Privacy Policy

1. Information We Collect

We respect your privacy and enforce strict data minimization:

• Account Information: When you sign in via Google OAuth or Email Magic Link, we collect your verified email address and basic profile display name.
• Transactional Data: For credit purchases, our payment partner (Razorpay) securely processes your payment. We store order IDs, transaction statuses, and invoice records. We never store your credit/debit card numbers, UPI PINs, or banking passwords on our servers.
• Usage Logs: Anonymized query logs and feature telemetry to monitor API compute costs, server latency, and error diagnostics.

2. What We Explicitly DO NOT Collect

We never collect or request:

• Personal portfolio holdings or net worth figures.
• Bank account login credentials, Aadhaar numbers, or Demat account numbers.
• Personalized risk profiles or individualized investment targets.

3. How We Use Your Information

Collected information is used exclusively to:

• Authenticate your account and maintain your credit balance in our database.
• Deliver requested research syntheses and issue tax invoices.
• Prevent abuse, rate limiting violations, and bot scraping.

4. Data Security

All communication between your browser and our servers is encrypted using industry-standard Transport Layer Security (TLS 1.3 / HTTPS). Database storage is hosted in enterprise PostgreSQL clusters with automated daily backups and encrypted connections.

5. Third-Party Service Providers

We work with trusted third-party providers:

• Razorpay: Payment processing gateway (PCI-DSS Level 1 certified).
• Supabase: Encrypted authentication and PostgreSQL database storage.
• Google Gemini / Perplexity: LLM inference compute for document summarization.

6. Contact and Grievance Officer

In accordance with the Information Technology Act, 2000, inquiries or data deletion requests may be submitted directly through our Feedback & Grievance Form.