Privacy Policy

  • Status: Draft for legal review — not in force.
  • Version: 0.1 (draft)
  • Effective date: [EFFECTIVE_DATE]
  • Service: Introji, at introji.com, operated by Neuralwaves Systems Private Limited
  • Contact: [SUPPORT_EMAIL]

1. Who we are and who this covers

Neuralwaves Systems Private Limited ("we", "us") runs Introji. It is a company with CIN [CIN], registered at [REGISTERED_ADDRESS]. This policy covers two groups of people: profile owners, who sign up and build an AI Twin that answers questions about them, and visitors, who open an owner's profile link or QR code and talk to that twin. We are the data fiduciary for the information owners give us. For the information visitors give us, whether we act as data fiduciary or on the owner's behalf is [FIDUCIARY_ROLE_CONFIRM].

2. What we collect

If you are a profile owner, we collect:

  • Your full name, and a short name we derive from it
  • Your email address
  • Your password
  • Your profile: its title, description, introduction message, status and language
  • Your persona, the sections describing what your twin says about you
  • The information sources you add: files, pasted text and website addresses
  • Your conversation with the twin-builder assistant that writes your persona
  • The share link and QR code image made for your profile

If you are a visitor, we collect:

  • Your full name, email address and mobile number
  • Whether you reached the profile through a link or a QR code
  • Everything you type in the conversation, and the twin's replies
  • The summary an AI writes when the conversation ends
  • Your IP address

We do not ask owners or visitors for their age.

3. Chat and other content

When a visitor talks to a twin, their messages are sent to an AI model together with their name, so the twin can reply. Their email address and mobile number are not sent to it. The AI model is also given the owner's name, profile, persona and introduction message, so the twin can answer as the owner would.

When a conversation ends, an AI writes a summary of it. The owner can read the conversation and its summary in their dashboard, and can be emailed the summary together with the visitor's contact details.

The owner's conversation with the twin-builder assistant is also processed by an AI model, which uses it to write the owner's persona.

4. Why we process it

We process your information to:

  • Create and run an owner's account
  • Build and run an owner's twin from their profile, persona and information sources
  • Run visitors' conversations with a twin
  • Show an owner the enquiries, conversations and summaries for their profile, and email them summaries
  • Send a verification code to a visitor's email or WhatsApp when their details match an earlier enquiry
  • Limit abuse, using IP addresses
  • Send account emails, such as activation and password-reset emails
  • Answer requests sent to [SUPPORT_EMAIL]
  • Meet our legal obligations

5. Consent and your choices

We process your information on the basis of your consent. An owner gives this consent when they sign up for Introji. A visitor gives it by ticking the consent box on an owner's enquiry form before the conversation starts. You may withdraw your consent at any time by writing to [SUPPORT_EMAIL]. If you withdraw it, we can no longer run your account or your conversation.

6. Who processes your information

We use service providers to run Introji. We host Introji and store its files, including QR code images, in [HOSTING_REGION]. Visitors' messages and names, owners' profiles and personas, and owners' conversations with the twin-builder assistant are sent to AI providers ([AI_PROVIDERS]) so the twin and the twin-builder assistant can reply. An email delivery provider sends account emails, verification codes and conversation summaries. A WhatsApp messaging provider sends verification codes.

Some of these providers may process or store your information outside India, depending on where their infrastructure is located.

People on our team with platform access can see enquiries across all profiles.

7. How long we keep it

We keep your information for [RETENTION_PERIOD]. Today there is no way for a visitor to delete their details themselves, and we do not delete them automatically.

Cookies and browser storage. We set only the cookies Introji needs to sign you in and run your conversation; we use no analytics or advertising cookies and load no third-party scripts. An owner's sign-in lasts at most 7 days, after which they must sign in again. A visitor's conversation cookies last 30 minutes. We also keep a few values in your browser: the email address you signed up with and an unsaved persona draft, both only for as long as the tab is open, and your light or dark theme preference. Our fonts are served from our own domain.

8. Access, correction, export and erasure

An owner can edit their profile and persona, and add or delete information sources, in Introji themselves. You may ask us to access, correct, export or erase your information by writing to [SUPPORT_EMAIL], and a member of our team will carry out the request for you.

9. Security

[SECURITY_MEASURES]

No service can promise perfect security, so we cannot guarantee that your information will never be accessed without authorisation.

10. Grievance officer

Our grievance officer is [GRIEVANCE_OFFICER_NAME], reachable at [GRIEVANCE_OFFICER_CONTACT]. [SUPPORT_EMAIL] is the first route for any concern about your information. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

11. Changes to this policy

We may update this policy from time to time. We will tell you about any material change before it takes effect, and the current version and its effective date are always shown at the top of this page. Continuing to use Introji after a change takes effect means the new version applies to you.