Privacy Policy
Last updated 4 November 2026
Draft — to be reviewed by counsel before Tharas is opened to the public.
What Tharas knows about you, why, who else sees it, and how to have it changed or deleted.
The short version
- We keep what we need to run your account, build your projects, and make Tharas better.
- We never sell your data.
- Emails about your account always come; news and offers you can stop with one click.
- Your projects are not used to train AI models.
- Under 18? A parent or guardian must agree first.
- You can ask to see, fix or delete your data at any time: tech@tharastech.com.
1. Who we are
- Company
- Tharas Tech India Private Limited
- CIN
- U62013AP2023PTC111212
- Registered office
- No. 92-12-951, 4th Line, Ramireddy Nagar, Guntur, Andhra Pradesh, India
- Grievance officer
- See section 19
- Contact
- tech@tharastech.com
Under India’s Digital Personal Data Protection Act, 2023, we are the “data fiduciary” for your account: we decide what is kept and why, and we answer for it.
2. What we keep
- Your account: your email address; your password, scrambled so that no one — not even us — can read it; whether you confirmed your email; your plan; and the network address you signed up from (so one person cannot open many free accounts).
- If you sign in with Google: your email address, whether Google has checked it, and a number Google uses for your account. Not your name, photo, contacts or anything else.
- Your projects: what you write to Tharas, the files it builds, the history of each build, and the sites you publish with their earlier versions.
- How much building you use: for each request to the AI model, how much it read and wrote and what it cost, so plans and limits work.
- How you use Tharas: which pages you open and what you click, how long things take, your browser and device type, and your rough location from your network address — to see what works and where people get stuck.
- Payments: the Razorpay order and payment numbers, the amount, the plan, and your invoices. Your card, UPI or bank details go to Razorpay, never to us.
- Links we email you: a scrambled copy of each confirmation or password link, so it works only once and expires.
3. How we get it
From you, when you sign up and use Tharas; from Google, only if you choose to sign in with Google; and from Razorpay, which tells us whether a payment went through.
4. Why we use it
- To run your account and keep you signed in.
- To build, preview and publish your projects.
- To take payments and send invoices, as tax law requires.
- To email you about your account: confirmation links, password resets, invoices, and changes to your plan or these terms.
- To understand how Tharas is used — which features help, where people get stuck — and make it better. We look at this mostly as totals, not person by person.
- To send you news, tips, offers and short surveys about Tharas. You can stop these at any time (section 15).
- To keep Tharas safe: stopping abuse, spam accounts and attacks.
- To find and fix faults. When we look at a project to do this, it is only to fix the fault, or because you asked for help, or because it was reported.
You agree to this when you make an account. You can take that back at any time — stop news emails with one click, or delete your account (section 11).
5. Do we train AI on your data?
No. We do not use your projects or messages to train AI models. To build your project, what you wrote and the parts of the project being worked on are sent to the AI model (Anthropic’s Claude). Anthropic uses them to answer that request; under its terms for businesses, it does not train its models on them.
6. Decisions made automatically
A few things happen automatically, without a person deciding: refusing a throwaway email address, limiting how many accounts open from one network in a day, and pausing building when a plan’s monthly amount is used up. If you think one of these got it wrong, write to us and a person will look.
7. Who else gets your data
Only the companies that help us run Tharas, and only what each one needs:
| Who | What for | Where |
|---|---|---|
| Anthropic (Claude) | The AI model that writes your project’s code. | United States |
| ScaleMax | Our gateway to the AI model: passes each request on to it. | to be published before launch |
| Sign-in, only when you choose Continue with Google. | United States | |
| Razorpay | Takes payments. | India |
| Resend | Sends our emails: confirmation links, password resets, invoices. | United States |
| Railway | Runs the Tharas app and its database. | to be published before launch |
| Cloudflare (R2) | Stores copies of project files and published sites. | to be published before launch |
| Our build servers | Build, test and preview your projects, and serve published sites. | to be published before launch |
As Tharas grows we may add services of the same kinds — for example, to measure how Tharas is used or to send emails. We add each one to this list before it receives any of your data, and they may use it only to do that job for us.
