Privacy Policy
What we collect, why, who handles it, how long we keep it, and how you can see, download or delete it.
Who we are
SahajSuchna is an independent product run by Nupur Mithal, an individual, in India. We are not a government website. For anything in this policy, write to support@sahajsuchna.com.
You can read notices and search without an account. We collect personal data only when you sign in, pay, send us a message, or allow analytics or ads.
What we collect, why, and for how long
| Data | Why | Kept for |
|---|---|---|
| Email address and/or mobile number | To sign you in with a one-time code, and to send alerts you ask for | Until you delete your account |
| Sign-in codes (hashed), the address they were sent to, and the IP address that asked | To sign you in and to stop abuse | Up to 1 day after the code expires |
| Your session (a cookie holding a random token; we store only its hash) | To keep you signed in | 30 days from your last visit, plus 7 days |
| Profile: role, language, state, interests, followed sources, alert settings | To personalise your feed and alerts | Until you delete your account |
| Notifications we create for you | Your inbox and email digest | Read notifications: 180 days. Unread ones, and the record that stops us alerting you twice about the same notice: until you delete your account |
| Ask AI questions and answers | To answer you and keep your conversation history | 365 days after the conversation was last used |
| Ask AI usage counts, your plan, and the phone number you enter at checkout | Plan limits and payments | Daily counts: 90 days. Plan and checkout phone: until you delete your account |
| Payments: plan, amount, dates, Cashfree order and payment ids, and the payment event Cashfree sends us (which includes the email and phone given at checkout) | To deliver your plan, and for tax and accounting | 8 years. If you delete your account, the payment event is removed and the record is kept against an internal account number only |
| Reports, grievances and enquiries you send (message, email if you give one, a hashed IP address) | To respond to you | Open ones until they are closed; closed ones until 2 years after you sent them |
| Search words (not linked to you or your IP address) | To improve search | Only the most recent 20,000 searches are kept |
| Your cookie choices (a random device id, your choices, the policy version, your account if signed in) | To prove what you agreed to | 400 days; for signed-in accounts, until you delete your account |
| Server logs (IP address, page address including search words, browser type) | Security and fixing faults | Up to 30 days |
| Database error logs (can occasionally contain an email address or phone number) | Fixing faults | 30 days |
When you delete your account, we keep only what the law or a dispute may need: payment records (see above) and, if you ever paid, a record that you accepted these terms. Both are linked to an internal account number, not to your email or phone, and are removed after 8 years. We also keep a record that the account was deleted and when.
We use your data only for the purposes above. We do not sell it, and we do not share it with anyone except the service providers below and where the law requires us to.
Who processes it, and where
| Provider | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting, database, storage, backups, sign-in and alert emails (Amazon SES) | Mumbai, India |
| Amazon Bedrock (AWS) | Generating Ask AI answers from your question and the notices it cites | AWS Asia-Pacific regions, which may be outside India |
| MyOperator | Sending sign-in codes by SMS. Messages go out under the registered sender ID GLADMINDS | India |
| Cashfree Payments | Taking payments. Your card or UPI details go to Cashfree, never to us | India |
| Google Analytics | Usage statistics — only if you allow analytics | May be outside India |
| Google AdSense | Ads for free users — only if you allow ads | May be outside India |
Our servers and database are in AWS Mumbai. Database backups are kept for 30 days, so data you delete leaves our backups within 30 days.
Your rights and how to use them
Under India’s Digital Personal Data Protection Act, 2023 you can:
- See and download your data — Account › Privacy › Download my data gives you everything we hold about your account as one file.
- Delete your account — Account › Privacy › Delete my account. We send a code to the email or phone you first signed up with. If you no longer have access to it, write to us from another address and we will verify you another way.
- Correct your data — change your profile in Account, or write to us.
- Withdraw consent for analytics or ads at any time — use Cookie settings (below, or at the bottom of every page). It takes effect immediately.
- Nominate someone to act for you if you die or cannot act — write to us.
- Complain to our Grievance Officer (below). If you are not satisfied, you can approach the Data Protection Board of India.
Children
SahajSuchna is meant for people aged 18 and over. If you are under 18, use it only with the permission of a parent or guardian — signing in confirms that. A parent or guardian can ask us to delete a child’s account by writing to support@sahajsuchna.com.
Security
Connections are encrypted (HTTPS). Sign-in codes and session tokens are stored only as hashes. Access to our systems is limited to the people who run the service. No system is perfectly secure; if a breach affects you, we will tell you and the Data Protection Board as the law requires.
Changes to this policy
When we change this policy in a way that matters, we update the date at the top and ask for your cookie choices again.