# Privacy Policy

Your privacy matters to us. This policy explains how we protect and handle your data.

Last Updated: 21/2/2026

## 1. Introduction
Tatsat Bodhaa (OPC) Private Limited ("we", "us", or "Oiti") values your privacy. This policy explains how we collect, use, store, and protect your data when you use our website and services, including our AI-powered LinkedIn ghostwriting tools.

## 2. Contact Details
For questions about this privacy policy or to exercise your data rights, contact us at:
- Email: aitijya@ghostwriting-ai.com
- Company: Tatsat Bodhaa (OPC) Private Limited

## 3. Information We Collect
We collect the following types of information to provide and improve our services:
- **Account information**: Name, email address, and profile details you provide during registration.
- **Content data**: LinkedIn post drafts, generated content, writing preferences, and tone settings you create within the platform.
- **Usage data**: How you interact with our services, feature usage patterns, and session information.
- **Technical data**: Browser type, device information, IP address, and cookies for analytics and service functionality.

## 4. How We Use Your Information
- **Service delivery**: To generate LinkedIn content using AI, manage your account, and provide core product functionality.
- **AI content generation**: Your writing inputs and preferences are processed through third-party AI providers to generate content tailored to your voice and style.
- **Service improvement**: To understand usage patterns and improve our features and user experience.
- **Communication**: To send you service-related updates, respond to inquiries, and provide customer support.

## 5. AI Data Processing & Third-Party Providers
Oiti uses third-party AI providers to generate LinkedIn content on your behalf. When you use our AI features, your input text is sent to these providers for processing:
- **Anthropic (Claude)**: Used for text generation, accessed via AWS Bedrock. Anthropic does not use API inputs to train their models. See anthropic.com/privacy.
- **Google (Gemini)**: Used for text generation and image generation (Gemini 3 Image Preview), accessed via Google Cloud. Google does not use paid API data for model training. See ai.google/privacy.
- **Important**: We do not use your content to train any AI models. Your data is only processed to generate the specific content you request and is not retained by AI providers beyond what is needed to complete the request.

## 6. Data Retention
- **Active accounts**: Account information, generated content, drafts, and preferences retained as long as your account remains active.
- **After account deletion**: Upon request, all your personal data and generated content is permanently deleted within 48 hours of confirmation.
- **Usage and analytics data**: Anonymized, aggregated usage data may be retained for service improvement and cannot be linked back to you.
- **Legal obligations**: We may retain certain data if required by applicable law, even after account deletion.

## 7. Data Storage & Infrastructure
- **Database**: MongoDB Atlas, primary cluster located in Asia Pacific (Mumbai) region.
- **Encryption**: All data encrypted in transit using TLS/SSL and at rest within MongoDB Atlas.
- **Access control**: Production data access strictly limited; principle of least privilege.
- **Backups**: Database backups maintained for disaster recovery, subject to the same security controls as production data.

## 8. Data Security
- All data transmissions encrypted using TLS/SSL protocols.
- Authentication tokens encrypted using secure JWT standards.
- Regular security reviews of our infrastructure and access controls.
- Third-party AI providers accessed through secure, authenticated API connections.

## 9. Data Deletion & Your Rights
- **Right to access**: Request a copy of all personal data we hold about you.
- **Right to correction**: Request correction of any inaccurate personal data.
- **Right to deletion**: Request complete deletion of your account and all associated data; we will permanently remove all your data within 48 hours of confirmation.

To exercise any of these rights, email aitijya@ghostwriting-ai.com. We respond to all requests within 24-48 hours.

## 10. International Data Transfers
- Our primary database is hosted in India (Mumbai region).
- AI processing requests may be routed through AWS Bedrock (Anthropic Claude) and Google Cloud (Gemini).
- We ensure that all third-party providers maintain appropriate data protection standards.

## 11. Cookies & Tracking
We use essential cookies for service functionality and analytics cookies to understand how our website is used. You can control cookie preferences through your browser settings. We do not sell your data to any third parties.

## 12. Changes to This Privacy Policy
We may update this policy to reflect changes in our data practices or legal requirements. Significant changes will be communicated through our website or email. Changes become effective when posted with a new "Last Updated" date.