Also: anyone you share a preview link with, and everyone, for a site you publish. We give data to the police or a court only when the law requires it. We never sell your data.
8. Data outside India
Some of these companies are outside India, so some of your data is handled there — for example, what you write to Tharas goes to the AI model in the United States. We only use countries the Indian government allows data to go to.
9. How long we keep it
For as long as you have your account. When you delete it, we delete your account, projects and sites within 30 days. Invoices and payment records are kept for as long as tax and company law require (up to 8 years). Copies in backups disappear as the backups are replaced.
10. How we keep it safe
- Passwords and sign-in sessions are stored only in scrambled form.
- Each project is built in a sealed space of its own that cannot see other projects.
- Previews open only with a private link that expires.
- Everything travels encrypted (https).
No system is perfectly safe. If your data is ever exposed, we will tell you and the Data Protection Board as the law requires.
11. Your rights
You can ask us to:
- tell you what we keep about you, and who we shared it with;
- correct anything wrong, or fill in something missing;
- delete your data and your account;
- name someone who can do this for you if you die or cannot do it yourself.
Write to tech@tharastech.com from your account’s email address. We answer within 30 days. If you are not happy with the answer, write to our grievance officer (section 19).
12. Children
Tharas can be used by people under 18 with the agreement of a parent or legal guardian, who agrees on the child’s behalf. As the law requires, we do not track a child’s behaviour, show them targeted ads, or build profiles of them, and we send them no offers. A parent or guardian can ask to see or delete their child’s data at any time.
13. Cookies
- __Host-tharas_session keeps you signed in, for up to 30 days. We store only a scrambled copy.
- __Host-tharas_oauth lasts 10 minutes, only while you sign in with Google, to make sure the answer coming back is for you.
- __Host-tharas_draft lasts 5 minutes, only when you go back from the questions, to put your idea back in the box.
- A preview pass, on your project’s preview address only, lets your own browser open your preview until the link expires.
- Your light or dark choice is saved in your own browser, not sent to us.
Today these are the only ones, and there are no advertising cookies. If we add cookies to measure how Tharas is used, we will list them here first, and ask you before setting any that the law says need your OK. Razorpay’s payment window may set its own cookies while you pay.
14. People who visit what you make
If your site or app collects details from its visitors, it is your site: you decide what it asks for and you must tell your visitors what you do with it. We keep that data only as part of your project and use it for nothing else.
15. Emails
We send two kinds of email:
- About your account: confirmation and password links, invoices, and important changes to your plan, these terms or this policy. These always come while you have an account.
- News from Tharas: new features, tips, offers and short surveys. Every one has a one-click way to stop, and stopping never affects your account.
We may see whether an email was opened or a link in it was clicked, to learn which emails are useful.
16. Other websites and services
Tharas links to other services, such as Google’s sign-in page and Razorpay’s payment window, and sites made with Tharas may link anywhere. What happens on those pages follows their own privacy policies, not this one; please read theirs.
17. Changes to this policy
When we start using your data in a new way, or add a new kind of service, we update this policy first and email you about important changes. The date at the top shows the latest version. See also the terms.
18. How to contact us
For anything about your data — a question, a request to see, fix or delete it — write to tech@tharastech.com from your account’s email address. Post: Tharas Tech India Private Limited, No. 92-12-951, 4th Line, Ramireddy Nagar, Guntur, Andhra Pradesh, India.
19. Grievance officer
If you have a complaint about Tharas, about a site made with it, or about how we handle your personal data, you can write to our grievance officer. They are the person responsible for answering it.
- Name
- Sainadh
- tech@tharastech.com
- Address
- Tharas Tech India Private Limited, No. 92-12-951, 4th Line, Ramireddy Nagar, Guntur, Andhra Pradesh, India
Say who you are, what the complaint is about (with a link, if it is a site), and what you would like us to do. We acknowledge it within 24 hours and resolve it within 15 days.
20. If you want to complain to the authorities
If we have not solved your complaint, you can go to the Data Protection Board of India, set up under the Digital Personal Data Protection Act, 2023.