Global Privacy Policy & Terms
Transparent personal data governance complying with the EU GDPR, UK-GDPR, Malaysian PDPA 2010, California CCPA/CPRA, and Singapore PDPA 2012.
1. Personal Information We Collect
- Authentication Information: Your registered email address, display name, and securely hashed passwords (or Google OAuth profile tokens).
- Usage & Quota Data: Non-personally identifiable token usage numbers, active engine mode choices, quota tracking counters, and session timestamps.
- Session Content: Prompts, lecture audio snippets uploaded for transcription, and documents attached to chats, processed solely to provide requested responses.
- Local Browser Storage: Local preferences, session lists, and theme selections stored via HTML5
localStorageon your own device.
2. Lawful Bases for Data Processing
We process your personal information strictly under recognized legal bases:
- Contractual Performance: Necessary to provide you with the AI reasoning, lecture notes, and slide generation you request.
- Legitimate Interests: Necessary to defend against brute-force attacks, prevent server abuse, and enforce fair-use rate limits.
- Explicit Consent: Provided by you upon account creation and continuing use.
3. Absolute Prohibition on Sale of Personal Data (CCPA/CPRA)
WE DO NOT SELL, RENT, TRADE, OR LEASE YOUR PERSONAL DATA. WE HAVE NEVER SOLD USER DATA AND WILL NEVER DO SO. WE DO NOT SHARE YOUR DATA WITH THIRD-PARTY DATA BROKERS OR ADVERTISING NETWORKS FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING.
4. Your Rights Across Global Jurisdictions
- European Union & United Kingdom (GDPR): Right to access your data (Art. 15), right to rectification (Art. 16), right to erasure / "Right to be Forgotten" (Art. 17), right to restriction of processing (Art. 18), and right to data portability (Art. 20).
- United States & California (CCPA/CPRA): Right to know what personal data is collected, right to delete personal information, right to correct inaccurate data, and right to non-discrimination for exercising your rights.
- Malaysia (PDPA 2010): Right to access personal data (Section 30), right to correct personal data (Section 34), right to withdraw consent (Section 38), and right to prevent processing likely to cause distress (Section 42).
- Singapore & Asia-Pacific: Right to access and correct personal data under Singapore PDPA 2012 and regional standards.
5. Data Retention & Account Deletion Requests
We retain your account records only for as long as your account remains active. You may request the immediate, permanent deletion of your account, token quotas, and associated records at any time by emailing sureshganesen95@gmail.com with the subject line "Permanent Data Deletion Request". All records will be wiped within thirty (30) days.
6. Data Controller & Inquiries
Data Controller: ATOM FORGE
Founder & Lead Architect: Suresh Ganesen
Official Contact Email: sureshganesen95@gmail.com