Privacy Notice

What we collect, and why

• Your email address — to sign you in (we use a passwordless link, not a password) and as your billing contact.
• A display name, only if you choose to add one — to personalize the app. Never required.
• Feature ideas, only if you send one — the title and details you write, so we can read them, tell you what we decide and email you about it. Kept until you delete your account.
• Anonymous visit statistics — we count visits (which pages are viewed, the country, and the device and browser type) using Vercel Web Analytics, so we can see how many people use the site and notice unusual traffic. It sets no cookies and does not identify you personally.
• Your industry, role and the regulators you follow, only if you choose to tell us — to show the circulars most relevant to you first on your dashboard. Optional, never used to decide access, editable or removable anytime in Account, included in your data download, and deleted with your account.
• Your subscription status and renewal date — to know whether to give you access to the paid tier. We never see or store your card number, CVV, or bank details — those go directly to our payment processor, Razorpay.
• The questions you ask and the answers you get — this is the core of the product, and the most sensitive category: it may reference your organization's specific compliance situation. It's stored so you can come back to a past conversation.
• Reports about an AI answer, only if you send one — if you tap “Report a problem with this answer” we keep a copy of that question, the answer, the circular it concerned and any note you add, so we can check it, fix the problem and email you the result. An automated review (using the same AI provider as the chat) reads the report first; a person approves every reply.

Who else sees it

• Supabase (database) and Vercel (hosting) — both run in Mumbai, India for this app.
• Anthropic (Claude) — receives your question and the relevant regulatory text to generate a reply. This is the one point where your data leaves India — no India-region option exists for this API today. Anthropic's commercial terms exclude this from being used to train their models and auto-delete it after 30 days.
• Zoho Mail — carries the emails we send you about a report you made, a feature idea you sent, a thank-you when you subscribe, and reminders about your subscription (before a free month ends and before a renewal), and our hello@aitatparya.com mailbox. (Sign-in emails are sent separately by our database provider.) We keep a short record of which reminder or thank-you was sent to you, for up to 180 days, so you are never sent the same one twice.
• Razorpay — receives your payment details directly from your browser during checkout. We never receive or store them. If you use a coupon code we keep a record of which code you used and when, so it cannot be used twice. If you ask us to email you a free-month code, we keep a one-way scrambled form of your email address (not the address itself) so that one person gets one code, even if you later delete your account. For one-month payments we keep a record of each payment (payment reference, amount and date) for our tax records, even if you later delete your account.

We don't sell your data, and we don't share it with anyone for their own marketing or advertising purposes.

How long we keep it

Your profile and subscription record: for as long as your account is active. Your chat questions and answers: automatically removed from your account 7 days after you sent them — if you want to keep a copy of something, download it (see "Your rights" below) before then. Messages to our support assistant are deleted 90 days after you send them. Reports you send about an AI answer are deleted 180 days after you send them.

Before it's removed from your account, we keep an internal copy for at least a month, accessible only to us and never through the app — this exists solely so we have a record to refer back to if a legal or billing dispute ever comes up, not for any other purpose. It's deleted from our side once that purpose no longer applies.

Your rights

From your Account page, you can directly:

• Download everything we have on file for you
• Change your sign-in email
• Delete your account — this permanently removes your profile, subscription record, and every chat message, not just deactivates them

For anything else — including a complaint about how your data is handled — write to our Grievance Officer at hello@aitatparya.com. We'll acknowledge within 24 hours and aim to resolve within 15 days. This doesn't require you to complain to us first — you can always approach the Data Protection Board of India directly.

How we keep this secure

Every table in our database restricts access so you can only ever see your own data — not just in the app, but enforced by the database itself. All traffic is encrypted in transit. We don't use passwords, so there's no password database to leak.

Changes to this notice

If this changes, a new version will replace it, dated at the top, and we'll say plainly what's different rather than bury it.

Contact

Sri Sakhi Enterprises · hello@aitatparya.com