Privacy Policy
Effective 19 September 2026
- We collect what's needed to run your account and your chats — nothing for ads, and we never sell your data.
- To generate replies, your messages and the character's instructions are sent to AI model providers via Hugging Face.
- Admins can read conversations to handle reports and abuse.
- You can download everything we hold about you, or delete your account and data, any time from your account page.
This summary is for convenience. The full text below is what applies.
1. Who we are
Ldelight Solutions Pvt Ltd (“we”) operates Kirdaar AI and is responsible for your personal data under this policy. Contact: [privacy@yourdomain.com] · [Registered address].
2. What we collect and why
| What | Why | Kept until |
|---|---|---|
| Account details: email, display name, profile photo (if you sign in with Google), interests you pick | Create and run your account | You delete your account |
| Consent record: terms version, time, IP address, browser user-agent, your choices; confirmation that you are 18+ (we do not store your date of birth) | Prove consent and age confirmation; meet legal obligations | You delete your account |
| Your content: messages, images you upload, characters you create, reports you file | Provide chats, show your history, moderation | You delete it or your account |
| Books you submit (the file, its extracted text, cover image and your note to us) | Review the book and create characters from it; text is indexed on our own servers only | You withdraw it, we remove it, or you delete your account |
| Your Hugging Face token, if you add one | Bill model usage to your own Hugging Face account | You remove it or delete your account |
| Usage and billing: credit balance, which model produced each reply, purchase records | Charge correctly, prevent abuse, improve the Service | Account deletion; payment records as long as tax law requires |
| Technical data: session cookies, basic server logs (IP, request time, errors) | Keep you signed in, security, debugging | Session: until sign-out/expiry; logs: [log retention period] |
With your permission only, we use Google Analytics to see which pages and features are used (see the Cookie Policy). We don't use advertising trackers, and we don't sell or rent personal data.
3. Our legal bases
- Contract — to provide the Service you signed up for (account, chats, credits).
- Consent — for optional choices like mature content and marketing email, and where required for processing your messages with AI providers. You can withdraw consent at any time.
- Legitimate interests — to keep the Service secure, prevent abuse and improve it, balanced against your rights.
- Legal obligation — to keep records the law requires and respond to lawful requests.
5. Moderation and safety
Authorised administrators can read conversations, characters and uploads to investigate reports, enforce our Content & Community Policy, and meet legal obligations. Access is limited to people who need it for those purposes.
6. International transfers
Our providers may process data in other countries, including the United States and the European Union. Where required, we rely on appropriate safeguards such as standard contractual clauses.
7. Your rights
Depending on where you live, you may have the right to:
- access your data — use Download my data on your account page;
- correct it — edit your profile and characters directly;
- delete it — use Delete account on your account page, or delete individual chats and characters;
- withdraw consent — switch off mature content or marketing email on your account page at any time;
- object to or restrict certain processing, and port your data;
- nominate someone to exercise your rights if you die or become incapacitated, where local law allows;
- complain to your data protection authority.
For anything you can't do yourself, email [privacy@yourdomain.com]. We'll respond within the time the law requires (and within 30 days at most).
8. Deletion
Deleting your account permanently removes your profile, chats and messages, characters you created (and other people's chats with them), uploads, reports you filed and your consent history. Copies in backups are overwritten on their normal cycle ([backup retention period]). We may keep limited records longer where the law requires, such as payment records.
9. Security
We use reasonable technical and organisational measures to protect your data, including access controls and encrypted connections. No system is perfectly secure; if a breach affects you, we'll notify you and the relevant authorities as the law requires.
10. Age limit
The Service is only for people aged 18and over. We don't knowingly collect data from anyone younger. If you believe someone under 18 has an account, tell us at [privacy@yourdomain.com] and we will delete it.
12. Changes
If we change this policy materially, we'll ask you to review it again the next time you use the Service. The effective date is shown at the top.
13. Contact and grievances
Privacy questions: [privacy@yourdomain.com]. Grievance Officer: [Grievance Officer name] ([legal@yourdomain.com]).