Privacy Policy

1. Who We Are

Personas Dot Work Private Limited is a company incorporated under the Companies Act, 2013, with CIN U62099HR2025PTC138516, having its registered office at ALTF Success Tower, Sec-65, Golf Course Extn., Gurgaon, Sadar Bazar, Gurgaon – 122001, Haryana, India. We operate the eety.ai platform, an AI-powered patent drafting tool for intellectual property professionals.

2. Information We Collect

2.1 Information You Provide

• Account data: Name, email address, password (hashed), and organisation details when you register.
• Matter content: Invention disclosures, uploaded documents, patent drafts, drawings, and any other content you upload or create inside the platform.
• Communications: Messages you send via in-app chat or support email.
• Billing information: Payment details processed securely by our payment processor; we do not store raw card numbers.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, time spent, and events triggered within the platform.
• Device & log data: IP address, browser type, operating system, and request timestamps.
• Cookies & local storage: Strictly necessary session tokens; we do not use advertising or cross-site tracking cookies.

3. How We Use Your Information

• To provide, maintain, and improve the eety.ai platform and its features.
• To authenticate your account and enforce access controls.
• To process payments and send transactional communications (receipts, plan updates).
• To train and improve our AI models — only using data from accounts that have provided explicit opt-in consent. By default your matter content is not used for AI training.
• To detect, prevent, and investigate security incidents or abuse.
• To comply with applicable Indian and international law, regulatory requirements, and court orders.
• To send product updates and promotional messages (you may opt out at any time).

4. Data Sharing & Disclosure

We do not sell your personal data. We may share it only in the following circumstances:

• Service providers: Cloud hosting, payment processing, email delivery, and analytics vendors who process data on our behalf under strict data-processing agreements.
• AI infrastructure: Queries to third-party large-language-model APIs (e.g., Google Gemini) necessary to generate patent content. We send only the minimal context required; no data is stored by these providers beyond their standard service terms.
• Legal obligation: Law enforcement, courts, or regulators when required by law or to protect rights and safety.
• Business transfer: In connection with a merger, acquisition, or sale of assets, subject to standard confidentiality obligations.

5. Data Retention

We retain your account and matter data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by emailing privacy@eety.ai. Deleted data is purged from production systems within 30 days and from backups within 90 days, except where retention is required by law.

6. Data Security

We implement industry-standard technical and organisational measures to protect your data: encryption in transit (TLS 1.2+), encryption at rest, tenant-isolated databases, JWT-based access control, private file storage with no public URLs, and regular security reviews. Despite our efforts, no system is completely secure; please notify us immediately at security@eety.ai if you suspect unauthorised access.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing activities.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at privacy@eety.ai. We will respond within 30 days.

8. Cookies

We use strictly necessary cookies to maintain your session and authenticate you securely. We do not use third-party advertising or cross-site tracking cookies. You can clear cookies via your browser settings; doing so will log you out of the platform.

9. Children's Privacy

Our services are not directed to children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us.

10. International Data Transfers

Our servers are primarily located in India and may use cloud providers with infrastructure in other countries. By using our services, you consent to the transfer and processing of your data in accordance with this policy and applicable data-protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or an in-app banner at least 14 days before taking effect. Continued use after the effective date constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact: