Privacy Policy

Aixphonic ("we", "us", "our") operates the LikeWay AI platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

1. Data We Collect

A. Information You Provide

• Account Data: Name, email address, age (optional), referral source (optional)
• Authentication Data: Password hash (never stored in plain text), Google OAuth tokens
• Conversation Data: Prompts, AI responses, uploaded images, file attachments
• Payment Data: Subscription plan, payment status (processed by Razorpay/Stripe — we do not store card numbers)
• Preferences: Theme, voice character, custom instructions, persona settings

B. Automatically Collected

• Device Data: Browser type, operating system, device type
• Usage Data: Pages visited, features used, message counts, session duration
• Network Data: IP address (for rate limiting and security), approximate location (country level)

2. How We Use Your Data

• Service Delivery: Process your prompts and generate AI responses
• Account Management: Authentication, session management, subscription handling
• Improvement: Analyze usage patterns to improve the Service (we do not train AI models on your data)
• Security: Rate limiting, fraud prevention, abuse detection
• Communication: Service updates, security alerts (you may opt out of non-essential communications)
• Legal Compliance: Tax records, regulatory requirements under Indian law

3. Data Flow — Third-Party AI Providers

Your prompts may be processed by third-party AI providers. These providers have their own privacy policies. We disclose this data flow to you for transparency:

• AI Routing Services: Route requests to various AI models. Data is processed per their respective privacy policies.
• Inference Providers: Provide fast AI inference and model hosting. Data is processed per their respective privacy policies.
• Model Providers: Provide AI models and APIs. Data is processed per their respective privacy policies.

We do not control how these third parties process data after the API call is complete. We recommend not sharing highly sensitive personal information in prompts.

4. Data Storage & Security

• Storage: Data is stored on MongoDB Atlas cloud servers (AWS region).
• Encryption in Transit: All data is transmitted over HTTPS/TLS.
• Encryption at Rest: MongoDB Atlas provides encryption at rest for stored data.
• Authentication: Passwords are hashed using scrypt (Argon2-equivalent) with random salt.
• Sessions: JWT tokens with secure, HttpOnly cookies.
• Access Control: Strict internal access controls — only authorized personnel can access production data.

5. Data Retention

• Account Data: Retained while your account is active, deleted within 30 days of account deletion.
• Conversations: Retained while your account is active, deleted within 30 days of account deletion.
• Sessions: Expire after 30 days of inactivity.
• Login History: Retained for 90 days for security purposes.
• Usage Data: Aggregated and anonymized after 12 months.
• Payment Records: Retained for 7 years as required by Indian tax law.

6. Your Rights Under DPDP Act 2023

As a Data Fiduciary, we respect your following rights:

• Right to Access: Request a copy of all personal data we hold about you.
• Right to Correction: Request correction of inaccurate personal data.
• Right to Erasure: Request deletion of your personal data and account.
• Right to Grievance Redressal: File a complaint if your rights are not respected.
• Right to Nominate: Nominate someone to exercise your rights in case of death or incapacity.

To exercise any of these rights, contact us at privacy@aixphonic.com or use the in-app Account Settings.

7. Consent

By creating an account and using LikeWay AI, you consent to:

• Collection and processing of your account data for service delivery.
• Processing of your prompts by third-party AI providers as described in Section 3.
• Storage of conversations for providing conversation history features.

You may withdraw consent at any time by deleting your account. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

8. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

9. Cookies

We use cookies for authentication (session tokens), preferences, and basic analytics. See our Cookie Policy for details.

10. Data Breach Notification

In the event of a personal data breach, we will:

• Notify the Data Protection Board of India within 72 hours of becoming aware of the breach.
• Notify affected users without delay if the breach is likely to cause harm.
• Take immediate steps to contain and remediate the breach.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-app notification at least 7 days before they take effect. The "Last Updated" date at the top reflects the latest revision.

12. Contact

For privacy-related inquiries or to exercise your data rights:

Aixphonic
Email: privacy@aixphonic.com
Website: likeway.in
Grievance Officer: [Name] — [Email]