Privacy Policy

Effective date: 6 July 2026 · Last updated: 6 July 2026

This policy explains what personal data Verdiq ("we", "us") collects when you use the app, how we use it, and the rights you have over it under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. What we collect

• Account data: email address and authentication identifiers, via Supabase.
• Conversations: the questions you ask and the AI's responses, across the Legal, Finance, and Stocks modules.
• Uploaded documents: contracts, agreements, and other files you submit for document review.
• Financial inputs: figures you enter for loan, EMI, buy-vs-rent, or stock-related calculations.
• Usage data: question counts and document-review counts, to enforce plan limits.
• Payment information: once online payments are live, billing details (e.g. plan, amount, transaction status) are handled by our payment gateway — see Section 3. We do not store your full card or UPI details ourselves.
• Locally stored preferences: custom stock tickers you add are stored in your browser's local storage, not on our servers.

2. How we use it

We use your data to:

• Generate the AI responses and document analyses you request.
• Maintain your conversation history so you can return to it.
• Enforce free-plan usage limits and manage paid subscriptions.
• Respond to support requests.

We do not sell your personal data.

Do we use your data to train AI models? No. We do not use your conversations, uploaded documents, or any other content you submit to train, fine-tune, or improve any AI model — ours or a third-party provider's.

3. Third parties involved in processing

To generate responses, your questions and document text are sent to the AI providers we use to power the app: Anthropic (Claude), and, as automatic fallbacks if the primary provider is unavailable, Groq and a locally run Ollama model. Account and conversation storage is provided by Supabase. Each of these processors only receives what is necessary to perform their function and is bound by their own data handling terms.

Payment gateway: once online payments are live, billing is processed by [payment gateway name — e.g. Razorpay], which receives your billing details directly; we do not see or store your full card/UPI credentials.

Analytics: we do not currently use any third-party analytics or tracking tool. If this changes, this policy will be updated first.

4. Data retention & deletion

Conversations and uploaded documents are retained for as long as your account is active, so you can return to past conversations and reviews. If you delete a specific conversation or document, it is removed from our active systems immediately (backups age out within 30 days). If you close your account, all associated conversations, documents, and account data are deleted within 30 days, except where we're required to retain limited billing records for tax/audit purposes. You can request deletion of your account and associated data at any time by contacting us (see Section 7).

5. Your rights under the DPDP Act

As a data principal, you have the right to:

• Access the personal data we hold about you.
• Correct or update inaccurate or incomplete data.
• Request erasure of your data, subject to any legal retention requirements.
• Withdraw consent to processing at any time (this may limit what the app can do for you).
• Register a grievance regarding how your data is handled (see Section 7).

6. Security

We use industry-standard measures (encrypted transport, access-controlled databases) to protect your data, but no system is completely secure. Please avoid uploading documents containing information you would not want processed by third-party AI providers listed in Section 3.

7. Grievance officer & contact

For privacy questions, data requests, or grievances, contact our Grievance Officer at privacy@verdiq.online. We aim to acknowledge grievances within 48 hours and resolve them within 30 days, in line with DPDP Act requirements.

[Placeholder — replace with the named Grievance Officer's actual name, designation, and contact details before this policy is published or relied upon.]

8. Changes to this policy

We may update this policy as the product changes. The "Last updated" date above always reflects the most recent revision. For material changes — anything that meaningfully changes what we collect or how we use it — we'll notify you via an in-app banner and, if you have an account, an email to your registered address, before the change takes effect.