Privacy Policy

1. Information We Collect

Account Information: Name, email address, and organization details provided during registration via Clerk authentication.

Usage Data: API requests, pages visited, features used, and interaction patterns to improve the Platform.

Customer Configuration: Assets, policies, business calendar events, webhook endpoints, and API keys you create.

Intelligence Data: We collect and process publicly available data from government databases (NVD, CERT-In, CISA, RBI), news sources (GDELT, NewsAPI), weather services, and financial market feeds. This data is public and not personal.

2. How We Use Your Information

We use your information to: (a) provide and improve the Platform; (b) generate risk assessments and decisions; (c) send notifications and alerts; (d) process subscription payments; (e) provide customer support; (f) comply with legal obligations.

3. Data Storage and Security

Data is stored on AWS infrastructure in the Mumbai (ap-south-1) region. We use encryption in transit (TLS/SSL) and at rest. Database backups are automated daily and stored in AWS S3 with server-side encryption.

4. Data Isolation

Customer data is isolated per tenant. Each organization's assets, decisions, policies, and configurations are accessible only to authorized users within that organization. We implement role-based access control (RBAC) with 5 permission levels.

5. Third-Party Services

We use the following third-party services:

• Clerk: Authentication and user management
• Razorpay: Payment processing
• Anthropic (Claude AI): Intelligence analysis and natural language processing
• AWS: Cloud infrastructure and storage

Each provider has their own privacy policy governing their data handling.

6. Data Retention

Intelligence events are retained for 90 days. Decision records are retained for 180 days (closed/suppressed) or until manually deleted. Account data is retained for the duration of your subscription plus 30 days after cancellation.

7. Your Rights

You have the right to: (a) access your personal data; (b) correct inaccurate data; (c) request deletion of your data; (d) export your data; (e) withdraw consent for data processing. Contact us at privacy@gahnadi.com to exercise these rights.

8. Cookies

The Platform uses essential cookies for authentication (via Clerk) and session management. We do not use tracking cookies or third-party advertising cookies.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email. Continued use of the Platform constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions: privacy@gahnadi.com

Data Protection Officer: Utpal Chakraborty, GAHNA AI Lab, Mumbai, India