Privacy Policy

• Account data: name, work email, hashed password.
• Profile data (optional): job title, department, birthday, work-anniversary date.
• Usage data: recognitions sent/received, points awarded, reactions, comments.
• Redemption data: rewards redeemed, voucher codes issued, shipping address (only when redeeming a physical or marketplace reward).
• Billing data: billing email + Razorpay subscription metadata. We never store card numbers — that lives with Razorpay.

We do not use any tracking pixels, advertising cookies, or third-party analytics on the public site.

To run the recognition platform: deliver kudos, fulfill reward redemptions, generate analytics for HR admins, send transactional emails (welcome, kudos received, redemption fulfilled), and process subscription billing. That's it.

Production data lives in a PostgreSQL database hosted on Amazon Web Services (Mumbai region, ap-south-1). Daily backups are retained for 30 days. The database is not exposed to the internet.

Only when needed for the features you turn on:

• Resend — transactional emails (recipient address + email body)
• Razorpay — subscription billing (billing email + amount)
• Reward providers (Xoxoday, Tremendous, Amazon Incentives, Giftbit) — redemption details for the specific reward you redeem
• Marketplace merchants — order details for orders you place (recipient name, shipping address, product SKU)
• Slack / Microsoft Teams / Discord — recognition messages you opt to push to those channels

We never sell data. We never run ads.

• You can view and download your data at any time (HR admin: CSV exports; individual users: /dashboard/profile).
• You can ask us to delete your account by emailing privacy@cherishu.talkytools.com. We delete production data within 30 days; backups expire within 90 days.
• If you're an EU resident, you have GDPR rights of access, rectification, erasure, restriction, portability, and objection.

We use a single first-party authentication cookie (HTTP-only, secure) to keep you logged in. No analytics cookies, no advertising cookies, no third-party scripts on the public site.

Cherishu is for workplace use and is not directed to anyone under 18.

If we materially change this policy, we'll email workspace owners and post a notice on this page. Last update is at the top.

Privacy questions: privacy@cherishu.talkytools.com
Security disclosures: security@cherishu.talkytools.com
Anything else: hello@cherishu.talkytools.com