1. Scope
This policy covers indierouter.ai, the user and admin consoles, and the inference API at api.indierouter.ai. It applies to account data, billing data and operational metadata. It also explains what we deliberately do not keep: your prompts and outputs.
2. The short version
- Zero-retention inference. Request and response bodies are discarded once the response is served. We meter tokens, not content.
- India-only processing. All processing and storage (prompts in flight, logs, backups, support tooling) happens in Indian data centres.
- No training on your data. Prompts and outputs are never used to train or evaluate any model.
- No sale of personal data. Ever.
3. Data we collect
3.1 Account data
Name, work email, organisation name, password hash, optional phone for 2FA, role assignments. Provided by you at sign-up or by your org admin.
3.2 Billing data
Plan, prepaid credit ledger, GSTIN and billing address for invoices, transaction identifiers from our payment processor (Razorpay). Card/UPI credentials are held by the processor, not by us. Tax records are retained as required by the GST regime (see §7).
3.3 API metadata
Per request: timestamp, API-key prefix, model, region, token counts, latency, status code. This is what billing, rate limiting and abuse prevention run on. It contains no prompt content.
3.4 Website analytics and advertising cookies
Any analytics we run ourselves are self-hosted or anonymised and processed in India, consistent with the residency commitments in this policy. The one third-party tag on this website is the LinkedIn Insight Tag, an advertising pixel from LinkedIn that lets us measure whether visitors arrived from our LinkedIn campaigns. It loads only after you choose Accept in the cookie banner. If you decline or do not answer, it never loads and this site sets no LinkedIn cookie. When accepted, LinkedIn sets its own cookies (bcookie, lidc, li_sugr, UserMatchHistory) and processes that data under LinkedIn's privacy policy, on LinkedIn's servers, which may be outside India. You can change your choice at any time through "Cookie settings" in the footer; withdrawing stops the tag from the next page load, and cookies LinkedIn already set expire on LinkedIn's own schedule or when you clear them in your browser. We use no other cross-site tracking cookies.
To show prices in rupees to visitors in India and in US dollars elsewhere, our web server looks up the country of your IP address in a local copy of the DB-IP IP-to-Country Lite database (IP Geolocation by DB-IP, CC BY 4.0) and stores only the two-letter country code in a first-party cookie, ir_cc, for 24 hours. The lookup runs on our own server in India; your IP address is not sent to DB-IP or anyone else. If you pick a currency with the INR / USD switch, that choice is kept in your browser's local storage. Neither is used for tracking or advertising, and all charges are billed in INR either way.
4. What we do not collect
Prompt and completion bodies, uploaded files after batch completion, audio after transcription. These exist in memory for the life of the request (or the declared batch window) and are then discarded. Optional customer-controlled logging, if you enable it, stores content in yourinfrastructure, not ours.
5. Purposes and lawful basis (DPDP)
We process personal data for: providing the service (contract), billing and tax compliance (legal obligation), service communications (legitimate use), security and abuse prevention (legitimate use), and marketing only with consent. Consent requests are presented in clear language, and withdrawal is as easy as the grant.
6. Sharing
We share data only with: our payment processor (Razorpay, billing), our accounting platform (Zoho Books, GST invoices), Indian data-centre operators (physical hosting), and authorities when the law compels it. Every processor is bound by contract to India-resident handling. We do not use offshore sub-processors for personal data. A current sub-processor list is available on request via grievance@indierouter.ai.
7. Retention
- Inference bodies: 0 days (discarded on response).
- API metadata: 13 months (billing disputes + capacity planning).
- Invoices and tax records: 8 years (GST law).
- Account data: life of the account + 90 days after deletion request, unless law requires longer.
8. Your rights
Under the DPDP Act you may access, correct, and erase your personal data, nominate a representative, and raise a grievance. Console self-service covers most of this; anything else via grievance@indierouter.ai. Our Grievance Officer handles these requests, and we aim to respond within the timeframe required under the DPDP Act. Unresolved grievances may be escalated to the Data Protection Board of India.
9. Security
Encryption in transit (TLS 1.2+) and at rest, per-tenant key scoping, hashed API keys (SHA-256, never stored in plaintext), role-based staff access with audit logs, and mandatory 2FA for staff.
10. Children
The service is for organisations and users 18+. We do not knowingly process minors' data.
11. Changes
Material changes are announced by email and console notice 30 days in advance.