Privacy policy.

NIRHALIs AI Ventures (Sarthak Nirhali, Thane, Maharashtra, India) is the data fiduciary for personal data collected through nirhalisdevelops.com. This policy is written to meet India's Digital Personal Data Protection Act, 2023.

What is collected

If you enquire about a project

• Name, and the email address or phone number you give me
• Whatever you write in your enquiry

If you buy a Studio plan

• Email address — this is where your access key is sent
• Name, if you give one
• Payment references from Razorpay: payment ID, order ID, amount, status
• A cryptographic hash of your access key — never the key itself
• Credit usage records: when a generation ran and which tool

What is never collected

Card numbers, UPI PINs and bank details never reach this website. Razorpay handles payment details entirely. I see only that a payment succeeded and for how much.

What you type into the Studio

Your prompts are sent to Anthropic (Claude) or OpenAI (ChatGPT) to generate a result. I do not store the text of your prompts or their output in my database — only the fact that a generation happened, so credits can be counted. Your prompts are subject to those providers' own policies.

Do not paste passwords, card numbers, Aadhaar or other sensitive personal data into the Studio.

Why it is collected

• To send your access key and run your account — the contract between us
• To count credits and prevent abuse
• To keep records required by tax and accounting law
• To reply to you

Your data is never sold, rented, or used to train AI models by me.

Who it is shared with

• Razorpay — payment processing
• Supabase — database hosting
• Vercel — website hosting and logs
• Resend — sending your access key and receipts
• Anthropic and OpenAI — generating what you ask for

Some of these process data outside India.

How long it is kept

• Account and credit records: while your account is active, then 12 months
• Payment records: 8 years, as Indian tax law requires
• Project enquiries: 24 months, unless you ask for removal sooner

Your rights under the DPDP Act

You may ask to access the data held about you, correct it, have it erased, nominate someone to act for you, or complain. Email sarthak.nirhali.dev@gmail.com with the subject "DPDP request" and I will respond within 30 days.

Deletion requests are honoured except where tax law requires a payment record to be kept. Deleting your account ends Studio access and any remaining credits.

Security

• The whole site is served over HTTPS
• Access keys are stored as SHA-256 hashes, never in readable form
• Database access is restricted by row-level security; no public read or write access exists
• API keys and payment secrets live only in server environment variables

No system is perfectly secure. If a breach affects your data, I will notify you and the Data Protection Board as the DPDP Act requires.

Children

This service is not intended for anyone under 18, and accounts are not knowingly created for children.

Cookies

No advertising or tracking cookies are set. Your Studio session is held in your browser's session storage and is cleared when you close the tab. Aggregate, anonymous visit analytics are collected by Vercel.

Grievance officer

Sarthak Nirhali · sarthak.nirhali.dev@gmail.com · +91 84520 26751 · Thane, Maharashtra, India