Legal · Privacy Policy

Privacy Policy

Version 1.0.0 · Effective 1 June 2026 · Brihas Intelligence Private Limited

01What Personal Information May Be Collected

In the course of providing services, the Company may collect certain Personal Information from you, including the following:

1. Personal Details: Name, age, and any other details that may determine your identity.
2. Contact Information: Address, email, and telephone number.
3. Information to Provide Services: Objective of procuring the services, event for which services are required, etc.
4. Financial Information: Third-party wallets, credit card information, and history of transactions carried out on the Platform (processed via Razorpay; we receive only payment status).
5. Technical Data: IP address and browser information.
6. Platform Usage Data: When you use our Platform, we collect information provided by you, including your inputs, file uploads, and outputs generated by the Platform.
7. Audio Data: If you use voice or audio settings to speak to the Platform, we may store the voice/audio recording of such sessions solely for the purposes of maintaining longitudinal history.
8. Video Data: If you choose to use the video feature on the Platform, we may collect and store the video recording of such sessions solely for the purposes of maintaining longitudinal history.
9. Feedback: User ratings, surveys, or feedback provided by you, collected for the purposes of improving the Platform.
10. Brihas Quotient: We may analyse your conversations with the Platform to generate a quotient (the Brihas Quotient) and dimension scores.
11. Longitudinal History: Your longitudinal history of all the inputs you provide to the Platform shall be stored and processed in accordance with applicable law.

You agree and voluntarily consent to provide correct, complete, and accurate information. We shall not be liable for any inaccuracies in the information provided by you or any direct or indirect consequences of such inaccurate information. If we find out, either on our own or through any other means, that you have provided false information, we shall be at liberty to restrict your access to the Platform and our services.

02How Does the Company Collect Personal Information

a) Information provided to the Company

We may ask for your Personal Information including full name, contact details, and birth date at the time of registration on the Platform. You willingly consent to provide Personal Information at the time of registration.

b) Information collected automatically

Some data such as your browser type, IP address, and usage patterns may be automatically collected using cookies. Cookies are tiny pieces of information which a website sends to your computer. We use cookies to provide a more personalised experience on the Platform. You can change your browser settings to disable sharing of information through cookies. Tracking pixels including browser HTML pixels may also be used to collect information about user behaviour. You agree that cookies and pixels are used to improve your experience as an end-user.

c) Information received from third parties

We may receive information about you from third parties. For example, if you access our Platform through a third-party connection or log-in (such as through your social media accounts), that third party may pass certain information about your use of its service to the Company. This could include your user ID, an access token, any information you have permitted the third party to share with us, and any information you have made public in connection with that service.

d) Information shared voluntarily by you

In the course of using the Platform, you may share information/inputs to the Platform voluntarily.

03What Purposes Is the Personal Information Used For

• Verifying your identity — contact details collected may be used to verify your identity.
• Provision of services — inputs you provide to the Platform are used to generate output and deliver services.
• Personalising your experience — information collected helps personalise your experience and provide a better, more efficient service.
• Improving the design and style of the Platform.
• Developing new products, features, services, and functionality.
• Communication regarding marketing and promotion of products/services.
• Meeting government, legal, and judicial obligations.

Given the nature of this Platform, where users share details about their emotional lives, relationships, and personal challenges, conversations may include information of a highly personal nature. We implement appropriate technical and organisational safeguards to all conversational data. We never sell this data. We never use it for targeted advertising.

04How Long Will Personal Information Be Retained

We retain your personal data only for as long as the purpose for which it was collected continues to be served, or until you request erasure, whichever is earlier, after which it is deleted in accordance with the DPDP Act and the DPDP Rules. We may retain limited records and logs for a minimum period of one year, or a longer period where applicable law so requires, solely to meet legal, regulatory, or compliance obligations. Such retention is limited to what is necessary and does not extend to retaining all conversational data by default.

