Privacy Policy
This policy explains what personal data we process, why, how long we keep it, and the rights you have — consistent with India's Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the SPDI Rules.
Shrinam is an AI “web rep” that businesses (“website owners”) embed on their websites. In most cases the website owner is the Data Fiduciary that decides why your data is collected, and Shrinam acts as a Data Processor on their behalf. For our own website and account holders, Shrinam is the Data Fiduciary. This policy covers both roles.
1. What we collect
- Conversation data — your chat text or voice transcript with the AI, used to respond and, only with consent, to remember you next time.
- Contact & lead details — name, phone, email or other details you choose to share in a conversation.
- Technical data — IP address and approximate city/region/country, device and browser information, used for security, abuse-prevention and analytics.
- Biometric templates (optional, only with explicit consent) — where voice or face features are used to recognise a returning speaker, we process a mathematical template, not a stored recording, matched ephemerally.
- Consent records — a cryptographically-verifiable ledger of when consent was granted or withdrawn, kept as legal proof.
- Account & billing data — for account holders: login identifiers and payment references. We do not store card, UPI or bank credentials; those are handled by our payment gateway.
2. How we use it
- To run the service — answer visitors, qualify leads, book meetings, and present information.
- To provide memory and continuity across visits, where consent is given.
- To secure the service, prevent fraud and abuse, and debug issues.
- To comply with legal, tax and accounting obligations.
- We do not sell your personal data, and we do not train foundation models on your private conversations by default.
3. Lawful basis & consent
We process personal data on the basis of your consent and/or the legitimate uses permitted under the DPDP Act (such as performing a service you requested, security, and legal compliance). Where consent is the basis, it is specific, informed and freely given, and can be withdrawn at any time (see Section 6). Withdrawing consent does not affect processing already carried out lawfully.
4. Sharing & sub-processors
We share data only as needed to run the service: with the relevant website owner (for whom we process it), and with vetted sub-processors such as cloud hosting, AI model providers, communication and payment providers, all under contractual data-protection obligations. We may disclose data where required by law or to protect our rights, users or the public.
5. Data retention
We keep personal data only as long as needed for the purpose it was collected, or as required by law. Indicative periods:
| Data category | Retention |
|---|---|
| Conversation (transcript / chat) | Until you request erasure or the website owner deletes the account data |
| Biometric templates | Deleted as soon as the purpose ends or consent is withdrawn (max 30 days, including backups & processors) |
| Contact / lead details | While an active lead for the website owner, or until an erasure request |
| Consent records (grant/withdraw) | 3 years, as legal proof |
| Security / audit logs | Up to 12 months for abuse prevention |
| Payment metadata (gateway reference; no card/UPI) | As required by accounting / GST rules (typically 8 years) |
6. Your rights & how to exercise them
Subject to applicable law, you may:
- Access a summary of the personal data we process about you.
- Correct or update inaccurate or incomplete data.
- Withdraw consent, and request erasure of personal data that is no longer necessary.
- Nominate another person to exercise your rights in case of death or incapacity.
- Grieve — raise a complaint with our Grievance Officer before approaching the Data Protection Board.
How requests are handled. To protect your data, we verify the identity of anyone making a request before acting. Where Shrinam processes data on behalf of a website owner, we will route your request to that website owner (the Data Fiduciary) and assist them in fulfilling it. We honour verified erasure requests for personal data that is no longer needed. However, we may retain the minimum data required to: (a) comply with a legal, tax, accounting or regulatory obligation; (b) establish, exercise or defend legal claims; (c) prevent fraud, abuse or security incidents; or (d) complete a transaction or service you requested. In such cases we restrict processing to that narrow purpose. Consent-ledger entries are retained as legal proof of your own consent/withdrawal choices.
To make a request, email support@hindustaniai.com with the subject “Privacy Request”.
7. Security
We apply reasonable technical and organisational safeguards — encryption in transit, access controls, audit logging, and a cryptographically-verifiable consent and erasure ledger. Biometric matching is designed to be ephemeral, using templates rather than stored media. No method of transmission or storage is 100% secure, but we work to protect your data and to notify affected users without undue delay and the Data Protection Board of India within 72 hours of becoming aware of a personal-data breach, as required under the DPDP Rules.
8. Data location & transfers
Personal data is primarily stored on servers in India (Mumbai region). Some sub-processors may process limited data outside India under appropriate safeguards and only as permitted by law.
9. Children
Shrinam is intended for business use and is not directed at children. Where a website owner enables features involving persons under 18, they are responsible for obtaining verifiable parental consent as required by the DPDP Act.
10. Cookies
We use strictly necessary cookies to run the service and, where you allow it, analytics cookies to improve it. You can control non-essential cookies through the consent banner or your browser settings.
11. Changes
We may update this policy; changes are published here with a new “Last updated” date. Material changes will be highlighted where practicable.
12. Contact & grievances
Hindustani AI Logics OPC Pvt Ltd · CIN U62099UP2025OPC236193 · GSTIN 09AAICH2878Q1ZM
Villa No. 677, Sector B, Eldeco City, IIM Road, Mubarakpur, Lucknow, Uttar Pradesh 226013, India
Grievance & Data Protection Officer: Jagdamba Pratap Bhatt · support@hindustaniai.com