Privacy Policy

1. Who We Are

Personas Dot Work Private Limited is a company incorporated under the Companies Act, 2013, with CIN U62099HR2025PTC138516, having its registered office at ALTF Success Tower, Sec-65, Golf Course Extn., Gurgaon, Sadar Bazar, Gurgaon – 122001, Haryana, India. We operate the eety.ai platform, an AI-powered patent drafting tool for intellectual property professionals.

2. Information We Collect

2.1 Information You Provide

• Account data: Name, email address, password (hashed), and organisation details when you register.
• Matter content: Invention disclosures, uploaded documents, patent drafts, drawings, and any other content you upload or create inside the platform.
• Communications: Messages you send via in-app chat or support email.
• Billing information: Payment details processed securely by our payment processor; we do not store raw card numbers.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, time spent, and events triggered within the platform.
• Device & log data: IP address, browser type, operating system, and request timestamps.
• Cookies & local storage: Strictly necessary session tokens for authentication. With your consent, we also use Google Analytics 4 cookies (_ga, _ga_*) to understand how the platform is used. We do not use advertising or cross-site tracking cookies.

3. How We Use Your Information

• To provide, maintain, and improve the eety.ai platform and its features.
• To authenticate your account and enforce access controls.
• To process payments and send transactional communications (receipts, plan updates).
• To train and improve our AI models — only using data from accounts that have provided explicit opt-in consent. By default your matter content is not used for AI training.
• To detect, prevent, and investigate security incidents or abuse.
• To comply with applicable Indian and international law, regulatory requirements, and court orders.
• To send product updates and promotional messages (you may opt out at any time).

4. Data Sharing & Third-Party Processors

We do not sell your personal data. We share it only with the following processors, each bound by data-processing agreements:

Processor	Purpose	Location
Google Cloud Storage	File storage for uploaded documents	US (EU-US DPF)
Google Gemini / Vertex AI	AI analysis and patent drafting	US (EU-US DPF)
Google Analytics 4	Website analytics (consent-based)	US (EU-US DPF)
Google Identity (Sign in with Google)	Authentication	US (EU-US DPF)
Brevo	Transactional email delivery	EU
Razorpay	Payment processing	India

We may also disclose data: to law enforcement or regulators when required by law; or in connection with a business transfer (merger/acquisition) subject to confidentiality obligations. We do not sell your data.

5. Data Retention

We retain your account and matter data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by emailing privacy@eety.ai. Deleted data is purged from production systems within 30 days and from backups within 90 days, except where retention is required by law.

6. Data Security

We implement industry-standard technical and organisational measures to protect your data: encryption in transit (TLS 1.2+), encryption at rest, tenant-isolated databases, JWT-based access control, private file storage with no public URLs, and regular security reviews. Despite our efforts, no system is completely secure; please notify us immediately at security@eety.ai if you suspect unauthorised access.

7. Your Rights

Depending on your jurisdiction (including under GDPR if you are in the EEA), you may have the right to:

• Access — request a copy of all personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction — ask us to pause processing of your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest or for direct marketing.
• Withdraw consent — at any time where processing is based on consent (e.g. analytics cookies), without affecting the lawfulness of prior processing.
• Lodge a complaint — you have the right to complain to your national data protection supervisory authority (e.g. the ICO in the UK, or your EU member state DPA) if you believe we have not handled your data lawfully.

To exercise any of these rights, contact us at privacy@eety.ai. We will respond within 30 days.

8. Cookies

We use the following cookies and local storage:

Cookie / Key	Purpose	Duration	Consent?
auth_token (localStorage)	JWT — keeps you logged in	30 days	No (functional)
_ga, _ga_* (Google Analytics)	Usage analytics — pages visited, events	2 years	Yes (analytics)
Google GSI cookies	Sign in with Google state	Session	No (functional)

We do not use advertising or cross-site tracking cookies. You can clear cookies via your browser settings; doing so will log you out of the platform. A cookie preference centre for managing analytics consent is planned.

9. Children's Privacy

Our services are not directed to children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us.

10. International Data Transfers

Some of our third-party processors (Google Cloud, Google Gemini, Google Analytics) transfer and process data in the United States. These transfers are made under the EU-US Data Privacy Framework (DPF) and, where applicable, Standard Contractual Clauses (SCCs) approved by the European Commission. Brevo processes email data within the EU. Razorpay processes payment data in India under applicable Indian law.

We do not rely solely on your consent as the legal basis for international data transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or an in-app banner at least 14 days before taking effect. Continued use after the effective date constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact: