Privacy Policy

Last updated: May 2026 · Version 2.0

Plain English summary: AI-Netra is an intelligence platform. To analyse a website or run a prompt, we send your input to third-party AI providers (Anthropic, OpenAI, Google, etc.) using either a shared platform key or your own API key. Those providers process your data under their own privacy policies. We store session results in your account, protected by Firebase Firestore access controls. You are in control of your data and can delete it at any time.

1. Who We Are

AI-Netra is operated by SaaSynergy Technologies, registered in India (GSTIN: 06AFXFS7174P1ZP, PAN: AFXFS7174P), headquartered at Joyville, Sector 102, Gurugram – 122505, Haryana, India. Contact: [email protected].

2. Data We Collect

Account Data

Name and email address (provided at registration via Firebase Auth)
Role and plan information (set by your organisation's administrator)
Login timestamps and authentication tokens (managed by Firebase Auth)

Usage Data

Prompts you submit in the Playground
Domain names, social media handles, and URLs submitted for GEO/AEO analysis
Analysis results, scores, and recommendations (stored in your account)
Session metadata: model used, token counts, response latency, timestamps
Error logs when the platform encounters a technical failure

Technical Data

Browser type, operating system, and IP address (collected by Cloudflare and Firebase)
Sentry error reports (only if you have consented to analytics cookies)

3. How We Use Your Data

To provide and personalise the AI-Netra service
To process your prompts and GEO/AEO analyses via third-party AI models (see Section 5)
To track your usage against your plan limits
To communicate with you about your account and product updates (with your consent)
To detect and fix technical errors
To comply with legal obligations

We do not sell, rent, or trade your personal data to any third party for commercial purposes.

4. Local Storage & Cookies

AI-Netra uses browser local storage and IndexedDB — not traditional "cookies" — for the following purposes:

Item	Purpose	Legal Basis	Can opt out?
Firebase Auth session	Keeps you logged in	Contract (necessary to use the service)	No — deleting it logs you out
Theme preference	Remembers light/dark mode	Legitimate interest	Yes — clear local storage
API key cache	Stores your API keys locally for UI display	Contract	Yes — managed in account settings
White-label PDF settings	Stores your agency logo and name	Legitimate interest	Yes — cleared via About page
Analytics & Sentry	Error tracking and usage analytics	Consent	Yes — decline on the cookie banner

5. Third-Party AI Providers — Data Processing Disclosure

Important: When you submit a prompt or request a GEO/AEO analysis, your input is transmitted to one or more of the following third-party AI providers. Each provider processes data according to their own privacy policy and data processing agreements.

Provider	Model(s) Used	Data Sent	Privacy Policy
Anthropic	Claude Sonnet 4, Claude Haiku	Your prompt text, company context	anthropic.com/privacy
OpenAI	GPT-4o, GPT-4o Mini, o3	Your prompt text, company context	openai.com/policies
Google	Gemini 2.5 Flash Lite	Your prompt text, company context	policies.google.com
xAI	Grok 2	Your prompt text, company context	x.ai/privacy-policy
Groq	Llama 3.3 70B (via Groq)	Your prompt text, company context	groq.com/privacy-policy
Perplexity AI	Llama Sonar Large 128k Online	Your prompt text, company context	perplexity.ai/privacy
Mistral AI	Mistral Large (admin only)	Your prompt text, company context	mistral.ai/privacy
Cohere	Command R+ (admin only)	Your prompt text, company context	cohere.com/privacy

API calls are routed through our Cloudflare Worker proxy. Your API keys are stored as Cloudflare Worker Secrets and are never transmitted to AI providers from your browser. Prompt content is transmitted server-to-server between our Cloudflare Worker and the AI provider's API endpoint.

AI providers may retain prompts for safety monitoring, abuse prevention, or model improvement purposes according to their own policies. We recommend reviewing each provider's data processing agreement if you are processing personal data of third parties through AI-Netra.

6. Infrastructure Providers

Google Firebase / Firestore — authentication, session storage, and real-time data. Firebase Privacy
Cloudflare — CDN, edge deployment, and API proxy. Cloudflare Privacy
Sentry (optional, consent-gated) — error monitoring. Sentry Privacy
Axiom (optional) — structured log ingestion. Axiom Privacy

7. API Keys

API keys you configure for AI-Netra are stored as encrypted Worker Secrets on Cloudflare's infrastructure. They are not stored in plain text on our servers and are not shared with third parties beyond the AI provider for which the key is intended. Keys are used solely to authenticate API calls on your behalf.

You can delete or rotate your API keys at any time from the Clients panel (administrators) or account settings (clients).

8. Data Retention

Playground sessions: Retained for the duration of your subscription. Deleted within 30 days of account closure.
GEO/AEO reports: Retained for the duration of your subscription. You can delete individual reports from the History panel.
Error logs: Retained for 90 days, then automatically purged.
Account data: Retained until you request deletion or your account is closed by the administrator.

9. Your Rights (GDPR)

If you are located in the EU/EEA/UK, you have the following rights under GDPR:

Access: Request a copy of all personal data we hold about you.
Rectification: Request correction of inaccurate data.
Erasure ("Right to be Forgotten"): Request deletion of your account and associated data.
Portability: Request your session data in a machine-readable format.
Objection: Object to processing based on legitimate interests.
Withdrawal of Consent: Withdraw analytics consent at any time via your account settings.
Complaint: Lodge a complaint with your national data protection authority.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

10. Children's Privacy

AI-Netra is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has registered, contact us immediately.

11. International Data Transfers

AI-Netra is operated from India. Data may be processed in the United States (Google Firebase, Cloudflare, AI providers) and other jurisdictions where our infrastructure providers operate. We rely on Standard Contractual Clauses and provider data processing agreements for GDPR-compliant international transfers.

12. Changes to This Policy

We will notify you of material changes to this policy via email or an in-app notice at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

13. Contact

For privacy-related questions, data deletion requests, or GDPR rights inquiries:

Email: [email protected]
Post: SaaSynergy Technologies, Joyville, Sector 102, Gurugram – 122505, Haryana, India