Privacy Policy
Learn how we collect, use, and protect your personal information.
Last Updated: October 13, 2026
Introduction
Vatsa AI ("we", "our", or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI platform, website, and related services (collectively, the "Service"). Please read this policy carefully. By using the Service, you consent to the data practices described herein.
Information We Collect
Account Information
When you create an account, we collect your name, email address, password hash, and profile picture (if provided via Google Authentication). We may also store your subscription tier and billing details through our payment processor.
Chat History
All conversations you have with our AI are stored in your account so you can return to them and continue where you left off. We do not use your conversations to train AI models. You can delete individual conversations or your entire history at any time. To learn whether common questions could be answered faster, we keep, for 24 hours, a one-way fingerprint of a conversation's first question (it can't be turned back into the text, and it isn't linked to your name or email) and daily counts of how often the same question comes back. We never store the question itself for this, and no one else's answer is ever shown to you.
Uploaded Files
Files you upload (e.g., documents, images) are processed temporarily to generate responses. They are shared only with the AI model provider that answers your message, and are deleted after processing unless you explicitly save them to your account.
Usage Analytics
If you allow analytics cookies, we use Google Analytics 4 to see which pages are visited and which features are used (for example: signing up, sending a chat message, generating an image). Google Analytics identifies your browser by a random cookie ID, not your name or email, and we never send it your messages, files or email address. According to Google, Google Analytics 4 does not log or store IP addresses. Analytics stays off until you accept it in the cookie banner, and you can switch it off at any time on our Cookie Policy page.
Device Information
We automatically collect device type, operating system, browser version, IP address, and referring URLs to ensure compatibility and security.
Error Reports
When a page in the app fails, it sends an error report to our own servers: the error message and its technical details (the stack trace), the page's address without anything after the “?”, your browser's user agent, and your account if you are signed in. If you use “Report a problem”, the note you write is added to it. Before a report is stored, anything that looks like a sign-in token or an email address is removed from it. We use them only to find and fix problems. They are included when you export your data (Settings → Account), deleted with your account, and deleted after 30 days in any case. A report sent while signed out is not linked to any account. We may also send errors to Sentry, the error-monitoring service we use (Functional Software, Inc.), which stores them on its servers outside India: the error message and its technical details, the page or part of the app where it happened, your browser and device type, and the timing of a sample of page loads and requests so we can find slow parts. Sentry receives an anonymous ID instead of your name or email address, never your sign-in token or cookies, never the note you write in “Report a problem”, and never a recording of your screen. Anything that looks like a token or an email address is removed before it is sent. Sentry deletes this data after 30 days on our plan.
Cookies
We use essential cookies to keep you signed in and to remember your theme and language. Google Analytics cookies are set only if you accept them. Our Cookie Policy lists every cookie and lets you change your choice.
AI Generated Content
Any content generated by our AI is processed and stored as part of your chat history. We do not claim ownership over your inputs or generated outputs; you retain all rights to your content.
How We Use Your Information
- Provide, maintain, and improve the Service
- Personalise your experience and deliver relevant content
- Process transactions and send related notifications
- Respond to your comments, questions, and support requests
- Send you technical updates, security alerts, and administrative messages
- Monitor and analyse usage trends to enhance the Service
- Comply with legal obligations and enforce our Terms of Service
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Chat history and uploaded files are kept until you delete them or request account deletion. Error reports are deleted after 30 days, in our own log and at Sentry. Google Analytics event data is kept for up to 14 months and then deleted by Google.
Security
We implement industry‑standard security measures, including encryption in transit (TLS) and at rest (AES‑256), to protect your data. However, no method of transmission over the internet is 100% secure; we cannot guarantee absolute security. We regularly review our security practices and update them as needed.
Third‑Party Providers
- Google and GitHub – for sign‑in and identity verification
- AI model providers (DeepSeek, Anthropic, OpenAI, Google and others), reached through OpenRouter, and Pollinations for images – your messages and attached files are sent to them to generate replies, under their own terms
- Razorpay (payment processor) – takes payments on our behalf; card, UPI and bank details go to Razorpay and we do not store them
- Cloud Infrastructure – for hosting and data storage
- Google Analytics (Google LLC) – usage statistics, only if you accept analytics cookies
These providers have their own privacy policies and are contractually obligated to protect your data.
Your Rights
- Access, correct, or delete your personal data
- Object to or restrict processing of your data
- Request data portability
- Withdraw consent at any time
To exercise these rights, please contact us.
Account Deletion
You may delete your account at any time from your account settings. Upon deletion, all your personal data, chat history, and uploaded files are permanently removed from our active systems within 30 days. Anonymised usage data may remain for analytical purposes. Payment records (order and payment ids, amount, plan, status and the email address used at the time of payment) are kept after deletion for accounting and legal obligations; they are no longer linked to an account.
Contact Us
If you have any questions or concerns about this Privacy Policy, please reach out to us at: Email: contact@vatsaai.com Address: Bighnesh Vatsa, J-15, Khandagiri Marg, Dharam Vihar, Khandagiri, Bhubaneswar, Odisha 751030, India