Privacy Policy

This policy explains what personal data PsyDox collects when you use psydox.in, why, how long we keep it, and your rights under India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

What we collect

• Account data: your name, email address and a securely hashed password. We never store your password itself.
• Content you upload: product images, spreadsheets and marketplace templates you give us to process, and the images and text PsyDox produces for you.
• Payment data: wallet top-ups are processed by Razorpay. We receive the payment status, amount and reference — never your card, UPI or bank details.
• Usage and technical data: which features you use, error and security logs, and your IP address, to run, secure and improve the service.

Cookies

We use one essential cookie (psydox_session) to keep you signed in. We do not use advertising or tracking cookies. Page-view statistics come from Vercel Web Analytics, which sets no cookies and does not identify you (it counts visits per page, country and device type).

How we use your data

• To provide the service: processing your images and listings, running the tools you choose, and showing your history.
• To bill AI features from your prepaid wallet and keep accurate payment records.
• To send account emails (verification, password reset, receipts) — no marketing email without your consent.
• To keep PsyDox secure, prevent abuse, and meet legal obligations.

We do not sell your data, and we do not use your uploads to train AI models.

Who processes your data for us

We use these service providers (“processors”), each bound by contract to use your data only to provide their service to us:

• Railway — hosts the PsyDox API and its database (servers in the EU).
• Vercel — hosts the website and its global edge network; cookie-free page-view statistics (Vercel Web Analytics).
• Resend — delivers account, receipt and support emails.
• Razorpay — processes wallet top-ups (we never see your card, UPI or bank details).
• Google (Gemini), OpenAI and Anthropic — AI model providers that process an image or text only to produce the result you asked for. They do not use it to train their models under our API terms.

Your data may be processed outside India; we use providers that protect it to a standard comparable to Indian law.

How long we keep it

• Batch runs and their files are deleted automatically 24 hours after they finish (download the ZIP before then).
• On a free account, other results are kept for 30 days; we email you 5 days before anything is deleted. On a paid account they stay until you delete them or close your account.
• PsyDox Chat conversations are deleted after 30 days without activity, or at once with “Forget my data” in the chat settings.
• Payment and invoice records are kept as long as tax and accounting law requires.
• Security logs are kept for a limited period and then deleted.

Your rights

You can ask to access, correct or delete your personal data, withdraw consent, or nominate someone to act for you. Write to ⟨support email⟩; we reply within 30 days. Deleting your account removes your uploads and results; records we must keep by law are retained only for that purpose.

Security

Data is encrypted in transit (HTTPS), passwords are hashed, access is limited to what each role needs, and databases are backed up daily.

Grievance Officer

⟨Name of the Grievance Officer⟩, ⟨grievance email⟩, ⟨Registered address, city, state, PIN⟩. We acknowledge complaints within 24 hours and resolve them within 15 days.

Changes

We will post any change here and, for significant changes, email you before it takes effect.