Privacy Policy
Effective date: June 16, 2026
1. What We Collect
| Data | Why | Kept until |
|---|---|---|
| Email address | Account authentication and service notifications | Until account deletion |
| Uploaded PDF files | Content extraction | Permanently deleted immediately after extraction completes |
| Extracted question data | Storing your question bank for re-download | Until you delete the project or your account |
| Credit balance and transaction history | Billing and payment records | 7 years (financial record requirement under Indian law) |
| Usage logs (IP, timestamps, pages visited) | Security, debugging, abuse prevention | 90 days |
2. What We Do Not Do
- We do not use your content to train any AI model. Your questions and documents are processed by AI solely to provide the extraction service to you.
- We do not sell your data to any third party.
- We do not share your question bank with other users or organisations.
- We do not store uploaded PDFs after extraction is complete.
3. Third-Party Services We Use
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Database and authentication | Email, question data |
| Google Gemini API | PDF content extraction (AI processing) | Page images from uploaded PDFs (transient, not stored by Google for training per their API terms) |
| Razorpay | Payment processing | Payment information only (we never see your card details) |
| Google Analytics | Product usage analytics (page views, feature usage) | Anonymised usage data. No question content is shared. |
4. Your Rights Under India's DPDP Act 2023
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate personal data.
- Erasure (Right to be Forgotten) — request deletion of your account and all associated personal data. We will complete deletion within 30 days of a verified request. Transaction history may be retained for 7 years as required by law.
- Grievance redressal — raise concerns with our Data Protection Officer at legal@anonymapp.in. We will respond within 30 days.
To exercise any of these rights, email legal@anonymapp.in from the email address associated with your account. We may verify your identity before processing requests.
5. Data Security
We use row-level security policies on our database ensuring no user can access another user's data. All data is transmitted over HTTPS. PDFs are processed in memory and deleted immediately after extraction — they are never written to persistent storage in a user-accessible location.
6. Cookies
We use session cookies for authentication only. We do not use advertising or tracking cookies. Google Analytics uses its standard cookies for anonymised usage measurement.
7. Changes to This Policy
We will notify you by email at least 7 days before any material changes to this policy take effect.
8. Contact
Data protection queries, deletion requests, and copyright takedown notices: legal@anonymapp.in