Privacy Policy.

Account Information

When you create an account, we collect your name, email address, and password. You may optionally provide a profile picture and billing information if you subscribe to a paid plan.

Usage Data

We automatically collect information about how you interact with Apragya, including the agents you use, prompts you submit, outputs generated, session duration, and feature engagement. This helps us improve our services and personalize your experience.

Device & Technical Data

We collect your IP address, browser type, operating system, device identifiers, and log data. This information is used for security monitoring, fraud prevention, and service optimization.

Payment Information

Payment card details are processed by our PCI-DSS compliant payment processors (Razorpay, Stripe). We store only the last four digits of your card number and billing address for your records.

Service Delivery

We use your data to provide, maintain, and improve Apragya's AI agents and enterprise applications, process your requests, authenticate your account, and deliver the outputs you generate.

Communications

We may send you transactional emails (receipts, password resets), service updates, and - if you opt in - newsletters and product announcements. You can unsubscribe at any time.

Safety & Security

We use your data to detect and prevent fraud, abuse, spam, and other harmful activity. We may review AI-generated content to ensure compliance with our Acceptable Use Policy.

Analytics & Improvement

Aggregated and anonymised usage data helps us understand which agents are most valuable, identify bugs, and prioritise new features. On our public pages, and only if you accept analytics cookies, we additionally use session replay and heatmap analytics (Microsoft Clarity) which record individual browsing sessions - clicks, scrolls and mouse movement - with text inputs and sensitive fields masked in your browser before transmission. You can withdraw that consent at any time from the cookie banner, after which we disable it and delete its cookies. Google Analytics and Microsoft Clarity are listed as sub-processors on our Sub-processors page. We never sell your personal data.

We Do Not Sell Your Data

Apragya does not sell, rent, or trade your personal information to third parties for their marketing purposes - ever.

Service Providers

We share data with trusted vendors who help us operate our platform (e.g. cloud hosting, payment processing, email delivery). These partners are bound by strict data processing agreements.

AI Model Providers

Prompts you submit may be processed by third-party AI model providers (such as OpenAI, Anthropic, Google). These providers have their own privacy policies and we select only partners with strong data protection commitments. Your prompts are never used to train third-party models without your explicit consent.

Legal Requirements

We may disclose your information if required by law, court order, or government authority, or to protect the rights, property, or safety of Apragya, our users, or the public.

Encryption

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Our infrastructure is hosted on SOC 2 Type II certified cloud providers.

Access Controls

Access to user data is restricted on a need-to-know basis. Employees with access undergo background checks and regular security training.

Incident Response

We maintain a dedicated security incident response plan. In the event of a data breach that affects your personal data, we will notify you within 72 hours as required by applicable law.

Access & Portability

You may request a copy of all personal data we hold about you at any time by contacting hello@apragya.ai.

Correction & Deletion

You can update your account information at any time in your settings. You may request deletion of your account and associated data - we will process this within 30 days.

Cookie Controls

You can manage cookie preferences through your browser settings or through the cookie banner on our website. Note that disabling essential cookies may impact functionality.

Marketing Opt-Out

You may opt out of marketing communications at any time by clicking the unsubscribe link in any email, or by adjusting your preferences in your account settings.

Active Accounts

We retain your personal data for as long as your account is active or as needed to provide you with our services.

Deleted Accounts

When you delete your account, we remove your personal data from our active systems within 30 days. Backup copies are purged within 90 days.

Legal Obligations

Some data may be retained longer where required by law (e.g. tax records, dispute resolution, fraud prevention).

Cross-Border Processing

Your data may be transferred to and processed in countries other than your own, including the United States and India. We ensure appropriate safeguards are in place for such transfers.

GDPR & Standard Contractual Clauses

For users in the European Economic Area, we rely on Standard Contractual Clauses approved by the European Commission and other legal mechanisms to ensure your data receives an equivalent level of protection.

Age Restriction

Apragya is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will promptly delete it.

Updates

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the 'Last Updated' date. Your continued use of Apragya after changes constitutes acceptance of the updated policy.