Privacy Policy

• Account: your email address (stored encrypted), a username and support ID we generate, your password (stored only as a one-way hash — we cannot read it) and your language preference.
• Support content: messages you send to the AI assistant and to support agents, tickets and their history, files you upload, call scheduling details and feedback you give.
• Plan and payments: your plan, and for paid plans the order and payment reference, amount, status and payment method type. Card and UPI details are entered with our payment provider; we never receive or store card numbers or UPI PINs.
• Technical data: sign-in sessions with your browser type, a shortened IP address (the last part is removed) and timestamps; security events (we record only the category of an event — for example that a secret-looking value was blocked — never the value itself); and records of the Terms, Disclaimer and Privacy Policy versions you accepted, with time, browser type and shortened IP.

Please do not send private keys, seed or recovery phrases, passwords, OTPs or card details. Our systems try to detect and block them before they are stored or shared, but detection is not perfect.

• To answer your questions and resolve your issues, using the AI assistant and, when needed, human support agents.
• To manage your account, plan, payments and notifications (for example email verification and password reset).
• To keep the service secure, prevent abuse and fraud, and meet legal obligations.
• To measure and improve support quality. Where our staff approve it, resolutions may be turned into anonymised help articles.

We do not sell your personal data and we do not use advertising or third-party tracking cookies.

• Support agents see your support ID, username and plan label and the conversation they handle — not your email address.
• Client organisations that offer this support to their users see support activity for their own projects, without your email.
• Administrators can look up a person’s email only if they hold a special permission, and each lookup is written to an audit log.

We use trusted providers to run the service. They receive only what they need:

• AI model providers — the text of your messages and relevant help articles are sent to generate answers, and text is sent to create search embeddings. Your email address is not sent.
• Payment provider — handles your payment and receives the details you enter at checkout.
• Email delivery provider — receives your email address to deliver verification, reset and notification emails.
• Video-call provider — used only if you schedule a call; calls are not recorded by us and no attendee email addresses are sent to it.
• Hosting and storage — our servers and file storage. Uploaded files are scanned for malware on our own infrastructure.

Some providers may process data outside your country. We may also disclose data when required by law or to protect rights and safety.

• Conversation history is kept for 90 days by default (the operator can configure this per project) and is then deleted.
• Audit and security logs are kept for 365 days by default.
• Your account is kept until you delete it. Records we must keep by law or for accounting (such as payment records and evidence of your acceptance of our legal documents) may be retained afterwards.

• Delete your account: Account → “Account & privacy” → Delete account. This anonymises your account, signs you out everywhere and permanently deletes your support history. It cannot be undone.
• Access or correct your data, or object to processing: contact us at [legal contact email]. You can change your language and password yourself on your account page and sign out of all devices at any time.
• Depending on where you live (for example under India’s Digital Personal Data Protection Act, 2023) you may have further rights, such as withdrawing consent or making a complaint. We will respond within a reasonable time.

We protect your data with encryption of your email address, hashed passwords, encrypted connections, strict separation between organisations, role-based access, malware scanning of uploads and audit logging. No system is perfectly secure; please use a strong, unique password and tell us straight away if you suspect misuse of your account.

We use only essential cookies: a secure sign-in session cookie and a security (CSRF) cookie. We store your language choice in your browser. When you pay, our payment provider’s checkout may set its own cookies under its own policy.

The service is not intended for people under 18 and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

When we make a material change to this policy we will ask you to review and accept the new version before you start a new support conversation. Questions or requests: [Company legal name], [legal contact email].