Privacy Policy

DEVANSH INTERNATIONAL (trading as "EXIM CAMP", "we", "us", "our") is an AI-powered export operating system built for United States-based exporters. This Privacy Policy explains what personal information we collect from users of exportiq.app and its subdomains ("Service"), how we use it, and the rights you have over it. DEVANSH INTERNATIONAL acts as the data controller for personal data processed through the Service.

1. Information We Collect

• Account data: name, email, company, country, and password hash.
• Profile data: plan, plan dates, target destination country, avatar URL.
• Tool run data: inputs you submit (product names, HS/Schedule B codes, buyer information, uploaded product images) and AI-generated outputs.
• Usage data: AI run counts, tool slugs, timestamps, IP address, browser, device type.
• Payment data: handled by our Merchant of Record, Paddle.com Market Limited ("Paddle"); we store only plan status and invoice metadata, never full card numbers.

2. How We Use Information

• Operate and secure the Service and your account.
• Generate AI outputs (routed to our AI providers with your input).
• Enforce plan quotas, expiration, and feature entitlements.
• Send app emails (welcome, receipts, quota alerts). We do not send marketing emails without opt-in.
• Comply with US export-control, tax, and legal obligations.

3. AI Processing

When you run a tool, your input is transmitted to third-party AI model providers (through Lovable AI Gateway) solely to generate the response. We do not permit those providers to train their models on your inputs.

4. Legal Bases for Processing

Where GDPR or similar laws apply, we rely on the following legal bases: (a) performance of a contract to create your account, deliver AI outputs, and provide support; (b) legitimate interests to secure the Service, prevent fraud and abuse, and improve our product; (c) legal obligation to comply with US export-control, tax, accounting, and law-enforcement requirements; and (d) consent, where required, for optional marketing communications or cookies (which you may withdraw at any time).

5. Sharing

We share personal data only with:

• Infrastructure providers (hosting, database, AI gateway).
• Paddle.com Market Limited ("Paddle"), our Merchant of Record, which processes payments, manages subscriptions, calculates and remits sales tax/VAT, issues invoices, and handles refund requests on our behalf. Paddle acts as an independent controller for payment data — see Paddle's Privacy Notice.
• Professional advisers (legal, accounting) under duties of confidentiality.
• Government or law enforcement when legally required.

We never sell personal data.

6. Data Retention

Tool run history is retained while your account is active. You may delete individual runs at any time. On account deletion, personal data is deleted within 30 days except where we must retain records for tax or legal compliance.

7. Your Rights

Depending on your jurisdiction (including US state laws like CCPA/CPRA and, if applicable, GDPR), you may have the right to access, correct, delete, port, or restrict processing of your data, object to processing, withdraw consent, and lodge a complaint with your local data protection authority. Email privacy@exportiq.app to exercise these rights; we respond within 30 days.

8. Security

Data is encrypted in transit (TLS 1.2+) and at rest. Row-level security isolates each user's records. See our Security page for details.

9. Children

The Service is not directed to individuals under 18. We do not knowingly collect data from minors.

10. Changes

We will notify you by email or in-app of material changes at least 14 days before they take effect.

11. Contact

Privacy questions: privacy@exportiq.app.