Privacy and your workspace

Karz Setu is an early UAT preparation workspace operated by Websauce. It prepares information for human review; it does not file with the government.

Your starting note

A note entered on the landing page can be restored in this browser tab for 30 minutes while you sign in. The temporary handoff record is removed when used or when the app checks that it has expired. Once restored, your editable workspace draft remains in that tab until you send it, sign out, or your session ends. It is sent to the agent only when you press Send, and is not placed in a URL or included in analytics.

Signing in

Google supplies your verified email address and account identifier. We use them to create your private account and a seven-day session cookie. Signing in does not grant access to Gmail or Drive.

Documents and conversations

Your clients and cases are available only to your account. In the newer Connected desk, uploaded or imported documents, derived text and private source provenance are encrypted in storage and expire after 30 days. Use Delete under Your documents to remove a saved copy, its dependent values, attachment links and related search records. This does not delete the original in Gmail or Drive. Client records and conversations remain saved; the document limit does not delete text you type into the chat.

Older cases have Saved source copies controls. These saved copies also expire after 30 days. Deleting a copy clears related preparation packs, earlier versions, derived values and generated email drafts. Text you typed is retained. Older app-created Drive copies are queued for removal after their ownership is checked; the controls show pending cleanup, access that needs reconnecting, or copies that need support review. A pending status does not mean a Drive copy has been removed.

Expired documents stop being available at their deadline. Physical cleanup follows access and scheduled maintenance. These controls do not promise immediate erasure from platform backups. Minimal account audit and deletion receipts are retained to prevent deleted data from returning during retries or recovery.

Optional Google access

You can separately connect your own Gmail and Drive account. The normal connection asks for read access to Gmail and Drive. Credentials are encrypted and belong to your account. The Connected desk document search only reads the Google sources you allow and never sends email.

An older case may offer a separate permission step to send emails you approve and manage files created by the app in Drive. These permissions are needed for those older actions and for removing older app-created Drive copies. Older request cases can read the particular reply thread and look up an approved sent message to resolve delivery status. An email is sent only after your explicit approval. Original messages and files in Google are never deleted by the saved-copy controls.

Each filing needs a separate, explicit search permission: email participants and a date range for Gmail, or selected Drive folders. This case permission lasts 7 days. Search candidate metadata is encrypted and expires after 15 minutes. You choose which matching files to import. In Connected desk, Gmail inline content, message bodies and links are skipped; Drive searches check direct folder contents, and a Google Sheets export includes only its first worksheet. These limits can leave relevant documents undiscovered.

You can revoke a filing’s search permission in its source controls. Disconnect in Account to stop future Google reads and analysis; Google permission revocation is attempted and its result is shown. You can also remove permission in your Google Account settings. Revocation or disconnection keeps imported copies until their 30-day expiry or until you delete them. Cleanup of older app-created Drive copies may need you to reconnect and restore the relevant permission; its status is shown in the older case.

Karz Setu’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Processing and measurement

Cloudflare hosts the app, account data, cases and document processing. Workers AI processes requests and manual uploads to propose answers for your review. Google files selected in Connected desk are read by AI only when you separately allow extraction for that filing’s source. No suggested value or attachment is confirmed automatically. We do not sell Google user data, use it for advertising, or use it to train general AI models or across users. Human access is limited to your specific request, necessary security investigation, legal obligations or other uses permitted by Google’s Limited Use policy. Cloudflare’s processing terms govern its handling; saved case storage is not a zero-retention service. The app sends structured usage events to PostHog when enabled; these exclude prompts, document bodies, business details and Google credentials. No data is sent to government filing systems.

Help and deletion

To delete a conversation and its saved copies, open that conversation, choose Account, then Delete this conversation and confirm. This also removes its derived preparation data. Deletion status in Account shows any local cleanup or older app-created Drive copies still pending.

To remove a saved client record, open Account and expand Saved client records. Delete its associated conversations first, then select the client and confirm deletion. This removes the client’s saved aliases and linked email and folder settings; original Google messages and files stay unchanged.

For access problems, older Drive-copy cleanup that needs review, or removal of your whole account, contact Websauce at arnavmadan2004@gmail.com. A self-service account deletion flow is not yet available in this UAT release.