Privacy Policy

Version 1.1 · Effective: 31 July 2026 · Last updated: 31 July 2026 · Compliant with DPDP Act 2023 baseline (pending final legal review)

1. Who this policy applies to

This Privacy Policy describes how Abhijit Paranjape (“we”, “us”), a sole proprietorship based in Pune, Maharashtra, India, doing business as Abhijit. and operating the Abhilekh platform, collects, uses, and protects your personal data.

It applies to everyone who visits our marketing site (abhilekh.digital), creates an account, redeems a trial code, or uses the Service in any way.

2. What data we collect

2.1 Account data

• Your name and email address (required for registration)
• Your password (stored hashed with bcrypt; we never see the plain text)
• Your tier, access status, and payment history (managed by us off-app)
• Your Brand Kit — brand name, tagline, phone, address, colours, logo, primary language (all optional)
• Uploaded reference images (stored on Vercel Blob for use in content generation)

2.2 Content data

• The briefs you enter into the wizard
• The content generated on your behalf (captions, images, videos)
• Your review actions (approve/reject/edit)
• The published post URLs on destination platforms (Instagram, LinkedIn, etc.)

2.3 Usage data

• Which pages you visit and when (basic server logs)
• Which content types and platforms you use
• Your monthly generation count (for quota enforcement)

2.4 What we do NOT collect

• We do not use marketing cookies or web analytics trackers (no Google Analytics, no Facebook Pixel)
• We do not sell your data to third parties
• We do not read your DMs or private social messages

3. How we use your data

• To run the Service. We use your account and content data to generate posts, publish them, and enforce quotas.
• To improve the Service. We may look at aggregated, anonymised usage patterns to prioritise features and fix bugs.
• To communicate with you. Account emails (password reset, billing, service updates) via our transactional email provider Resend. WhatsApp support at your request only.
• To comply with legal obligations. If required by law or court order.

We do not use your content to train AI models. Your briefs and generated outputs are used only to serve you.

4. Third parties we share data with

We use a small set of third-party services to operate. Data flows are limited to what each provider needs to do its job:

Each of these providers has its own privacy policy. We’ve selected providers with strong data-protection records but cannot guarantee their practices.

5. Where your data is stored

Your account and content data lives in a Neon PostgreSQL database hosted in the AWS ap-southeast-1 (Singapore) region. Backups are held in the same region.

Uploaded files (logos, images) are stored on Vercel Blob (AWS us-east-1). Generated videos are stored on Vercel Blob until you download them.

When we send data to third-party AI providers, that data may transit through servers in the United States, EU, or elsewhere depending on the provider’s infrastructure. Provider processing is transient — they do not retain your content beyond the request.

6. How long we keep your data

• Account data: for the life of your account, plus 6 months after deletion (for financial reconciliation)
• Content jobs: for the life of your account. You can delete individual jobs from the dashboard at any time.
• Server logs: 30 days rolling
• Payment records: as required by Indian tax law (typically 7 years)

7. Your rights (DPDP Act 2023 §11–§14)

As a Data Principal under India's Digital Personal Data Protection Act 2023, you have the right to:

• Access the personal data we hold about you (§11)
• Correct inaccurate or misleading data and complete incomplete data (§12)
• Erasure — delete your account and all associated data (§12)
• Export your content jobs in a portable format
• Withdraw consent for optional processing at any time (§6(4))
• Grievance redress — see §11 below for our Grievance Officer
• Nominate another individual to exercise your rights in the event of your death or incapacity (§14). Send the nomination to our Grievance Officer with the nominee's name, relationship, and contact.

To exercise any of these rights, message us on WhatsApp at +91 99233 84420 or email paranjapeabhijitashok@gmail.com. We’ll respond within 7 working days.

8. Security

We take these measures to protect your data:

• All connections use HTTPS/TLS 1.2+
• Passwords are hashed with bcrypt (never stored in plain text)
• API keys are stored encrypted in Vercel environment variables
• Database access is restricted to our production application only
• We use JWT-based sessions with short expiry

No system is 100% secure. If we discover a data breach affecting your account, we’ll notify you within 72 hours via email.

9. Children

The Service is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe we have, contact us immediately and we’ll delete it.

10. Changes to this policy

We may update this policy occasionally. Material changes will be notified by email to your registered address at least 15 days before taking effect.

11. Grievance Officer & contact

Per DPDP Act 2023 §8(9), we designate a Grievance Officer to receive and respond to complaints about our data-handling practices. We respond within 7 working days.

Abhijit Paranjape
Grievance Officer & Data Fiduciary
Pune, Maharashtra, India
Email: paranjapeabhijitashok@gmail.com
WhatsApp: +91 99233 84420

If we cannot resolve your grievance within 30 days, you have the right to escalate to the Data Protection Board of India (DPBI) once established under DPDP Act 2023.