Where the data goes: nowhere but your browser

• The employee file you drop in is read and processed by JavaScript running in your browser tab. It is never uploaded.
• The app's Content Security Policy (connect-src 'self') allows network calls only to peoplegraph.co.in — account, plan and payment requests, never file contents.
• No third-party scripts run on the app pages: no analytics, no chat widgets, no ad tags.
• Reports (PowerPoint, Excel, PDF) are built in the browser and download directly; they are never generated server-side.
• When your plan includes a report, the page fetches that report's code from peoplegraph.co.in. The request carries your sign-in cookie, nothing from your file.

• Cloudflare: hosting, the account database and sign-in emails.
• Dodo Payments or Razorpay: checkout. They see your payment details; we see the receipt.
• Google, only if you choose Sign in with Google.

1. Sign in and open a report at /app/.
2. Drop in a headcount file, or use the sample data.
3. Turn off Wi-Fi, or disconnect from the network.
4. Run the report again. It produces the same result, offline.

• Account email, company name and plan.
• Payment records from our payment provider (Dodo Payments or Razorpay).
• Anonymous event counts: page visits, which calculators and reports are used, sample runs, own files loaded and downloads. Each is the event, the report's name and the day. Never the file, never you.
• Sign-in is with Google, which tells us your email address and nothing else.
• One strictly necessary session cookie. No analytics cookies.

Full detail: Privacy policy.

The data clean-up and org design core is open source: github.com/shashi-shekhar-25/peoplegraph. The app's own code is served unminified from peoplegraph.co.in, so your team can read what runs.

Email [email protected] with what you found and how to reproduce it. Please do not include real employee data in the report.