Privacy policy

This policy covers the varisai.dev website and the hosted Varisai Cloud service, both operated by Higglers Lab. Last updated 2026-10-08.

Self-hosted Varisai

If you run Varisai on your own infrastructure, your messages, streams, users, and API keys live in your MongoDB and never reach us. The software does not phone home, does not report usage, and does not embed third-party analytics in the dashboard.

What we collect on this website

Release-updates waitlist: Your email address, so we can tell you when a release lands. Nothing else.
Contact form: Your name, email, company, company size, and your message, so we can reply.
Server logs: Request paths, timestamps, and IP addresses, kept briefly for security and debugging.
Analytics: If enabled, we use Plausible, which sets no cookies and stores no personal data.

What we collect in Varisai Cloud

Creating an account uses AWS Cognito for sign-in; we store your email and the team role you are assigned. Paid plans are billed through Razorpay, which handles your card details under its own privacy policy; we never see the full card number. To run the service we store the streams, subscriptions, and message payloads you publish, plus per-message delivery history for the retention window you configure.

How we use it

To operate the service you signed up for and to bill for it.
To answer the message you sent us.
To send release announcements you asked for. Every email has an unsubscribe link.
To keep the service secure and to debug failures.

We do not sell personal data, and we do not use it for advertising.

Who else sees it

Only the processors we need to run the service: our hosting provider, AWS (Cognito sign-in), Razorpay (payments), and Plausible (analytics, if enabled). Each receives only the data required for its function.

Retention

Waitlist and contact records are kept until you ask us to delete them. Cloud account data is kept while the account exists and deleted within 30 days of closure. Message data follows the retention you set per stream (7 days by default).

Your rights

You can ask for a copy of your data, a correction, or deletion at any time through the contact form. If you are in the EU, UK, or another jurisdiction with data-protection law, these are the access, rectification, and erasure rights that law gives you, and you may also complain to your local supervisory authority.

Changes

We will update this page when our practices change and update the date above. Material changes to Varisai Cloud terms are also announced by email to account holders.