Privacy Policy

Yeh Privacy Policy batati hai ki Meri Janu ("Platform", "hum", "hamara") hamari website aur Service use karte waqt personal data kaise collect, use, store, share, aur protect karta hai. Yeh visitors, registered users, aur hume contact karne wale kisi bhi insaan par apply hoti hai, aur ise hamare Terms & Conditions ke saath padhna chahiye.

Meri Janu Harshpreet Singh, trading as XCodie Technologies (Udyam Registration No. UDYAM-PB-17-0132054) dwara owned aur operate kiya jata hai, jo Patiala, Punjab, India based ek sole proprietorship hai, aur is Policy mein describe kiye gaye personal data ke liye Digital Personal Data Protection Act, 2023 ("DPDP Act") ke under "Data Fiduciary" ke roop mein act karta hai. Hamara registered business address hai [registered business address — launch se pehle add karo].

Hum collect karte hain:

• Account data — naam, email address, password (ek irreversible hash ke roop mein store, kabhi bhi plain text mein nahi), Google se sign in karne par tumhara Google account identifier, aur tumhari language preference.
• Conversation data — companion personas ke saath tumhare messages ka exchange. Neeche Companions Ke Saath Tumhari Conversations dekho — hum is category ko extra care se handle karte hain.
• Payment data — directly hamare payment gateway (Razorpay) dwara handle kiya jata hai; hume sirf transaction status, amount, aur ek reference ID milti hai, kabhi bhi tumhara full card ya bank detail nahi.
• Usage & device data — visit kiye gaye pages, IP address se derive approximate location, browser/device type, aur timestamps, jo security, rate-limiting, aur problems diagnose karne ke liye collect kiye jaate hain.
• Cookies — neeche Cookies dekho.
• Tumne jo bhi hume directly bheja — jaise ek contact-form message, ya review ke liye flag kiya gaya message.

AI companions ke saath tumhari conversations hamare paas maujood sabse sensitive data hai, aur hum ise normal account data se alag tareeke se handle karte hain:

• Messages hamare database mein, tumhare account se linked, store kiye jaate hain, taaki tumhari chat history sessions ke across available rahe — yeh ek core feature hai, incidental logging nahi.
• Reply generate karne ke liye, tumhara message aur recent conversation history ka ek capped window (design ke hisaab se roughly last 15–20 messages) us conversation ko handle karne wale AI provider ko server-side bheja jata hai — dekho Hamare AI Providers. Yeh call sirf hamare servers se hoti hai; tumhare messages kabhi bhi tumhare browser se directly kisi AI provider ko nahi bheje jaate.
• Hum tumhari conversations nahi bechte, aur doosre users inhe kabhi nahi dekh sakte.
• Reply tum tak pahunchne se pehle hum AI replies par ek automated safety filter chalate hain; agar tum in-chat "report" action use karte ho, to wo specific message — aur thoda sa surrounding context — hamari safety review ke liye alag se rakha jata hai, chahe original conversation waise delete ho jaati.
• Employees routine mein individual conversations nahi padhte. Access sirf utni zaroori hai jitni ek safety report, tumne uthaya support request, ya legal obligation investigate karne ke liye chahiye.
• Apna account delete karne se tumhari conversation history delete ho jaati hai — dekho Account Deletion.

Hum companion replies generate karne ke liye third-party large language model providers use karte hain — abhi hamare free tier ke liye DeepSeek, aur ongoing evaluation ke basis par Sarvam AI ya Kimi (Moonshot AI) mein se choose kiya gaya ek paid-tier provider. Ye providers hamare bheje gaye message content (tumhara message plus recent conversation context) ko strictly tumhare liye reply generate karne ke liye process karte hain; wo is purpose ke liye hamare data processors ki tarah act karte hain, tumhare data ke independent controllers ki tarah nahi. Hum aise providers choose karte hain jinke API terms batate hain ki customer data unke models train karne ke liye use nahi hota, aur kisi provider ko switch ya add karne se pehle hum isse review karte hain.

DPDP Act ke under, tumhare personal data ki hamari processing tumhari consent par based hai, jo tum account banate waqt aur is Policy se agree karte waqt dete ho — jisme chat content bhi shamil hai, jo ek chat product use karne mein inherent hai. Tum apna account delete karke kabhi bhi consent withdraw kar sakte ho (dekho Account Deletion), halaanki isse Service use karne ki tumhari ability end ho jaayegi, aur withdrawal us processing ko affect nahi karta jo tumhare withdraw karne se pehle lawfully ho chuki hai.

