Privacy Policy

1. Introduction

My Salahkar Technologies Private Limited ("My Salahkar", "we", "us", or "our") operates the website mysalahkar.com and provides AI-powered professional consultancy services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

We are committed to protecting your privacy and complying with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian data protection laws.

2. Information We Collect

2.1 Information You Provide

• Contact Information: Name, email address, phone number when you register or book a consultation
• Consultation Data: Questions, queries, documents (held with a share password), and information you share during AI or human consultations
• Payment Information: Billing details processed through our payment partners (we do not store full credit card details)
• Communication Records: Emails, chat transcripts, call recordings (with consent), and support tickets

2.2 Automatically Collected Information

• Device Information: IP address (anonymized after 7 days), browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, referring URLs, and interaction patterns
• Location Data: Approximate location based on IP address (country/city level only)

3. How We Use Your Information

• Service Delivery: To provide AI consultations, connect you with human professionals, and fulfill your service requests
• Communication: To respond to inquiries, generate Google Calendar / Google Meet details for human consultations, and provide support
• Quality Control: To review AI responses for accuracy, compliance, and safety (human oversight)
• Legal Compliance: To maintain records as required by Indian tax, company, and financial services regulations
• Improvement: To analyze usage patterns and improve our services (using aggregated, anonymized data only)
• Security: To detect fraud, prevent abuse, and protect our platform and users

We do NOT use your consultation data to train AI models. Your queries and conversations remain confidential.

4. Data Sharing and Disclosure

4.1 Service Providers

We share data with trusted third-party vendors who help us deliver our services:

• Cloud Infrastructure: AWS (Mumbai region) for hosting and storage
• AI Models: Anthropic (Claude), OpenAI (GPT) for AI consultations — with Data Processing Agreements in place
• Payment Processors: Razorpay, Stripe for secure payment processing
• Communication: Twilio (WhatsApp, SMS), AWS SES (email)

4.2 Professional Escalations

When you request human escalation, we share relevant conversation context with licensed professionals (CAs, CS, advocates, RIAs) in our network to provide expert assistance.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or regulatory authority, or to protect our legal rights and safety of others.

4.4 No Sale of Data

We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes.

5. Data Retention

• Active Consultations: Retained for 2 years for compliance and service continuity
• Financial Records: 7 years (as per Income Tax Act)
• Aggregated Analytics: Indefinitely (fully anonymized, no PII)
• Deleted Accounts: Personal data purged within 30 days of deletion request (except legally required records)

6. Your Rights (Under DPDP Act)

You have the following rights. Consent for processing is collected by a required tick-box at login and before AI or human consultations.

• Right to Access: Request a copy of your personal data
• Right to Correction: Update inaccurate or incomplete information
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Nominate: Nominate another individual to exercise your rights in case of death or incapacity
• Right to Grievance Redressal: File complaints with our Data Protection Officer or the Data Protection Board of India

To exercise your rights, contact us at privacy@mysalahkar.com. We will respond within 30 days.

7. Data Security

We implement industry-standard security measures to protect your data:

• TLS 1.3 encryption for data in transit
• AES-256 encryption for data at rest
• Role-based access controls for internal systems
• Regular security audits and penetration testing
• Employee training on data protection best practices

Despite our best efforts, no system is 100% secure. We cannot guarantee absolute security but commit to promptly addressing any breaches.

8. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising networks. See our Cookie Policy for details.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have collected data from a minor, contact us immediately.

10. International Data Transfers

Your data is primarily stored in India (AWS Mumbai region). Some service providers (Anthropic, OpenAI) may process data outside India with appropriate safeguards and Data Processing Agreements as per DPDP Act requirements.

11. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top indicates the latest revision. Material changes will be notified via email or prominent notice on our website.

12. Contact Us

For privacy-related questions, concerns, or requests: