1. Who we are
Talk to Mahak is operated by [LEGAL ENTITY NAME], a [STATE] [ENTITY TYPE], with a principal address at [ADDRESS]. In this policy, "we," "us," and "our" refer to that entity. "Mahak" refers to the AI conversation service.
You can reach us with privacy questions at [PRIVACY EMAIL]. Our designated Privacy Officer is [NAME, ROLE].
2. What we collect, and why
Information you give us directly
- Account information (if you create an account): email address, a chosen display name, and an age confirmation that you are 18 or older. We use this to identify you and to let you sign back into your conversations.
- Conversation content: everything you type to Mahak, and everything she says back. We store this so that you can return to your conversations and Mahak can remember context within a session. We do not analyze this content for any purpose other than running the service and improving safety.
- Feedback and reports: if you tell us about a problem or report a concern, we keep what you wrote so we can respond and learn from it.
Information we collect automatically
- Technical information: IP address, browser type, device type, operating system, and the time and date of your visit. We use this to keep the service running, secure, and accessible.
- Usage information: which pages you visited, how long you stayed, which features you used. We use this to understand whether the service is working as intended.
- Cookies: we use a small number of essential cookies to keep you signed in and to remember your preferences. We do not use third-party advertising cookies.
What we do not collect
- We do not collect your real name unless you choose to share it.
- We do not collect your location beyond rough country/region from your IP address.
- We do not collect biometric data.
- We do not knowingly collect data from anyone under 18.
3. How we use your information
We use the information above only to:
- Provide the Mahak conversation service to you.
- Keep the service secure and prevent abuse.
- Respond to your questions, feedback, or safety reports.
- Improve Mahak's safety, including by reviewing crisis-routing performance (in aggregate, where possible).
- Comply with applicable law.
We do not:
- Sell your data. To anyone. Ever.
- Use your conversations to train AI models, ours or anyone else's, unless you explicitly opt in.
- Show you advertising based on what you talk about with Mahak.
- Share your conversations with researchers, marketers, or third parties for their own purposes.
4. Who can see your data
Your conversations and account information are accessible only to:
- A small, named group of operators of Talk to Mahak who require access to run the service.
- Our infrastructure providers (such as our cloud hosting provider and the AI model provider we use to power Mahak's responses). These providers are bound by contractual confidentiality and data-processing obligations.
- Authorities, if we are legally compelled by valid process (such as a court order). We will challenge improper requests and, where legally permitted, notify you.
We use the following key sub-processors: [LIST — e.g., cloud hosting provider, LLM API provider, analytics provider]. The list will be kept current and is available on request.
5. How long we keep your data
- Conversations: kept while your account is active. If you delete a conversation, it is removed from active systems within 7 days and from backups within 30 days.
- Account information: kept while your account is active. If you delete your account, all personal information is removed within 30 days, except where we are legally required to retain it.
- Safety reports and abuse logs: kept for up to 2 years for safety and legal reasons.
- Technical logs: kept for up to 90 days.
6. Your rights
Depending on where you live, you may have some or all of the following rights:
- Access — you can ask us what data we hold about you.
- Correct — you can ask us to fix anything inaccurate.
- Delete — you can ask us to delete your data.
- Export — you can ask for a copy of your data in a portable format.
- Restrict — you can ask us to limit how we use your data.
- Object — you can object to certain uses of your data.
- Withdraw consent — wherever we rely on your consent, you can change your mind.
- Complain — you can complain to your local data protection authority. If you're in the EU/UK, that's your national data protection authority. In California, that's the California Privacy Protection Agency.
To exercise any of these rights, email [PRIVACY EMAIL]. We will respond within 30 days.
7. International transfers
Our service is operated from the United States. If you access Mahak from outside the US, your data will be transferred to and processed in the US. We use standard contractual clauses and other lawful transfer mechanisms where required.
8. Security
We take reasonable technical and organizational measures to protect your information, including encryption in transit and at rest, access controls, and regular security review. No system is perfectly secure, but we work hard to keep yours safe.
9. Children
Mahak is intended for users 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us with information, please contact [PRIVACY EMAIL] and we will delete it.
10. Changes to this policy
If we make a material change to this policy, we will notify you by email (if we have your address) or by a prominent notice on the website before the change takes effect.
11. Contact us
For privacy questions, data requests, or complaints:
- Email: [PRIVACY EMAIL]
- Mail: [LEGAL ENTITY NAME, ADDRESS], Attn: Privacy Officer