Privacy Policy

1. Introduction

Aditya Labs is a sole proprietorship operated by B Mohan, based in Watford, United Kingdom. Limited company formation is in progress. Aditya Labs ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at adityalabs.ai. The data controller for the purposes of this policy is B Mohan, trading as Aditya Labs.

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, password, and business details you provide during registration.
• Agent Data: Agent configurations, knowledge base entries, system prompts, and settings you create.
• Chat Data: Conversations between your AI agents and your end-users, including messages, timestamps, and session data.
• Usage Data: Information about how you use the Service, including page views, feature usage, and analytics data.
• Payment Information: Billing details processed securely through Stripe. We do not store credit card numbers.

3. How We Use Your Information

• To provide and maintain the Service
• To process your AI agent requests and generate responses
• To manage your account and subscriptions
• To provide analytics and usage reports
• To send important service updates and notifications
• To improve and optimize the Service
• To detect, prevent, and address technical issues

4. Data Sharing

We may share your data with:

• AI Providers: Chat messages are sent to AI model providers (e.g., OpenAI) to generate responses. These providers process data per their own privacy policies.
• Payment Processors: Stripe processes payment information securely.
• Infrastructure Providers: Supabase (database), Vercel (hosting) process data to provide the Service.

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate security measures to protect your data, including encryption in transit (HTTPS/TLS), secure database access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure.

6. Data Retention

We retain your data for as long as your account is active. Chat conversation data is retained for up to 90 days for analytics purposes. You may request deletion of your data at any time by contacting us.

7. Your Rights

You have the right to:

• Access and receive a copy of your personal data
• Rectify inaccurate personal data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability (export your data)
• Withdraw consent at any time

8. Cookies

We use essential cookies for authentication and security (see our Cookie Policy for details). We also use Google Analytics 4 with anonymized IPs as an optional analytics cookie — this is only activated after you give explicit consent through our cookie banner. We do not use advertising cookies, social media tracking cookies, or cross-site ad tracking. You can manage your cookie preferences at any time via the "Manage Cookies" link in our footer.

9. Children's Privacy

The Service is not intended for use by children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top of this policy indicates when it was last revised.

11. GDPR, CCPA & International Compliance

We comply with applicable data protection regulations worldwide. For detailed information about your rights under specific regulations, please see:

• GDPR Compliance — For EU/EEA users: data subject rights, legal basis, sub-processors, and international data transfers.
• Cookie Policy — Details on what cookies we use and how to control them.
• AI Compliance — EU AI Act, CCPA, PIPEDA, Australian Privacy Act, and responsible AI practices.

12. California Notice at Collection (CCPA/CPRA)

If you are a California resident, this notice is provided pursuant to the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Categories of personal information we collect:

• Identifiers: Name, email address
• Commercial information: Subscription plan, payment history
• Internet or network activity: Usage data, conversation logs, analytics
• Professional information: Business name, industry

Purposes:

• To provide and maintain the Service
• To process payments and manage subscriptions
• To send service-related communications
• To improve the platform and user experience

We do not sell or share personal information for cross-context behavioral advertising purposes.

Retention: Account data is retained while your account is active. Chat conversation data is retained for 90 days. Execution logs are retained for 1 year. Upon account deletion, data is removed within 30 days.

To exercise your CCPA/CPRA rights (right to know, delete, correct, or opt-out), contact us at hello@adityalabs.ai. For full details on your California rights, see our AI Compliance page, Section 6.

13. Contact Us

If you have questions about this Privacy Policy or your data, please contact us:

• Data Controller: B Mohan, trading as Aditya Labs
• Address: Watford, Hertfordshire, United Kingdom
• Email: hello@adityalabs.ai