Contents
- 1. Information We Collect
- 2. Legal Basis for Processing
- 3. How We Use Your Data
- 4. Data Sharing & Third Parties
- 5. Data Security
- 6. Data Retention
- 7. Your Privacy Rights
- 8. Children's Privacy
- 9. Cookies & Tracking
- 10. International Transfers
- 11. Data Breach Notification
- 12. Grievance Officer
- 13. Policy Updates
- 14. Language Availability
- 15. Contact Information
- 16. Governing Law
Privacy Policy
This Privacy Policy explains how Bondhu AI ("we," "our," or "Bondhu") collects, uses, stores, shares, and protects your personal information when you use our Platform at bondhu.tech.
Your Privacy Matters: We are committed to protecting your personal data and providing transparency about our data practices. This policy outlines your rights and how we safeguard your information in accordance with Indian data protection laws.
Information We Collect
We collect the following categories of personal data necessary to provide and improve Bondhu's services:
📧 Account Data
- •Email address (required for account creation and communication)
- •Name (optional for personalization)
- •Authentication details (email or Google OAuth credentials)
💬 Usage Data
- •Conversation logs and chat history with AI companions
- •User preferences, settings, and customizations
- •Activity patterns, feature usage, and engagement metrics
🧠 Personality & Well-being Data
- •Responses to personality assessments, quizzes, and interactive games
- •Behavioral insights and patterns derived from AI interactions
- •Emotional well-being indicators and mood tracking data
🔧 Technical Data
- •Device type, model, and operating system information
- •Browser type, version, and language preferences
- •IP address (for security, analytics, and fraud prevention)
- •Cookies and similar tracking technologies
Legal Basis for Data Processing
We process your personal data based on the following legal grounds under the DPDP Act, 2023:
Consent
You provide explicit, informed, and freely given consent when creating an account and using our services
Contractual Necessity
To perform our services as outlined in the Terms of Service agreement
Legitimate Interests
To improve services, ensure platform security, and prevent fraud or abuse
Legal Obligations
To comply with applicable Indian laws, regulations, and legal processes
How We Use Your Data
Your personal information is used for the following purposes:
- •Service Delivery: Provide personalized AI conversations, personality insights, well-being tools, and analytics
- •AI Improvement: Train and enhance AI models, improve adaptive personality response systems, and refine recommendation algorithms
- •Account Management: Maintain account functionality, security, authentication, and user preferences
- •Communication: Send service updates, feature announcements, security alerts, and support responses
- •Analytics & Research: Understand usage patterns, conduct research, and enhance user experience
- •Security & Fraud Prevention: Detect and prevent fraud, abuse, unauthorized access, and security threats
- •Legal Compliance: Meet legal and regulatory obligations under Indian law
Data Sharing & Third-Party Services
We Do Not Sell Your Data
Bondhu does not sell, rent, or trade your personal information to third parties for marketing purposes. Your data is your own.
Limited Sharing with Service Providers
We may share your data with trusted third-party service providers strictly for operational purposes, including:
- •AI Service Providers: Cerebras writes Bondhu's replies, and Google Gemini reads each message to estimate its mood and to index it for memory. If the first provider is unavailable, another may write the reply: Groq, Google Gemini or Azure OpenAI, depending on configuration. Each provider sees the messages it processes.
- •Hosting Providers: Supabase (database and sign-in, Mumbai, India), Microsoft Azure (Bondhu's server and its short-term cache), Cloudflare (the secure connection in front of the server) and Vercel (the website)
- •Only if you use them: Spotify and Google YouTube (accounts you connect), Mailchimp (the newsletter)
- •Analytics: Vercel Analytics, for anonymous page-visit counts
All third-party partners are bound by strict confidentiality and data protection agreements and process data only as instructed by Bondhu AI.
Legal Disclosures
We may disclose your information if required by law, court order, government authority, or to protect our legal rights, prevent fraud, or ensure user safety.
Data Security Measures
We implement industry-standard security practices to protect your personal data:
Encryption
Data is encrypted in transit (HTTPS/TLS). Our hosting providers encrypt their disks. Message text is stored in readable form in our database today, and cached copies on our server can last up to 7 days; encrypting stored messages is planned.
Each person should reach only their own data; a known gap in our database's access rules is being fixed.
Important Note: While we employ robust security measures, no online system is 100% secure. Users share data at their own discretion.
Data Retention Policy
Active Accounts
Personal data is retained as long as your account remains active and you continue using our services
Inactive Accounts
We do not yet delete inactive accounts automatically. Your data is kept until you delete your account
Deleted Accounts
When you delete your account, your data is erased at once. Cached copies can last up to 7 days, and backups are kept according to our database host's retention
Legal Compliance
Some data may be retained longer to comply with legal obligations, resolve disputes, or enforce agreements
Your Privacy Rights
Under the DPDP Act, 2023 and applicable Indian laws, you have the following rights:
Right to Access
Request access to view the personal data we hold about you
Right to Correction
Request correction or updating of inaccurate or incomplete personal data
Right to Erasure ("Right to be Forgotten")
Request deletion of your personal data, subject to legal retention requirements
Right to Data Portability
Request export of your personal data in a machine-readable format (JSON)
Right to Withdraw Consent
Withdraw your consent for data processing at any time (note: this may limit some features)
Right to Grievance Redressal
File a complaint regarding data processing practices with our Grievance Officer
How to Exercise Your Rights: To exercise any of these rights, please contact our Privacy team via the Contact section below. We aim to respond to your request within 30 days of receipt.
Children's Privacy
Age Restriction: Bondhu is for adults, 18 and over. We do not knowingly collect personal data from anyone under 18.
- •If you are under 18, please do not use Bondhu
- •If we learn that someone under 18 has an account, we will delete it and its data
- •If you think someone under 18 has an account, contact us
International Data Transfers
Your data may be transferred to and processed in locations outside India for cloud hosting and AI processing purposes. We ensure that all such transfers comply with applicable data protection laws and include appropriate safeguards.
Data Breach Notification
In the event of a data breach that may compromise your personal information, we will:
- Notify affected users via email within 72 hours of discovering the breach
- Report the breach to the Data Protection Board of India as required by law
- Take immediate steps to mitigate harm and prevent future breaches
Grievance Redressal Officer
For privacy-related concerns, complaints, or requests, you may contact our Grievance Redressal Officer:
- 📧 Email: bondhuaitech@gmail.com
- 🌐 Website: bondhu.tech
- 📍 Location: Kolkata, India
We aim to acknowledge your complaint within 24 hours and to resolve it within 30 days.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Updated versions will be posted on this page with a revised "Last Updated" date. Material changes will be communicated via email or prominent notice on the Platform. Continued use after changes constitutes acceptance of the updated Privacy Policy.
Language Availability
This Privacy Policy is available in English.
Contact Information
If you have any questions, concerns, feedback, or requests regarding these Terms of Service, please contact us using the contact form on our website.
Governing Law
Governing Law: These Terms and your use of the Platform shall be governed by and construed in accordance with the laws of India, without regard to its conflict of law provisions. The Indian Contract Act, 1872, the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and other applicable Indian laws shall apply.
Jurisdiction: Any disputes, claims, or controversies arising out of or relating to these Terms, the Platform, or your relationship with Bondhu AI shall be subject to the exclusive jurisdiction of the competent courts located in Kolkata, West Bengal, India.