MotaBhai — Privacy Notice
Last updated: [date]. Applies from your first sign-in.
1. Who we are
MotaBhai is run by Purusham Labs, a sole proprietorship of Ankit Saboo, [CONFIRM: registered address, Jaipur]. In this notice, "we" means Purusham Labs. Under India's Digital Personal Data Protection Act, 2023 we are the "Data Fiduciary" for your data.
Privacy and grievance contact: [CONFIRM: privacy@askmotabhai.com].
2. What we collect, and why
| What | Why | Required? |
|---|---|---|
| Your email address. We send a one-time code to it to sign you in. A phone number is optional at sign-up and is not used to sign in | To create and protect your account and send you your report | Email: yes. Phone: no |
| Your dilemma and background (the two required questions) | To write your report | Yes |
| Anything else you add: the optional "anything to keep in mind or anything else I should know" answer, the optional "about me" context, files you attach (the file and its name) | To make the report fit your situation | No |
| Your answers to MotaBhai's follow-up questions | Same | Yes, to get the report |
| Web addresses you type into an answer, and the text of those pages | So I can read the page and use it in your report | No |
| Your report, and your question as it appears on it | So you can read, download and share it | Yes |
| Your coin balance, purchases, subscription status and payment status | To run coins, billing and the monthly pack. Card and UPI details, and your recurring-payment authorisation, go to our payment provider, Razorpay; we do not see or store them. | Yes, if you buy coins |
| Feedback, complaints, suggestions you send us | To respond and improve | No |
| Technical records: device and browser type, IP address, times, errors, and records of who accessed what | Security, fixing faults, stopping misuse and runaway costs. These records do not contain the text of your question or report | Yes |
We do not use your data for advertising. We use no analytics tools. We use Sentry for error reports only, with the content of your question and report removed.
3. How your question is handled
To write your report, your question and context are sent to an AI service that works for us. We use Anthropic's API, under its commercial terms. It processes your text only to return the report. Under those terms Anthropic may not train its models on our content, which includes yours. It may keep your text briefly under its own terms [CONFIRM: Anthropic's current API retention period — Sahil to check Anthropic's published terms].
Links. If you type a web address into an answer, our server fetches that page and sends its text to the AI service together with your question. Do not paste links to pages you do not want read. If a page cannot be opened, I go by what you wrote.
Our app servers (Vercel) and our database (Supabase) are in Mumbai. Some providers are outside India: the AI service (Anthropic), email delivery (Resend), our job runner (Inngest) and error reports (Sentry). Transfers outside India are currently permitted by law unless the Government restricts a country. We will update this notice if that changes.
Anonymous mode. If you switch it on for a question, your "about me" context is not sent with it. Your question itself still is — it has to be, to get an answer.
4. Who can see your data
- You.
- Companies that help us run MotaBhai, under written terms: Anthropic (AI service), Vercel and Supabase (hosting and database), Resend (email delivery), Inngest (job runner), Sentry (error reports) and Razorpay (payments). They may use your data only to provide that service to us.
- Authorities, where the law requires it.
We do not sell or rent your data.
Our team. The people running MotaBhai cannot open your question or your report in the app. Engineers who maintain the database can technically reach stored data; they are bound not to look except to fix a fault you have reported or to meet a legal duty. We will read a report only if you choose to send it to us — for example, by attaching it to a complaint or feedback. This applies during the beta too.
5. How long we keep it
| What | How long |
|---|---|
| Reports and the questions behind them | 90 days from delivery, then deleted automatically. Sooner if you delete them or your account |
| Account details | Until you delete your account |
| Coin and payment records | As long as tax and accounts law requires. [CONFIRM with CA: currently up to 6 years for GST records] |
| Technical and access records | At least 1 year, as security rules require. They hold no question or report text |
| Backups | Overwritten within [CONFIRM: number] days |
6. Your consent
When you first sign in we ask for two separate ticks, neither pre-ticked. The first: "I am 18 or older, and I accept the Terms of Use." The second: "I have read the Privacy Notice, and I agree to MotaBhai using what I write to answer me, as it describes." You cannot use MotaBhai without the second, because we cannot write your report without using your data.
You can withdraw consent at any time: Settings → Delete account, or write to us. We then stop using your data and delete it, except records the law makes us keep. Withdrawing does not undo what was lawfully done before.
7. Your rights
You can ask us to:
- tell you what personal data we hold about you and how it is used;
- correct or complete it;
- erase it;
- let you name someone to exercise these rights for you if you die or cannot act;
- hear your complaint.
Write to [CONFIRM: privacy@askmotabhai.com]. We aim to acknowledge within 7 days and answer within 30. The law's outer limit for a grievance is 90 days. [CONFIRM: only promise what you will keep.]
8. Children
MotaBhai is for people aged 18 and over. We do not knowingly collect data from anyone younger. If we learn we have, we delete it.
9. Security
We protect data with encryption in transit, [CONFIRM: encryption at rest — Sahil to confirm from Supabase's documentation], access controls, and monitoring of who accesses what. If a breach puts your data at risk, we will tell you and the Data Protection Board as the law requires.
No system is perfectly safe. Please do not type Aadhaar, PAN, bank account or card numbers, passwords or OTPs into MotaBhai. It never needs them.
10. People you write about
You may write about family, partners, staff. Share only what you are comfortable sharing, and only what the report needs. We use it for your report, nothing else.
11. Changes
If we change how we use your data, we will update this notice, show you the change, and ask again where the law needs it. Each version has a date; we keep a record of which version you agreed to.
12. Complaints
Write to us first. If we have not resolved it, you may complain to the Data Protection Board of India.