Siya Says — Privacy Policy

1. Data we process

• Your email address.
• The chat you upload, the details you add about it and an optional cover photo.
• The report generated at your request.
• Payment information, processed by Razorpay. We never see your card details.
• Technical data needed to run and secure the service.
• Website analytics: anonymous browser and visit identifiers, pages and flow steps visited, active time, approximate country, device and browser family, and referrer hostnames. Analytics does not collect chat or report content, form text, email addresses, full URLs, or raw IP addresses.

Phone numbers, card numbers and links in your chat are removed before our AI reads it. Everything is encrypted, your cover photo never reaches the AI.

2. People in your chat

Before uploading, you confirm that you were in the chat and are allowed to upload it. We use other people's messages only to write your report. If you appear in a report you didn't order, email us and we'll take it down.

3. Why we use it

To create and deliver your report, take payment, answer your requests and meet legal obligations. We don't sell your data, and we don't use your chats or reports to train AI models.

We use website analytics to understand visits and improve the upload and payment flow. We respect Do Not Track and Global Privacy Control signals by disabling this analytics tracking.

4. Services that help us

We share only the data each provider needs: Anthropic to generate reports, Razorpay for payments, [Google Firebase] for hosting and storage, Cloudflare for security, and [ZeptoMail or Resend] for email. Some of them process data outside India. We may also share data with government authorities when the law requires it.

5. How long we keep it

• Website analytics: visits and their events are removed after 90 days without activity. Anonymous browser identifiers expire after 90 days.
• Uploaded chats: deleted once your report is delivered. If a report fails, we keep the chat for up to 30 days to fix it, then delete it.
• Reports: kept until you delete them from your account.
• Email address, order details and records of how your data was processed: kept for 1 year, as the DPDP Rules require.
• Payment records and invoices: kept as long as tax law requires, generally up to 8 years.
• Reports reported for abuse: taken offline straight away, then kept with related records for 180 days in case of an investigation, or longer if a court or authority requires it, then deleted.

Contact