05Whom Does the Company Share Your Personal Information With

• Third-party service providers: We may share your information with third-party service providers for the purpose of providing the Service. Those providers will be given limited access only as reasonably necessary to deliver the Service.
• Employees/Consultants: The Company may share your information with its employees and consultants, solely for the purposes of providing you services.
• Compliance with law: The Company can share your information when compelled by a government agency, law, regulation, court, or other legal process.
• Research: We may share anonymised, aggregated insights (not identifiable to you) with research partners, AI safety researchers, or in published reports to advance responsible AI development.

06Rights of the User

You have the following rights under this Privacy Policy:

• Right to access — you may, at any point of time, access your Personal Information through the Platform.
• Right to correction — you may request correction or update of your Personal Information by sending an email to contact@brihas.ai.
• Right to erasure — you may request deletion of your Personal Information by emailing contact@brihas.ai or using the self-service Account screen.
• Right to restrict processing — you may request restriction of processing or raise objections. Note that restrictions may limit our ability to provide seamless services.
• Right to data portability — you may request that we transfer the Personal Information we have collected to another organisation or directly to you.
• Right to nominate — you may request to appoint a nominee who shall act in the event of your death or incapacity.

We shall respond to your requests as soon as reasonably practicable and within the timelines prescribed under the DPDP Act and the DPDP Rules. Grievances will be acknowledged promptly and resolved within the period prescribed under applicable law.

07How Do We Protect Your Information

• We have put in place appropriate physical and technical security measures to protect the Personal Information we collect from you.
• We require those with whom we share your Personal Information to enter into confidentiality arrangements so that they do not disclose your personal information. We shall not be liable for any data loss, unauthorised disclosure, or any damage arising out of in connection with the disclosure of data by third parties.
• By complying with all applicable laws and regulations.

08Intimation of Personal Data Breach

On becoming aware of any personal data breach, the Company is obligated to inform you in a concise, clear and plain manner without undue delay. Notification will be through your submitted contact details and shall include:

• A description of the breach;
• Consequences that are likely to arise;
• Measures implemented by the Company to mitigate the breach;
• Safety measures you should take to protect your interests;
• Grievance officer details to further co-ordinate if necessary.

Additionally, we shall intimate the Data Protection Board within 72 hours of becoming aware of the breach.

09Cross-Border Transfer of Data

The Company, for the purposes of processing your data, may transfer it outside the territory of India subject to restrictions that the Central Government may specify with respect to making such personal data available to any foreign state, or to any person or entity under the control of or any agency of such a state.

10Third-Party Websites

Some content on the Platform may contain links to third-party websites. If you choose to click on such links, you will be redirected to a third-party website. Our Terms of Use and Privacy Policy cease to apply as and when you are redirected to a third-party website. You are advised to read the privacy policy of such third-party websites before submitting any Personal Information. We shall not be responsible for any loss of information which may occur on such third-party websites.

11Changes to This Privacy Policy

There may be changes to this Privacy Policy from time to time. The last effective date shall be highlighted at the top of the policy. You shall be solely liable to review the Privacy Policy for any changes. The Company is obliged to intimate you regarding material changes.

12Force Majeure

You agree that you shall not hold the Company responsible or liable for any non-performance of obligations under this Privacy Policy if such non-performance arises due to events including but not limited to:

• Floods, fire, earthquakes, or any natural disaster or acts of God;
• Riots, war, or any such act of violence;
• Epidemics or pandemics;
• Network errors, unforeseen downtime of the internet, and power outages affecting internet services;
• Hacking or global internet shutdowns;
• Any change in applicable laws;
• Any other reason beyond the Company's control.

13Limitation of Liability

We are committed to protecting your Personal Information and to meeting our obligations under the DPDP Act and the DPDP Rules. Nothing in this Privacy Policy limits or excludes any liability that cannot be limited or excluded under applicable law. Subject to the foregoing, and to the maximum extent permitted by applicable law, the Company shall not be liable for indirect, consequential, or remote damages arising out of or in connection with this Privacy Policy. Any limitation of liability is further set out in our Terms of Use.

14AI-Specific Disclosures

When you converse with our AI, your messages are processed to generate contextually relevant responses:

• Conversation history within a session is used to maintain context.
• Anonymised conversation patterns may be used to improve AI safety and response quality.
• No human reads your conversations in real time unless required for safety investigations.
• Conversations may be reviewed by authorised personnel if flagged by automated safety systems.

