Privacy PolicyTerms of ServiceService providers

Privacy Policy

Last updated: 13 October 2026

BHASKARA AI LABS (“NeuralSarathi”, “we”, “us”, or “our”) operates the Sarathi desktop app, the model gateway it uses, and the website at neuralsarathi.io (together, the “Service”). This Privacy Policy explains what information we collect, how we use it, where it is processed, and the choices you have.

1. Information We Collect

Account information

Accounts and sign-in are handled by Supabase Auth. When you create an account, we collect your email address and, if you sign in with Google or GitHub, the name and unique identifier that provider shares with us. If you sign up with email, we also keep a password hash (never the password itself). In your account profile you may add your billing region and a phone number with its country calling code.

Devices and sign-in sessions

The Sarathi app signs in through your browser. We keep a record of each signed-in device (the device name the app reports, when it signed in and when it was last used), and an account can have up to three active devices. On your PC, the app stores its sign-in refresh token in Windows Credential Manager. You can see your devices and sign any of them out from your dashboard.

Subscription and billing information

Payments are processed by Razorpay (India). We do not receive or store your full card number; Razorpay gives us payment and subscription identifiers and their status. To issue GST invoices we keep the billing details you enter at checkout (name, business name, address, city, state, postal code, country, phone and GSTIN or tax ID) together with your invoices, payments and credit notes, as tax law requires.

Projects, prompts and model processing

Sarathi keeps your project files and generated code on your computer. To do the work, it sends your prompts and the context needed for each step (for example the relevant file contents, tool results, error messages, screenshots it takes, images you attach, and data it reads from an app you ask it to work in) to Sarathi's model gateway. All model requests go through this gateway, which runs on Google Cloud Run in Tokyo, Japan (region asia-northeast1). The gateway forwards each request either directly to Anthropic or through OpenRouter to AI model providers we select for the kind of work. These providers may process your content in the United States, Singapore, Japan and other countries where they operate, under their own terms and privacy policies. Your prompts and project context therefore leave India. The current list of providers is on our Service providers page; we update it when our providers change.

The gateway does not store the content of your prompts or of the model's responses. For each request it records usage: your account and device session, the number of input, output and cached tokens, the cost and credits charged, the provider's generation identifier, timestamps and a short status note. We use these records to meter your plan and to reconcile our provider bills.

If you use Report on an answer in the app, we email the report to our support inbox through Resend: the reason you choose, your note, an excerpt of the reported answer (up to 4,000 characters), the app version, and identifiers for your account, device session and chat. We do not store reports in our database; we keep the email only to handle the report.

Optional MCP integrations you configure may send the content needed for those features to the services you choose. Their handling of that content is governed by their own terms and privacy policies.

Working in apps on your PC

When you use Sarathi with the apps on your computer, it keeps a list of the apps installed on your PC (their names, versions, publishers, where they are installed and how they can be automated) so it can recognise the app you mean. This list stays on your PC: it is not sent to us, and the model receives only the details of the app you name in a message. You can hide any app from Sarathi in Settings › Apps.

To do a task, Sarathi may read data from that app through the app's own interface (for example TallyPrime's local data interface, a command line or Office automation), run short scripts on your PC, or work in the app's window; when it works in a window, it sends screenshots of that one window to the model and acts there only with the approvals the app asks you for. What it reads, such as ledger names and balances or a sheet's contents, is sent through the gateway to the model as part of that request, like other project context. Scripts run on your PC. Anything that changes data in an app or saves a file asks for your approval first; Sarathi does not delete data in your apps and never enters passwords or payment details. Entries Sarathi posts in an accounting app are recorded by that app (for example in TallyPrime's Edit Log) like your own entries. Sarathi keeps a record of the scripts it ran and the entries it posted on your PC.

Email and service logs

We send transactional email (such as account confirmation, password reset and billing notices) through Supabase Auth and Resend. Our hosting provider keeps standard request logs, such as IP address, time, requested path and response status.

2. How We Use Information

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

We rely on the following providers, each governed by their own privacy policies:

4. Data Retention

We retain your account information for as long as your account is active. If you ask us to delete your account, we delete your personal data, except records we must keep for legal, tax, accounting or fraud-prevention purposes, such as invoices and payment records.

5. Your Rights

You may, at any time:

To exercise any of these rights, email support@neuralsarathi.io.

6. Security

We protect your data using industry-standard measures: encrypted transit (TLS), secrets kept in a managed secret store, row-level database access controls, and scoped cloud permissions. No method of transmission or storage is 100% secure, but we work to protect your information using reasonable safeguards.

7. Children's Privacy

The Service is not directed to anyone under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. Continued use of the Service after changes constitutes acceptance of the revised policy.

9. Contact

Questions about this policy? Email support@neuralsarathi.io.