Privacy Policy
Your documents are often sensitive: invoices, health records, identity papers. This page explains what Clasvia does with them, how long data is kept and how to delete it. Version française.
Last updated: October 29, 2026.
Data controller
The data controller is Atlas Software LLC, 412 W 7th St, Clovis, NM 88101, United States, publisher of Clasvia. For any question about your data: contact@clasvia.net.
Your files stay in your Google Drive
- Filed documents are copied into the Google Drive you connected. No external original is deleted.
- Clasvia uses the most restricted Google permission ("drive.file"): it only accesses the files and folders it creates, and the folder you explicitly open to it. The rest of your Drive is not accessible to it.
- Clasvia does not change sharing permissions. A filed document may inherit the permissions of its parent folder.
- Google access authorizations are stored encrypted.
Google user data
Clasvia requests two separate authorizations from Google, each limited to what the service needs.
- Sign in with Google ("openid", "email", "profile"): Clasvia receives your Google account identifier, your email address and your name. They are used only to create your account and sign you in. This sign-in grants no access to Drive.
- Google Drive connection ("openid", "email", "drive.file"): Clasvia creates the filing folders, places your documents in them, renames or moves them when you ask, and checks that they are still there. It only sees the files and folders it created or that you explicitly open to it.
- From the files in your Drive, Clasvia keeps only their identifier, name, folder and link, so it can find them for you.
- Google user data is never sold, rented, used for advertising, or used to train an AI model. It is shared with third parties only to operate the service (hosting, reading documents with AI), or when required by law.
- You can disconnect Google Drive at any time from Clasvia: the authorization is then revoked with Google. You can also remove it from your Google account connections.
Clasvia's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data kept by Clasvia
So that you can find a document with a sentence, Clasvia keeps the text read from your documents, the extracted information (type, date, issuer, amounts) and the link to the file in your Drive. This data is sensitive too and is handled as such.
Retention periods
| Data | Retention and handling |
|---|---|
| File received, after filing | Temporary copy deleted within 24 hours, once its presence in your Drive has been checked. |
| File pending or in error | Kept for 30 days at most. You are notified on day 23 so you can download it or decide what to do with it before deletion. |
| Email received | Seven days at most. Its attachments then follow their own retention period. |
| Message from an unauthorized sender | Held for seven days without being read, then deleted if it is not authorized. |
| Text read and extracted information | Kept as long as the document stays in your index and your account is active. |
| Deletion requested | Removed from search immediately; active data erased within seven days. |
| Backups | Rotated over 30 days; deletions are reapplied if a backup is restored. |
Identity documents
Identity cards, passports, driving licences, residence permits and vehicle registration documents are filed like other documents, with extra precautions: the document number is masked and never appears in the file name, the text read is not kept and no excerpt is shown. Only a short search text (type of document, holder, vehicle) is kept so you can find "my passport" or "the car registration".
Documents read by AI
- Documents are read and analysed by AI providers, through a routing service that excludes providers that collect the data sent.
- The AI has no direct access to your Drive, to the database or to the service's secrets.
- Your files and their text are not used to train any AI model.
- The content of a document cannot change your filing rules: an instruction written in a document is ignored.
Service providers
Clasvia relies on the following providers, which process your data only to operate the service.
| Provider | Role | Processing location |
|---|---|---|
| Hetzner Online GmbH | Hosting of the service, database and temporary file storage | Finland (EU) |
| Google LLC | Sign in with Google and storage of your documents in your Google Drive | United States and EU |
| OpenRouter, Inc. | Routing to the AI providers that read the documents | United States |
| Mailgun (Sinch) | Receiving documents by email and sending the service's emails | EU |
| Stripe | Subscription payments and invoicing | EU and United States |
| Expo (650 Industries, Inc.) | Mobile app notifications | United States |
Atlas Software LLC and several of these providers are located in the United States. These transfers outside the European Union rely on the safeguards provided by the GDPR, in particular the European Commission's standard contractual clauses.
Your controls
- "Remove from Clasvia" deletes a document's index and temporary data. The file stays in your Drive.
- Deleting your account revokes the connections, stops email reception and offers you an export of your information. It does not delete the documents in your Drive.
- Once an unfiled file has expired, it must be sent again: Clasvia is not a backup service nor an archive with evidential value.
Your rights
Your data is processed on the following legal bases:
- Performance of the contract: creating your account, reading, filing and finding your documents, managing your subscription.
- Legitimate interest: securing the service, preventing abuse and fixing errors.
- Legal obligation: keeping billing records for the period required by law.
You have the right to access, rectify, erase, restrict, port and object to the processing of your data. To exercise it, write to contact@clasvia.net from your account's email address: you will receive a reply within one month. You can also delete your account from the app.
If you believe your rights are not respected, you can lodge a complaint with the data protection authority of your country (in France, the CNIL, cnil.fr).
Cookies
This website sets no audience measurement or advertising cookie. The app uses a session cookie, required to sign in to your account.