CinfyAI — Privacy Policy

1. Scope, Overview & Definitions

This Policy covers information we collect when you use CinfyAI's web and mobile applications, create or access an account, interact with our chat features, request support, or otherwise engage with us. It also explains your choices and rights, how you can contact us, and how we handle international transfers. For clarity, "Personal Data" means information that identifies or relates to an identifiable person (such as name, email address, and certain device identifiers). "Inputs" are prompts, instructions, or files you submit. "Outputs" are responses or generated content produced by the Service. "Usage Data" refers to logs and analytics relating to how the Service is used.

CinfyAI integrates with third‑party AI model providers to process Inputs and produce Outputs. Depending on your location and applicable laws, we act as a controller or equivalent under data protection laws for most account and platform operations. For enterprise or developer integrations where a customer configures data flows, we may act as a processor to that customer. This Policy provides a high‑level summary for global users; regional addenda or notices may apply where required by local law. If any part of this Policy conflicts with mandatory laws, those laws control.

We encourage you to review this Policy carefully. By using the Service, you agree to the practices described here. If you do not agree, do not use the Service. Where we rely on consent (for example, certain analytics or marketing activity, or optional model‑improvement programs), you may withdraw consent at any time as described below.

2. Information We Collect

Account & Profile Data. When you sign up, we collect your Full Name (required), Email Address (required), Mobile Number (optional), and Password. If you use Google Sign‑In, we receive basic profile information (e.g., name, email) from Google consistent with your permissions. We do not request access to your Gmail content or sensitive Google scopes unless explicitly needed and consented to for a specific feature.

Inputs & Outputs. We collect the text and files you submit as Inputs and the Outputs generated by the Service. These may contain Personal Data if you choose to include it. We recommend you avoid sharing Personal Data or confidential information in prompts unless necessary. We may use Inputs and Outputs for safety, diagnostics, and—in accordance with the choices described in this Policy—to improve models in the future.

Usage, Device & Technical Data. We collect information about your interactions with the Service including pages viewed, features used, timestamps, approximate location derived from IP, device type, operating system, app version, language, performance metrics, crash logs, and identifiers (e.g., cookies, mobile advertising IDs). We use cookies and similar technologies to remember preferences, keep you signed in, and analyze performance. You can manage cookie settings in your browser or device, though some features may not function properly if certain cookies are disabled.

Communications & Support. If you contact us (e.g., via support@cinfy.ai), we collect the information you provide along with related metadata necessary to respond and maintain records. We may also store preferences, surveys, or feedback you share, and we maintain records of consents, opt‑outs, and settings.

3. How We Use Information (Including Model Training)

We use information to provide, maintain, and improve the Service; authenticate users; secure accounts; personalize experiences; troubleshoot; and operate safety systems (such as detecting abuse and enforcing policies). We process Inputs to produce Outputs and may share Inputs with third‑party AI model providers to generate those Outputs. We use Usage Data to analyze performance, optimize routing across models, and plan capacity.

We may also use Inputs, Outputs, and Usage Data to improve product quality, such as tuning prompts, refining safety filters, and evaluating features. Model Improvement & Training. Where permitted by law and our agreements, and in line with this Policy, we may use de‑identified or aggregated data, and in certain cases sampled Inputs/Outputs, to help train, evaluate, or fine‑tune models (ours or providers'). We strive to apply safeguards (e.g., automated and manual review, filtering, minimization). If we offer an opt‑out mechanism for training on your data, we will honor your settings; you can request opt‑out at support@cinfy.ai.

We may send you important service notices (e.g., security alerts, terms changes). We may also send optional communications about features or updates, subject to your preferences and applicable law; you may opt out of marketing at any time. Additionally, we use information for compliance with legal obligations, to protect rights and safety, and to establish, exercise, or defend legal claims.

4. Legal Bases & Our Role

India (DPDP Act 2023). We process personal data as a Data Fiduciary for purposes such as providing the Service, ensuring security, preventing fraud, and complying with legal requirements. Where consent is required (e.g., optional analytics or training programs), we obtain it and provide a means to withdraw it.

EEA/UK (GDPR/UK GDPR). Our legal bases include: performance of a contract (to provide the Service); legitimate interests (to secure, improve, and analyze the Service, prevent abuse, and support customers); consent (for optional activities like certain cookies/marketing/model‑improvement where required); and legal obligations. When acting as a processor for enterprise/developer customers, we process data on their instructions under a data processing agreement.

