Privacy Policy · AiGeenie

1. Who is responsible

Regnum Tech Studio Private Limited, 508, Takshashila Apartment, Majuragate, Surat, Gujarat, India, operates AiGeenie. For questions about this policy or about your own data, write to support@aigeenie.com.

2. Two kinds of information

It matters which is which, so this policy separates them throughout.

Your information — the account details of the advisor or practice using the Service. We decide how this is handled.
Your clients' information — the records you enter about the people you advise. You decide how this is handled; we process it on your instructions in order to run the Service for you.

3. What we collect

From you

Name, email address, phone number and the name of your practice.
Authentication details. Passwords are stored only as a salted hash and are never readable by us. If you sign in with Google we receive your name, email address and profile picture from Google.
Subscription and billing records: which plan, what was charged, invoice history. We do not receive or store your full card number — that goes directly to our payment processor.
Technical records created by using the Service: sign-in times, IP address, browser, and application error logs.

From you, about your clients

Whatever you choose to enter: names, contact details, dates of birth, addresses, policy and premium details, nominee details, claim details, notes you write, and documents you attach. You control what goes in.

4. Why we use it

To provide the Service, keep your practice's data separate from every other, and show you your own records.
To take payment and issue invoices.
To send service messages: renewal reminders you have set up, invoices, password resets, and replies to your support requests.
To keep the Service secure, investigate abuse, and fix faults.
To meet legal and tax obligations.

We do not sell personal information, and we do not use your clients' records to advertise to them or to anyone else.

5. Google Drive

Connecting Google Drive is optional and you control it.

We request a single permission, drive.file. It allows an application to see and manage only the files that application has itself created. We cannot list, open or search the rest of your Drive.
Documents you upload through the Service are stored in your own Google Drive. We keep a reference to the file and its details — name, type, which client or policy it belongs to — not a copy of its contents.
Access tokens issued by Google are stored encrypted and are used only to create, open and organise those files on your behalf.
You can disconnect Drive at any time in your settings, or revoke access from your Google account. Disconnecting stops our access; it does not delete files already in your Drive.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

6. The assistant

When you ask Geenie a question, the question and the results of the database query it runs are sent to a third-party AI provider so that an answer can be written. Geenie itself — the questions it is allowed to ask of your data, the limits it runs under and the answers it is allowed to give — is built by us; the language model that writes the wording is operated by a third party under contract, and we may change which one without notice. That query runs with your own permissions, so it can only reach records you could already see.

We keep your conversations so you can return to them and so we can improve the assistant. Providers are contracted not to train their models on data sent through their business APIs.

7. Who else sees it

We share information only with the suppliers who make the Service work, and only as far as each needs:

Amazon Web Services (Mumbai, India) — database, authentication and sending email.
Cashfree Payments — payment processing.
Google — Drive storage, where you have connected it, and sign-in, where you use it.
Third-party AI providers — the language models behind assistant answers, as described above.

We may also disclose information where the law requires it, or to protect our rights or someone's safety.

8. Where it is kept

Your practice's records are held in a database on Amazon Web Services in Mumbai, India (ap-south-1). The application itself runs on servers in Mumbai, India, and email is sent from Mumbai as well.

One thing leaves the country: a question you put to the assistant, and the results of the query it runs, are sent to the AI provider that writes the answer, and those providers process data outside India. Where that happens we rely on the contractual protections each provider offers, including their undertaking not to train on data sent through their business APIs. Nothing else about your practice leaves India.

9. How long it is kept

Your practice's records are kept while your account is open.
After you close your account we delete them after a reasonable period, except where we must keep something by law — invoices and tax records in particular.
Technical and security logs are kept for a limited period and then deleted.

10. Security

Traffic is encrypted in transit. Practices are separated at the database level rather than by application code, so a fault in a screen cannot show one practice another's records. Stored credentials — SMTP passwords, Google tokens, payment keys — are encrypted with a key held outside the database. Access by our staff is limited to what is needed to support you, and administrative access to an account is recorded.

No system is perfectly secure. If a breach affects your data we will tell you and the relevant authority as the law requires.

11. Cookies

We use cookies only to make the Service work. There are no advertising cookies and no third-party tracking on the Service.

Sign-in — keeps you signed in and refreshes your session. Removing it signs you out.
Language (locale) — remembers which of the eight languages you chose.
Signup and checkout (iioe_checkout, iioe_promo, iioe_promo_pending) — carry the plan and promo code you picked from one step to the next. They expire within a day.
Referral (iioe_ref) — remembers whose link brought you, so a referral can be credited after you subscribe.
Google sign-in and Drive (google_oauth_state) — a short-lived value that proves a sign-in or connection request came from us and not from somewhere else.

Your browser can block or clear cookies. Blocking the sign-in cookie makes it impossible to use the Service.

12. Your rights and choices

Under the Digital Personal Data Protection Act, 2023 you may ask us to give you a copy of the personal data we hold about you, to correct or complete it, to erase it where we are no longer required to keep it, and to nominate someone to exercise these rights if you die or become incapacitated. Where we rely on your consent you may withdraw it. Write to the Grievance Officer below and we will answer.

In the Service itself you can:

See and correct your own details in your profile at any time.
Export your records, or ask us to delete your account.
Disconnect Google Drive.
Turn off notification emails you have chosen to receive. Service messages such as invoices and password resets continue.

If one of your clients asks to see, correct or delete what is held about them, that request is for you to answer as the practice holding it. We will help you act on it.

13. Children

The Service is not intended for anyone under 18 to hold an account.

14. Changes

We may update this policy. The version and effective date at the top of this page tell you which text applies, and we will tell you before a significant change takes effect.

15. Grievance Officer

If you are unhappy with how we have handled your personal data, or with an answer we have given, write to our Grievance Officer:

Mr. Deepak Joshi
Grievance Officer, Regnum Tech Studio Private Limited
508, Takshashila Apartment, Majuragate, Surat – 395002, Gujarat, India
support@aigeenie.com

We aim to acknowledge a complaint within two working days and to resolve it within thirty days, as the rules require. If you are still not satisfied you may complain to the Data Protection Board of India.

16. Contact

Write to support@aigeenie.com with any question about this policy or about your data.