Privacy Policy

Who looks after your data

NASHSMATRIXGARD (OPC) PRIVATE LIMITED (CIN U62099TN2023OPC166246), India, which sells EarPrompt by KanavuLab. For any question about your data, write to [email protected].

What we do not collect

• Your scripts. They stay in your browser on your device.
• Your videos, your voice and your camera picture. Recording and Clean Cut run on your device. Nothing is uploaded.
• Your name, phone number or contacts.
• Your device's location. If you subscribe, the only place detail we hold is the Indian state you pick yourself.
• Your card, bank or UPI details. Razorpay takes the payment and we never see them.

We show no ads, we use no analytics or tracking tools, and we do not sell or rent data to anyone.

What we collect if you sign in or subscribe

You can use EarPrompt without an account. Then we hold nothing about you.

If you sign in, our server stores:

• Your email address.
• Your plan. Whether Creator is active, when the paid month ends, and the subscription and customer ids that Razorpay gives us.

If you subscribe to Creator, our server also stores:

• Your state. You choose your Indian state before you pay, so that GST is charged correctly.

After each payment a GST invoice is created in Zoho, our invoicing provider, and emailed to you. The invoice carries your email address, your state and the amount.

To make sign-in work and keep it safe, the server also keeps for a short time:

• a scrambled copy of your 6-digit code, for up to 10 minutes;
• a scrambled record of your sign-in on that browser, for up to 90 days or until you sign out;
• scrambled counters that limit how many codes one email address or one network address can ask for. These are removed within hours.

"Scrambled" means the value is turned into a form that cannot be turned back.

Why we use it

• Your email: to send your sign-in code, to know which account is yours, and to write to you about your account or a change to these pages.
• Your plan: to switch Creator on and off and to stop billing when you cancel.
• Your state: to charge GST correctly and to make the GST invoice for each payment.
• The short-lived records: to keep you signed in and to stop misuse of the sign-in form.
• To meet duties the law places on us, such as tax records.

We do this with your consent, which you give when you sign in. You can take it back at any time by deleting your account.

Who else handles it

Four companies process data for us, only to run EarPrompt:

• Cloudflare hosts the site and the database. Like any web host, it handles technical data such as your network (IP) address to deliver and protect the site.
• Razorpay takes Creator payments. You give your payment details, and any contact details it asks for, straight to Razorpay. Its own privacy policy covers them.
• Resend sends the sign-in email. It receives your email address and the code.
• Zoho is our invoicing provider. It creates the GST invoice after each payment and emails it to you. It receives your email address, your state and the invoice amount.

These companies may process data on servers outside India. We may also share data if a law or a court order requires it.

How long we keep it

• Your email, plan and state: until you delete your account.
• Sign-in codes: up to 10 minutes. Sign-in records: up to 90 days.
• Emails you send us: as long as needed to deal with your request.
• GST invoices: kept in Zoho and in our accounts for the period tax law requires.
• Payment records: kept by Razorpay under its own policy.

Deleting your account

Open the Account screen in the app and choose Delete account. This removes your email address, your plan, your state and your sign-in records from our database straight away.

Deleting your account also ends Creator at once. If you want to keep Creator until the end of the month you paid for, cancel first and delete the account later.

Deleting your account clears our database only. It does not delete what Razorpay holds: the customer record and the payment records that Razorpay made for you stay with Razorpay, under its own privacy policy. The GST invoices for your past payments stay in Zoho and in our accounts for the period tax law requires.

If you cannot reach the Account screen, email [email protected] from the address on the account and we will delete it for you.

Your rights

Under India's Digital Personal Data Protection Act, 2023 you can:

• ask what personal data we hold about you and who it was shared with;
• ask us to correct or update it;
• ask us to erase it;
• take back your consent;
• name another person to use these rights for you if you die or cannot act;
• complain to us, and get an answer.

To use any of these, email [email protected] from the address on your account.

Cookies and storage on your device

• One cookie. When you sign in we set one cookie, named __Host-ep_session, that keeps you signed in for up to 90 days. Scripts on the page cannot read it and it is sent only over a secure connection. It is removed when you sign out.
• No tracking cookies. This website and the app set no advertising or analytics cookies.
• Browser storage. The app keeps your scripts and settings in your browser's storage on your device so they are there next time. Clearing your browser data removes them.
• Payment window. When you pay, Razorpay's checkout opens and may set its own cookies.

Children

Accounts are for people aged 18 or over. If you are under 18, do not sign in. You can still use EarPrompt without an account, and then we hold no data about you.

Security

The site is served over a secure (HTTPS) connection. Sign-in codes and sign-in records are stored only in scrambled form. No system is perfectly safe, so we keep as little as we can.

Changes to this policy

If we change what we collect or why, we will update this page and the date at the top. If the change matters to people with accounts, we will email them.

Contact and complaints

Questions or complaints about your data: [email protected].

Grievance officer: Avinash S, Director, NASHSMATRIXGARD (OPC) PRIVATE LIMITED. Email: [email protected]

If you have complained to us and are not satisfied with the answer, you can take the matter to the Data Protection Board of India.