Privacy Policy

1. Who We Are

WITNESS AI (operating as Witness Labs), based in Pune, Maharashtra, India, is the data controller for personal information you provide when using the Witness Labs workstation.

2. Information We Collect

• Account data: email address, display name, and authentication provider identifier (e.g. Google account ID).
• Usage data: generation history, prompt inputs, mode selections, credits consumed, timestamps, and model identifiers used.
• Payment metadata: plan, transaction amount, invoice number, and payment reference. We do not store card numbers, CVVs, UPI PINs, or bank credentials. Payment details are handled directly by our PCI-DSS compliant payment partners.
• Technical data: IP address, browser type, device type, and error logs required to operate and secure the Service.

3. How We Use Your Information

• To provide, maintain, and improve the Service.
• To process payments and issue invoices.
• To authenticate you and secure your account.
• To meter credit consumption and enforce plan limits.
• To respond to your support requests.
• To comply with legal obligations under Indian law.

We do not sell your personal data. We do not use your prompts or generated outputs to train external models.

4. Legal Basis

We process your data on the basis of (a) contract performance — to deliver the Service you signed up for; (b) your consent for optional features; and (c) our legitimate interests in operating and securing the platform.

5. Third-Party Processors

We share data with the following processors, each under contractual data-protection obligations:

• Google Cloud (Gemini API) — processes prompt text you submit to generate AI outputs.
• Google Identity (OAuth) — authenticates sign-in via Google account.
• Managed backend infrastructure — stores account data, history, and usage logs.
• Payment gateway — processes payment transactions.
• Email delivery provider — sends transactional emails such as receipts and password resets.

6. Cookies & Local Storage

We use cookies and browser local storage strictly for authentication sessions, preferences, and workstation state (e.g. saved prompts, panel layout). We do not use third-party advertising or cross-site tracking cookies.

7. Data Retention

• Account and profile data: retained until you delete your account.
• Generation history: retained until you delete individual entries or your account.
• Usage and audit logs: retained for up to 12 months for security and billing reconciliation.
• Payment records: retained as required by Indian tax and accounting law (typically 7 years).

8. Your Rights

Subject to applicable law you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your account and associated data.
• Export your prompt history in a machine-readable format.
• Withdraw consent for optional processing.

Exercise any of these rights by submitting the support form. We respond within 30 days.

9. Security

We use industry-standard measures including TLS encryption in transit, encrypted storage at rest, row-level access controls, and audit logging. No system is perfectly secure — please use a strong, unique password.

10. Cross-Border Transfers

Some processors (notably Google) may process data outside India. Where this happens, we rely on standard contractual clauses and other lawful transfer mechanisms.

11. Children

The Service is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it.

12. Changes to This Policy

We will update this policy from time to time. Material changes will be communicated by email or in-app notice before taking effect.

13. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules thereunder, our Grievance Officer can be reached at:

WITNESS AI
Pune, Maharashtra, India
Support form: https://witness-labs.com/contact (topic: Legal / Grievance)