U.S. (including CCPA/CPRA). We may process "personal information" as defined by state privacy laws. We do not "sell" your personal information in the traditional sense; where we engage in activities that may be deemed "sharing" for cross‑context behavioral advertising, we will offer appropriate opt‑outs where applicable. We honor rights requests as described below.

5. Sharing & Disclosures

Service Providers & Partners. We share information with vendors who help operate CinfyAI (e.g., hosting, security, analytics, customer support). We also disclose Inputs to third‑party AI model providers as necessary to generate Outputs. These partners are contractually obligated to handle data securely and only for permitted purposes.

Single Sign‑On (SSO). If you sign in with Google, Google may process your information under its own privacy policies, and we receive your name and email as permitted. We do not access your Google content (like Gmail) unless a feature explicitly requests it and you grant explicit consent.

Legal, Safety & Compliance. We may disclose information if required by law, regulation, legal process, or governmental request; to enforce our Terms; to protect the rights, property, or safety of users, the public, or Compileinfy; or to detect, prevent, or address fraud, security, or technical issues.

Business Transfers. In connection with any merger, acquisition, asset sale, financing, or similar transaction, information may be transferred as part of the transaction, subject to this Policy and applicable law.

6. International Data Transfers

We operate globally, and your information may be transferred to, processed in, or stored in countries other than your own, including India, the United States, and regions where our providers are located. Where required, we implement safeguards for cross‑border transfers—such as contractual clauses, risk assessments, and technical and organizational measures—to protect your information consistent with this Policy and applicable law. By using the Service, you understand that your information may be processed in jurisdictions with different data protection laws than your home country.

We take steps to ensure that third‑party AI model providers and other vendors maintain appropriate data protection standards. If you would like more information about transfer mechanisms relevant to your region, contact us at support@cinfy.ai.

7. Data Retention & Security

We retain Personal Data only as long as needed to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, and support safety and audit functions. Retention periods vary depending on the type of data and our purposes. We may anonymize or aggregate information for analytics and product improvement. If you request deletion, we will handle your request in accordance with applicable law and our data retention practices, subject to legal obligations and legitimate interests (e.g., fraud prevention).

We employ administrative, technical, and physical safeguards designed to protect information against unauthorized access, destruction, loss, alteration, or misuse. These may include encryption in transit, access controls, audit logging, and secure development practices. However, no system can be completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials and for promptly notifying us of any suspected compromise.

8. Your Rights & Choices

Access, Correction, Deletion. Subject to applicable law, you may have the right to access, correct, or delete your Personal Data. You can review and update basic account information within the app; for other requests, contact support@cinfy.ai.

Opt‑Outs & Preferences. You may opt out of non‑essential communications and, where offered, cookie categories or model‑improvement programs. If we engage in activities deemed "sharing" under U.S. state laws, we will provide appropriate opt‑out mechanisms. You can also request to limit certain processing where required by law.

GDPR/UK GDPR rights (EEA/UK users). You may have rights to data portability, restriction of processing, object to processing (including for legitimate interests or direct marketing), and lodge a complaint with a supervisory authority. Where we rely on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

India (DPDP) & U.S. Rights. We will honor applicable rights requests such as access, correction, and erasure under the DPDP Act and relevant U.S. state privacy laws (e.g., CCPA/CPRA). We will not discriminate against you for exercising your privacy rights. We may ask you to verify your identity before completing a request.

9. Children, Sensitive Data, Changes & Contact

Children. CinfyAI is intended for users aged 18 and older. We do not knowingly collect Personal Data from individuals under 18. If you believe a minor has provided information to us, please contact us so we can take appropriate action.

Sensitive Data & Safety. Please avoid including sensitive Personal Data in Inputs (e.g., health, financial account numbers, government IDs) unless strictly necessary for your use case. AI Outputs may be inaccurate or inappropriate; always verify Outputs before relying on them. The Service does not provide professional advice.

Changes to This Policy. We may update this Policy from time to time. If we make material changes, we will notify you by updating the effective date and, where appropriate, providing additional notice (e.g., in‑app or email). Your continued use of the Service after an update indicates your acceptance of the revised Policy.

Contact Us. For questions, rights requests, or concerns, email support@cinfy.ai. We aim to respond promptly and in accordance with applicable law.