Privacy Policy

1. Introduction

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and profile picture (obtained via Google OAuth sign-in)
• User Content (Inputs): Text prompts and messages you send to AI models
• AI Responses (Outputs): Content generated by AI models based on your inputs
• Payment Information: Billing details processed by Razorpay (we do not store card numbers)
• Communications: Messages you send to our support team

2.2 Information Collected Automatically

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Features used, chat frequency, token consumption, timestamps
• Log Data: IP address, access times, pages viewed
• Cookies: Authentication tokens and session data

2.3 Information from Third Parties

• Google OAuth: Basic profile information when you sign in with Google

3. How We Use Your Information

We use your information for the following purposes:

• To provide and maintain the AI chat service
• To process your requests and send them to AI model providers via OpenRouter
• To manage your account and subscription
• To process payments through Razorpay
• To communicate service updates and respond to inquiries
• To analyze usage patterns and improve our service
• To enforce our terms and prevent misuse
• To comply with legal obligations

4. How We Share Your Information

We share your information with:

AI Model Providers (via OpenRouter)

Your chat prompts are sent to third-party AI model providers to generate responses. We use OpenRouter as our API gateway. OpenRouter and the underlying AI providers may process your inputs according to their own privacy policies. We do not control how AI providers handle your data. See Section 5 for details.

Service Providers

• Supabase: Authentication and database hosting
• Vercel: Website hosting
• Razorpay: Payment processing
• Google: OAuth authentication

Legal Requirements

We may disclose information if required by law, court order, or government request.

Business Transfers

In the event of merger, acquisition, or sale of assets, your data may be transferred.

5. Third-Party AI Model Providers

When you send a message:

1. Your prompt is transmitted to OpenRouter's servers
2. OpenRouter routes your request to the selected AI model provider
3. The AI provider processes your prompt and returns a response

AI providers may include: DeepSeek, Qwen (Alibaba), Meta (Llama), Mistral, Google, Anthropic, and others.

Each provider has their own data handling policies. Some providers may:

• Temporarily store prompts for processing
• Use data for model improvement (though OpenRouter opts out where possible)
• Have different data retention policies

6. Data Storage and Security

• Data is stored on Supabase servers (cloud infrastructure)
• All data transmission is encrypted using HTTPS/TLS
• API keys are stored server-side and never exposed to clients
• We implement reasonable security measures including access controls and encryption
• No system is 100% secure; we cannot guarantee absolute security

7. Data Retention

• Account data: Retained while your account is active
• Chat history: Retained until you delete it or close your account
• Payment records: Retained as required by tax and legal obligations
• Usage logs: Retained for up to 12 months for analytics and debugging

You can delete your chat history at any time through the app.

8. Your Rights Under DPDP Act 2023

As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the right to:

• Access: Request information about what personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Grievance Redressal: Lodge complaints about our data handling practices
• Withdraw Consent: Withdraw your consent for data processing at any time (this may affect your ability to use the service)

To exercise these rights, contact us at support@bizzsoft-digital.com

We will respond to requests within a reasonable timeframe as prescribed by applicable law.

9. Children's Privacy

KALI-AI is not intended for users under 18 years of age. We do not knowingly collect personal data from children.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately. If we discover we have collected data from a child without parental consent, we will delete it promptly.

10. Cookies and Tracking

We use essential cookies for:

• Authentication (keeping you logged in)
• Session management
• Security purposes

We do not use advertising or tracking cookies.

You can disable cookies in your browser settings, but this may affect your ability to use KALI-AI.

11. International Data Transfers

Your data may be processed on servers located outside India. We ensure appropriate safeguards are in place for such transfers. By using KALI-AI, you consent to your data being transferred to and processed in countries where our service providers operate.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on this page
• Updating the "Effective Date" at the top
• Sending an email notification for material changes

Your continued use of KALI-AI after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or to exercise your rights: