Legal
Privacy policy
Last updated [date]
This policy explains what personal data [Legal entity name] collects, why, and your rights under the Digital Personal Data Protection Act, 2023.
What we collect
| Data | Why | How long |
|---|---|---|
| Email address | Sign-in and account notices | While your account is open, then [period] |
| Name, GSTIN, billing address | GST invoices | 8 years, as tax law requires |
| Payment references from Razorpay | Crediting top-ups and refunds. We never see card or UPI PINs. | 8 years |
| Call metadata: model, time, status, latency, cost, key id | Billing, logs in your console, abuse prevention | [period] |
| Prompts and inputs | Sent to the model to answer the call. Not stored by us today. | Not kept after the call |
| Outputs | So you can download them | [period], then deleted |
| Files you upload | Reference inputs for models | Until you delete them |
Where it is stored
In India (Mumbai). To answer a call, your input is sent to the model's provider, which may process it outside India. With zero data retention on, we only use routes that keep nothing after answering.
Who we share it with
- Model providers, only the inputs needed to answer your call.
- Razorpay for payments, and our hosting and email providers, under contracts that limit their use of the data.
- Authorities, when Indian law requires it.
We do not sell personal data or use your inputs or outputs to train models.
Your rights
You can ask to see, correct or erase your personal data, withdraw consent, and nominate someone to act for you. Write to [privacy email]. You can also complain to our grievance officer and, after that, to the Data Protection Board of India.
Security
Data is encrypted in transit and at rest. API keys are stored hashed. We report security incidents to CERT-In as the law requires.
Cookies
We use only the cookies needed to keep you signed in. No advertising cookies.