Hum tumhe signed in rakhne aur tumhari language preference yaad rakhne ke liye strictly necessary cookies, aur site ke overall usage samajhne ke liye basic analytics cookies use karte hain. Hum third-party advertising cookies use nahi karte. Tum apne browser settings ke through cookies control kar sakte ho, halaanki essential cookies disable karne se sign-in kaam karna band ho sakta hai.

Hum tumhara personal data nahi bechte. Hum ise sirf inke saath share karte hain:

• Contract ke under hamari taraf se data process karne wale service providers — hamara database/hosting infrastructure, upar describe kiye gaye AI providers, hamara payment gateway (Razorpay), aur transactional emails ke liye hamara email delivery provider.
• Law enforcement ya regulators, jahan Indian law ke under valid legal process se require ho.
• Business ke merger, acquisition, ya sale ki situation mein ek successor entity — same privacy commitments ke saath.

Hum tumhara account active rehne tak account aur conversation data rakhte hain, taaki tumhari chat history tumhare liye available rahe. Payment records Indian tax aur accounting law ke under required duration tak retain kiye jaate hain. Agar tum apna account delete karte ho, hum ek reasonable period ke andar tumhara personal data aur chat history delete ya irreversibly anonymise kar dete hain (dekho Account Deletion), sivaay us data ke jise hume legally longer retain karna zaroori hai — jaise kuch financial records, ya kisi active safety investigation ke liye retain kiya gaya content.

Hum industry-standard safeguards use karte hain: har jagah encrypted connections (HTTPS), hashed passwords, access controls jo limit karte hain ki Company ke andar production data tak kaun pahunch sakta hai, aur secure session cookies (httpOnly, secure, sameSite). Koi bhi system perfectly secure nahi hota aur hum absolute security guarantee nahi kar sakte, lekin hum involved data ki sensitivity — especially conversation data — ke hisaab se reasonable steps lete hain.

DPDP Act ke under ek Data Principal ke roop mein, tumhe right hai:

• Hum tumhare baare mein jo personal data rakhte hain aur wo kaise process hota hai uska summary access karne ka.
• Jahan possible ho apni account settings se directly inaccurate ya incomplete data ko correct ya update karne ka.
• Apna account delete karke apna personal data erase karne ka (neeche dekho).
• Kabhi bhi consent withdraw karne ka, jiske effects Processing ka Legal Basis mein describe kiye gaye hain.
• Apni death ya incapacity ki situation mein in rights ko exercise karne ke liye kisi doosre insaan ko nominate karne ka.
• Grievance redressal — hamare Grievance Officer (neeche Grievance & Contact section dekho) ke paas complaint raise karne ka aur, agar unresolved rahe, to Data Protection Board of India se approach karne ka.

Tum Dashboard → Settings se apna account permanently delete kar sakte ho, jisme ek explicit confirmation step hota hai kyunki yeh action irreversible hai. Apna account delete karne se tumhari profile, credit/subscription records (upar mentioned tax-record retention ke subject), aur hamare production database se tumhari poori conversation history remove ho jaati hai. Hum deletion requests ko 30 days ke andar process karte hain, aur encrypted backups mein bachi koi bhi copy hamare normal backup rotation schedule (90 days tak) par purge ho jaati hai.

Yeh Service 18 saal se kam age ke kisi ke liye nahi hai, aur hum jaan-boojh kar minors se personal data collect nahi karte. Agar hume pata chalta hai ki humne 18 saal se kam age ke kisi ka data collect kiya hai, hum ise delete kar denge aur account terminate kar denge, jaisa hamare Terms & Conditions — Eligibility mein describe kiya gaya hai.

Hamare kuch service providers — including kuch AI providers aur cloud infrastructure — India ke bahar located servers par data process kar sakte hain. Jab aisa hota hai, hum provider ki contractual data-protection commitments par rely karte hain aur time-to-time apply hone wale DPDP Act ke cross-border transfer rules ke consistent providers choose karte hain.

Hamari practices ya law change hone ke hisaab se hum is Policy ko update kar sakte hain. Hum naye "last updated" date ke saath revised version yahan post karenge, aur chat content handle karne ke tareeke ko affect karne wale material changes ke liye, hum active users ko directly notify karne ki reasonable koshish karenge.