Privacy Policy
Your trust matters. Here's exactly how we handle information — in plain words.
Last updated: June 2026
This is a clear-language summary of our privacy practices. It is a template for an independent project and not legal advice.
1. Information we collect
- Information you provide: messages you send to the assistant, optional profile details (such as age range, occupation or goals) you choose to share, and details you submit through forms (name, email, message).
- Information collected automatically: basic technical data such as device/browser type, approximate location derived from IP, and security logs needed to keep the service safe.
- We never ask for, and you should never share, sensitive banking credentials such as full card numbers, CVV, PIN, OTP, internet-banking passwords or UPI PIN.
2. How we use information
- To provide the assistant's answers, recommendations and scheme matches.
- To keep the service secure — including fraud prevention, rate limiting and audit logging.
- To improve clarity, language coverage and reliability in aggregate.
- We do not sell your personal information.
3. Legal basis & consent
- We process information based on your consent (e.g. cookie preferences), to perform the service you request, and to meet our legitimate security and legal obligations.
- You can withdraw consent for non-essential cookies at any time from the cookie banner or your browser settings.
4. Data security
- Data is protected in transit using TLS/HTTPS, and access to systems is restricted on a need-to-know basis.
- We apply security headers, input validation and sanitization, rate limiting, and audit logging across the platform.
5. Data retention
- We keep information only as long as needed for the purpose it was collected, or as required by law.
- Security and audit logs are retained for a limited period (typically up to 365 days) and then deleted automatically.
6. Sharing & disclosure
- We share information only with service providers who help us operate the platform, under strict confidentiality, or when required by law.
- AI model providers process your messages solely to generate a response and not to identify you.
7. Your rights
- You may request access to, correction of, or deletion of your personal information, and object to certain processing, subject to applicable law.
- To exercise any right, contact us via the Contact page.
8. Children's privacy
- The service is intended for adults. We do not knowingly collect personal information from children.
9. Changes to this policy
- We may update this policy from time to time. Material changes will be highlighted on this page with a new “last updated” date.