Privacy Policy

Last updated: May 14, 2026  ·  Effective date: May 14, 2026  ·  Governed by laws of Maharashtra, India

1. Information We Collect

We collect the following categories of information when you use our service:

• Account Information: Your name, email address, and password (stored as a one-way bcrypt hash — we cannot recover your password).
• Usage Data: The messages you input for AI generation and the AI responses generated. These are stored to provide your response history feature.
• Payment Information: Your plan type, payment amount, and Razorpay transaction/order IDs. We do not store card numbers, CVV, or bank credentials — these are handled entirely by Razorpay.
• Technical Data: IP address, session identifier, browser user agent. Used for security and rate limiting only.

2. How We Use Your Information

• To provide and operate the AI generation service
• To manage your account, plan, and usage limits
• To process payments via Razorpay
• To display your response history
• To prevent fraud, abuse, and unauthorised access
• To send important account communications (not marketing)

3. Third-Party Services

We use the following third-party services. Your data may pass through them as described:

• OpenAI (api.openai.com): Your input messages are sent to OpenAI's API to generate AI responses. OpenAI processes these as API calls per their Privacy Policy. By using our service, you acknowledge this data transfer.
• Razorpay (razorpay.com): Payment processing. Razorpay collects and processes your payment details per their Privacy Policy. We only receive transaction IDs and status.
• Google Fonts: Typography loaded from Google Fonts CDN. Google may log font requests per their policy.

4. Data Storage and Security

Your data is stored in a MySQL database on our shared hosting server located in India. We implement the following security measures:

• Passwords stored as bcrypt hashes (cost factor 12) — never in plain text
• Session cookies set as httponly and samesite=Strict
• CSRF tokens on all forms
• HTTPS encryption in transit (TLS)
• Database credentials never exposed in web-accessible files
• Server access restricted via .htaccess rules

While we take reasonable precautions, no system is 100% secure. We cannot guarantee absolute security of data transmitted over the internet.

5. Data Retention

• Account data: Retained for as long as your account is active
• AI generations: Retained indefinitely to provide response history; you may request deletion
• Payment records: Retained for 7 years for financial compliance
• Usage statistics: Monthly counters reset on the 1st of each month

6. Your Rights

As a user, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to processing of your data

To exercise any of these rights, email us at info@jyotvira.com. We will respond within 30 days.

7. Cookies

We use one session cookie to keep you logged in. This cookie is:

• Named jyotvira_session
• Set as httponly (not accessible to JavaScript)
• Expires after 24 hours of inactivity
• Not used for advertising or tracking

We do not use analytics cookies, advertising cookies, or third-party tracking cookies.

8. Children's Privacy

JYOTVIRA AI Assistant is intended for business use by adults (18+). We do not knowingly collect personal information from minors. If you believe a minor has provided us with data, contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the app. Your continued use after changes constitutes acceptance.

10. Contact