Privacy Policy

This Privacy Policy explains what information Thavasi collects, how we use it, and the choices you have. Thavasi is an email-driven workspace for customs house agents (CHAs), freight forwarders, importers, and exporters. We designed it to connect to your Gmail mailbox so you can manage your shipment-related emails and documents entirely within our platform.

1. Overview

When you connect your Gmail mailbox, Thavasi uses your authorised access to fetch, organise, send, label, and where you choose, delete messages — so you can manage your entire shipment communication workflow from within Thavasi without switching back to Gmail. We do not sell your data.

2. Who we are

Thavasi (the "Service", "we", "us", "our") is operated by Cooper Compass Technologies Private Limited. We act as the data controller for account information you provide, and we process mailbox content on your behalf to provide the Service. Reach us at privacy@coopercompass.com (monitored by the founding team).

3. Data we collect

Account information

When you sign in with Google, we receive your name, email address, profile identifier, and the provider you used — to create and secure your account and workspace.

Mailbox content

We access your Gmail mailbox on your behalf using the permissions you grant us. This includes:

• Message metadata — sender, recipients, subject, date, thread and message identifiers, and labels.
• Message bodies — the text of your emails, used to classify shipments and extract details such as bill-of-lading numbers, AWB numbers, and container references.
• Attachments — documents such as invoices, packing lists, and bills of lading, fetched on demand when you open them in the app.
• Labels — we create, edit, and apply Gmail labels to organise your emails into shipment workflows within your Gmail account.
• Sent mail — when you compose and send email through Thavasi, we send it via your Gmail account on your behalf and store a record of it within your workspace.
• Deleted mail — when you choose to delete an email through Thavasi, we permanently delete it from your Gmail account.

Thavasi keeps a rolling window of your most recent messages in sync, plus messages already linked to a shipment. Messages outside that window are trimmed from our store.

Derived data

From the content above we generate shipment groupings, classifications (e.g. import/export, sea/air/road), and extracted fields, stored to power your workspace.

OAuth tokens

To keep your mailbox in sync we store the OAuth access and refresh tokens issued by Google, scoped to the permissions you granted.

Technical & log data

We collect basic technical information needed to operate and secure the Service, such as IP address, browser/user-agent, and request logs. We do not use third-party advertising or cross-site tracking cookies.

4. How we use data

We use the data described above only to:

• Provide, maintain, and improve the core features of Thavasi;
• Sync your Gmail mailbox and keep your shipment workspace current;
• Classify messages and extract shipment details;
• Send email on your behalf when you compose and send through Thavasi;
• Create, edit, and apply Gmail labels to organise your shipments;
• Delete emails from your Gmail account when you choose to do so through Thavasi;
• Authenticate you and secure your account and workspace;
• Respond to your requests and provide support;
• Detect, prevent, and address abuse, security incidents, and technical issues; and
• Comply with legal obligations.

We do not use your mailbox content for advertising, and we do not sell or rent your data.

5. Google user data & Limited Use

When you connect a Google account, Thavasi requests the following Gmail permissions:

• Read — to fetch and display your shipment-related emails and attachments.
• Send — to send email on your behalf when you compose messages through Thavasi.
• Labels — to create, edit, and apply Gmail labels that organise your emails into shipment workflows.
• Delete — to permanently delete emails from your Gmail account when you choose to do so through Thavasi.

We use Google user data only to provide and improve the user-facing features visible to you in the app. Specifically:

• We do not transfer Google user data to third parties except as necessary to provide or improve the Service, for security purposes, or to comply with applicable law.
• We do not use Google user data for serving advertisements.
• We do not allow humans to read your Google user data unless: (a) you give explicit consent for specific data; (b) it is necessary for security purposes; (c) it is required to comply with applicable law; or (d) the data is aggregated and anonymized for internal operations.

You can review and revoke Thavasi's access at any time at myaccount.google.com/permissions.

6. Automated processing & AI

Thavasi uses automated systems, including machine-learning and AI models, to classify messages and extract shipment details (for example, pulling a container number from an email). This is done to provide the features you see in the app. We do not use your mailbox content to train generalised AI/ML models that serve other users, and any AI providers we use are bound by contract to process data only on our instructions.

7. Sharing & subprocessors

We do not sell your data. We share it only in these limited cases:

• Within your workspace. If you invite teammates, shipment data and mailbox content within that workspace may be visible to other members.
• Service providers (subprocessors). Trusted infrastructure and processing providers (e.g. cloud hosting, database storage, AI/classification) process data strictly on our behalf under confidentiality and data-protection obligations.
• Legal & safety. We may disclose data if required by law or to protect the rights, property, or safety of Thavasi, our users, or the public.
• Business transfers. In a merger, acquisition, or asset sale, data may be transferred subject to this Policy.

8. Data retention

• Mailbox content is kept only within the rolling recent-message window plus messages linked to a shipment; other messages are trimmed automatically.
• Derived shipment data is retained while your account is active.
• OAuth tokens are retained until you disconnect the mailbox or delete your account, after which they are deleted and access stops.
• Account & log data is retained as long as needed to provide the Service and meet legal obligations.

9. Security

We protect your data with industry-standard measures: encryption in transit (TLS), least-privilege access to our systems, scoped mailbox permissions, and access controls around stored credentials. No system is perfectly secure, but we work continuously to safeguard your information.

10. Your rights & choices

Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal data. You can:

• Revoke Thavasi's mailbox access from your Google account at any time;
• Disconnect a mailbox or delete your account from within Thavasi; and
• Contact us at privacy@coopercompass.com to exercise any of your rights.

11. Deleting your data

You can request deletion in two ways: (1) in-app, by disconnecting your mailbox and/or deleting your account, which removes your stored OAuth tokens and account data; or (2) by email to privacy@coopercompass.com from your account email. Upon deletion we remove your account data, stored mailbox content, derived shipment data, and OAuth tokens, except where we must retain limited records to comply with law.

12. International data transfers

We may process and store data in countries other than your own. Where we transfer personal data across borders, we use appropriate safeguards consistent with applicable data-protection law.

13. Children

Thavasi is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under 16.

14. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Continued use after changes take effect constitutes acceptance.