AI Limitations — Important Disclaimers

The AI's responses are for general informational and conversational purposes only. They do not constitute medical, psychiatric, psychological, legal, financial, or any other professional advice.

• AI responses may be inaccurate, incomplete, or outdated. Do not rely solely on AI responses for important life decisions.
• Conversations with this AI do not enjoy legal professional privilege, doctor-patient confidentiality, or any statutory protection of confidentiality.
• Each conversation is a discrete interaction. The AI does not retain awareness between separate sessions unless you use our memory features.
• Automated systems monitor for safety indicators (e.g., expressions of self-harm intent). Where triggered, a safety protocol may be activated overriding normal privacy protections.
• We do not use your Personal Data for automated decision-making that produces significant legal or similarly significant effects on you. Our AI provides conversational assistance only and does not make decisions about your employment, credit, insurance, or similar matters.

15Data Disclaimers

General Disclaimer

While we implement industry-standard security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your Personal Data against sophisticated cyber threats, force majeure events, or circumstances beyond our reasonable control.

Conversational Data Disclaimer

You understand and acknowledge that:

1. Conversations are stored and processed by automated AI systems and may be reviewed by authorised human employees in limited circumstances (safety, legal, quality assurance).
2. The Platform is not a mental health service. AI responses should not be treated as therapy or clinical care.
3. Information shared about third parties (other people in your life) is processed without their knowledge or consent. Please exercise caution and consider the privacy of others. We process such information only to the extent necessary to provide the Platform to you.
4. Conversation history will be used to train or improve AI models only where you have given separate, specific consent through a dedicated setting in Privacy Settings, which is off by default. You may withdraw this consent at any time without affecting your access to the Platform.

Emergency Disclaimer

While our AI is designed to respond sensitively to expressions of distress, it cannot call for help, contact emergency services on your behalf, or guarantee a timely human response in a crisis.

Accuracy Disclaimer

The artificial intelligence powering this Platform may generate responses that are factually inaccurate, contextually inappropriate, or potentially harmful. We continually work to improve safety and accuracy, but you should independently verify any important information or seek professional advice before acting on AI-generated content.

We use cloud infrastructure and AI service providers who process data on our behalf under contractual confidentiality and security obligations.

16Children's Data

Our Platform is not intended for individuals under the age of 18 years. We do not knowingly collect Personal Data from minors. The Platform involves conversational AI interactions touching on personal life, relationships, and emotional well-being — such content is not appropriate for minors and could have a detrimental effect on their well-being.

Consistent with Section 9 of the DPDP Act, the Platform is not made available to minors. Parents, guardians, or any third party may not create an account or provide consent to allow a child to use the Platform.

Age verification may be conducted through one or more of the following methods:

• DigiLocker-based identity verification (Aadhaar-linked age confirmation);
• Automated face age estimation (privacy-preserving; no biometric data retained);
• Mobile number-linked age inference via telecom operator APIs;
• Credit/debit card linkage (implying 18+ account holder) for subscription services;
• Manual document review by trained compliance staff for edge cases.

We comply with Privacy-by-Design principles in all age verification processes. The minimum data necessary is collected, verification results are not stored beyond the verification event, and raw identity documents are deleted within 24 hours of verification completion.

17Governing Law and Jurisdiction

All matters, claims, and any other issues which may directly or indirectly arise from or in connection with this Privacy Policy shall be governed under the laws of India. The courts at New Delhi shall have exclusive jurisdiction for all disputes arising under this Privacy Policy.

18Redressal of Grievances

If you have any questions or grievances regarding our Platform, the content thereof, our data handling policies, or our services, you can reach out to the Grievance Officer of the Company:

• Designation: Grievance Officer / Data Protection Officer
• Email: contact@brihas.ai
• Address: Gurugram 122101

We respond to grievances within 30 days of receipt, in line with DPDP requirements. If you are not satisfied with our response, you may approach the Data Protection Board of India.