, goals, and self-reported compensation.
• Feedback you submit through the feedback widget, including optional screenshot links.
• Basic browser info (user agent, viewport, timezone) to reproduce reported issues.
• If you reserve Founding Beta Access, we record the reservation and Razorpay's payment reference, we never store your card details.

What we do not collect during Alpha

• Payslips, offer letters, appraisals, or other documents. Upload flows are disabled in Alpha.
• Verified compensation benchmarks. Peoval Alpha does not yet run verified benchmarking.

Purposes and legal basis

Under the DPDP Act we process personal data only for these specified purposes, based on your consent given at sign-up and at each relevant surface:

• To operate your Peoval account and Ovals.
• To generate your private AI-assisted read on how your work is changing.
• To operate the Founding Beta Access reservation and send you related product updates.
• To triage bugs and improve the product before wider release.
• To meet legal, tax, and accounting obligations in India.

Sharing and processors

We do not sell your data. To operate Peoval we use these Data Processors, each bound by contract to process data only on our instructions:

• Supabase, database, authentication, and file storage (EU region).
• Cloudflare Workers, application hosting and CDN.
• Resend, transactional and product email.
• Google Analytics 4 and Amplitude, aggregate product analytics (no raw compensation values, no full feedback bodies).
• Google Gemini via Lovable AI Gateway, generates your per-task AI read; inputs are not used to train third-party models.
• Razorpay, payment processing for India reservations.
• Make.com, internal operations alerts for urgent feedback and payment events.

We never share your individual compensation or contact information with other users. Group insights in Ovals are only shown as anonymous averages once enough trusted peers are present.

Cross-border transfers

Some processors above host data outside India. Where they do, transfers happen only to jurisdictions not restricted by the Central Government under the DPDP Act, under contractual safeguards.

Retention

We keep your data while your account is active and for as long as necessary for the purposes above. Payment, tax, and refund records are retained for statutory periods under Indian law. When retention lapses or you withdraw consent, we erase or irreversibly de-identify the data.

Your rights as a Data Principal

Under the DPDP Act you can, in relation to your personal data:

• Access a summary of what we hold and how it is processed.
• Correct or complete data that is inaccurate or incomplete.
• Erase data that is no longer needed for the specified purpose.
• Withdraw consent at any time, this does not affect processing already carried out.
• Nominate another individual to exercise your rights in the event of your death or incapacity.
• Grievance redressal, write to our Grievance Officer below; you may then escalate to the Data Protection Board of India.

You can reset signed-in workspace data or request full account deletion at any time via /data-deletion. We aim to complete deletion requests within 30 days.

Children

Peoval is not directed at anyone under 18 and we do not knowingly collect data from children.

Security

We use encrypted connections (TLS), row-level security on our database, least-privilege access for our processors, and audit logging on privileged operations. No system is perfectly secure, we will notify you and the Data Protection Board of India of any personal data breach as required under the DPDP Act.

Grievance Officer / Data Protection Contact

Abhishek Bhalotia
Grievance Officer, Peoval Private Limited
Email: hello@peoval.com
Phone: +91-8979934743
Address: FL-1081, 10th Floor, Jasmine Gaur Saundaryam, Knowledge Park-I, Greater Noida, Gautam Buddha Nagar, Uttar Pradesh 201310, India.

We respond to grievances within 30 days. If you are not satisfied, you may approach the Data Protection Board of India under Section 27 of the DPDP Act.

Changes

We may update this policy as Peoval matures. Material changes will be communicated by email or on this page.