Back to Home

Privacy Policy

Last updated: September 2026

1. Introduction

TechCora ("we", "us", or "our") operates Dataweaver, a desktop application for spreadsheet data cleanup and transformation using AI. This Privacy Policy explains how we collect, use, and protect your information when you use Dataweaver and its associated web services at dataweaverapp.com.

We are committed to protecting your privacy and ensuring that your personal data is handled responsibly. Dataweaver is designed with a local-first architecture, meaning your data files are processed entirely on your own device.

2. Data We Collect

Account Data

When you create an account, we collect your email address and name for the purpose of authentication and account management. This information is processed through our authentication provider, Keycloak.

Usage Analytics

We do not track which files you open or what you ask Dataweaver to do. We do record how many requests you have made, and the tokens and cost each request consumed, in order to operate your plan and its limits.

Product experiment metrics are off by default and are only collected if you turn them on. When enabled they contain counts and totals only, never file names or file contents.

If the application's interface encounters an error, a crash report is sent automatically. It contains the error message, the internal component trace, the format of the file that was open, and your application version, associated with your account. It does not contain your file or its contents.

Your Data Files

Your spreadsheet, CSV, Excel and other data files are never uploaded, transmitted or stored on any server. Reading, editing, transforming, charting and exporting all happen entirely on your own device, and code generated to carry out your request runs there too, inside a sandbox with no network access.

What Is Sent When You Make a Request

To answer a request, Dataweaver sends the following to our gateway, which passes it to a language model provider:

  • the text of your request;
  • a summary of the data in scope — column names, data types, statistics such as null counts and value ranges, and a small sample of values;
  • the path and name of the file you are working on;
  • results the agent has read during the request, such as rows returned by a database query you asked it to run.

Before any of this leaves your device, Dataweaver detects and replaces personal and secret values — including email addresses, telephone numbers, payment card numbers, Aadhaar and PAN numbers, IP addresses, authentication tokens and API keys. Columns classified as sensitive are reduced to statistics, and columns classified as restricted are withheld entirely.

This redaction is pattern-based. It is thorough but it is not a guarantee, and you should not rely on it alone for data you are contractually prohibited from disclosing to a third party.

We do not store the text of your requests, the model's replies, the code it generates, or the results it produces. Those remain in a database on your own machine.

3. How Your Data Is Processed

Dataweaver processes all spreadsheet and data file operations locally on your machine. When you perform data cleanup, transformations, or AI-assisted operations, these are executed by the application running on your device. Files are never uploaded to any external server for processing.

The AI processing engine operates within the desktop application. Your data remains under your control throughout the entire workflow, from import to export.

4. Authentication and Account Data

Authentication is handled by Keycloak, an open-source identity and access management solution. When you sign in or create an account, Keycloak processes your credentials securely. Your account data (email address and name) is stored within Keycloak.

TechCora does not store your passwords. Password management, including hashing and secure storage, is handled entirely by Keycloak using industry-standard encryption.

5. Third-Party Services

We use the following third-party services:

  • Keycloak — authentication and account management. Processes your email address, name and credentials.
  • Language model providers — to answer your requests. The request context described in section 2 is sent to our gateway and then to a model provider. Depending on the mode you choose and provider availability, this may be OpenAI, Anthropic, Groq, MiniMax or Zhipu AI. Providers are reached over their commercial APIs; some are hosted outside the European Union and India.
  • Razorpay — payment processing for paid plans. Razorpay handles your payment details; we store only a subscription and customer identifier, never card data.
  • Neon — the managed database holding your account, plan and usage records.
  • GitHub — hosts the application downloads and update files.

We do not use analytics services, advertising trackers, tracking pixels, ad networks or data brokers.

6. Data Retention

Your account data (email and name) is retained for as long as your account remains active. If you choose to delete your account, your account data will be removed from our authentication system.

Since your data files are never transmitted to our servers, there is no server-side retention of your files. Files processed by Dataweaver exist only on your local device.

7. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

  • Right of access — You may request a copy of the personal data we hold about you.
  • Right to rectification — You may request correction of inaccurate personal data.
  • Right to erasure — You may request deletion of your personal data.
  • Right to data portability — You may request your data in a structured, machine-readable format.
  • Right to restriction of processing — You may request that we limit how we process your data.
  • Right to object — You may object to the processing of your personal data.

To exercise any of these rights, please contact us at privacy@techcora.in. We will respond to your request within 30 days.

8. Cookies

The Dataweaver web application at dataweaverapp.com uses essential cookies only. These cookies are strictly necessary for the functioning of the website and include:

  • Session cookies — To maintain your authenticated session.
  • Authentication cookies — To securely manage your login state via Keycloak.

We do not use tracking cookies, analytics cookies, or any third-party cookies for advertising or behavioral profiling.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

10. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

See also our Terms of Service.