Privacy Policy

Privacy Policy – KhasiGPT Operated by NXGS Studio Last Updated: 8 October 2026 NXGS Studio (“we”, “our”, “us”) operates KhasiGPT, an AI-powered chat and knowledge assistance platform. We are committed to protecting your privacy and ensuring that your personal information is handled responsibly and securely. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use the KhasiGPT mobile app, web app, and related services (“Services”). It is written with India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules in mind. 1. Information We Collect 1.1 Information You Provide Account Details: Name, email address, password (stored only in a secure hashed form, never in plain text), and date of birth. We use your date of birth to confirm that you meet the minimum age to use KhasiGPT. Google Sign-In: If you sign in with Google, Google shares your name, email address, and profile picture with us. We never receive your Google password. Profile Photo: A profile picture, if you choose to upload one. Chats and Content You Submit: The messages you send, the files and images you upload, and the voice input you speak to KhasiGPT, together with the AI responses you receive. User Personal Knowledge / Custom Entries: Optional notes or personal information you add to your profile or personal knowledge (RAG) section. You can edit or delete these entries at any time. Community Forum: Threads, replies, and reactions you post in the community forum. Forum posts and your display name are visible to other users. Location (optional): If you give permission, your device location is used for the Nearby / Explore feature. We collect it only after you allow it, and you can withdraw permission at any time in the app or in your device settings. Support and Contact: Your name, email address, optional phone number, message, and any attachments when you contact us or send us feedback. Reports: Details you provide when you report an AI response, a forum post, or another user. 1.2 Automatically Collected Information Device Information: Mobile device type, operating system, browser, and app version. Usage Data: Features used, number of messages sent, credit usage, and session activity. Log Information: IP address, timestamps, and technical diagnostics. We use these for security, fraud and abuse prevention (including rate limiting), and to keep the Services running. Performance Measurement: We use Vercel Speed Insights to measure how quickly our web pages load. 1.3 Payments & Billing Data Purchases made in KhasiGPT (credits, plans, and other paid features) are processed securely by third-party payment processors: Razorpay (payments on the website) Google Play Billing (purchases in the Android app) We do not receive or store your full card, UPI, or bank account details. We receive and keep payment confirmation details such as the transaction or order ID, amount, plan purchased, payment status, and date. 2. How We Use Your Information We use the information collected to: Create and manage your account and verify your email address. Confirm that you meet the minimum age requirement. Provide AI features, chat responses, voice conversations, image generation, translation, and personalized experiences. Show nearby places when you use the Nearby / Explore feature. Process payments, credits, plans, and receipts. Send service emails such as verification, password reset, receipts, and important account notices. Improve app performance and user experience. Respond to support requests and complaints. Review reported content, enforce our Terms of Service, and keep the community safe. Prevent fraud, misuse, or security risks. Comply with legal and regulatory requirements. We never sell or exchange your personal data. 3. AI Providers and How Your Content Is Processed To generate responses, the content you submit (your messages, uploaded files and images, voice input, and any personal knowledge entries relevant to your question) is sent to third-party AI model providers that process it on our behalf. Depending on the feature and model, these include: Google (Gemini models, including voice conversations) OpenAI (image generation, voice, and other AI features) Anthropic (Claude models), if we enable them Other AI providers we may add for specific features. We will update this policy when we do. Web Search: When a reply needs current information, a search query based on your message is sent to web search services (SerpentAPI, Serper, or Google). Nearby / Explore: When you search for nearby places, your location or chosen search area is sent to Google Maps Platform. These providers process your content to return a result to you and handle it under their own terms and privacy policies. Please avoid sharing sensitive personal information (such as health, financial, or government ID details) in chats unless it is necessary for your question. Voice: Your audio is streamed to the AI provider in real time to produce a reply. We do not store audio recordings. Text from a voice conversation may be saved in your chat history. 4. Data Storage & Security NXGS Studio takes strong measures to protect your data: Data is stored securely using industry-standard encryption. Uploaded files and images are kept in private storage and opened only through secure, time-limited links. Personal RAG entries remain private to your account. Only authorized personnel have restricted access. All communication between your device and our servers uses HTTPS/TLS. We perform regular security reviews and updates. 5. When We Share Information We only share data when necessary: 5.1 Service Providers Trusted partners that process data on our behalf, such as: Supabase (database) Vercel (hosting, file storage, and performance measurement) A Redis service (security rate limiting) Brevo (account and service emails) Google (Google Sign-In and Google Maps Platform) The AI and web search providers listed in Section 3 Payment processors (Razorpay and Google Play Billing) These partners are bound by confidentiality and data protection obligations. 5.2 Other Users Your forum posts, reactions, and display name are visible to other KhasiGPT users. Your chats and personal knowledge entries are private and are not shown to other users. 5.3 Legal Compliance We may disclose data when required by: Law or legal authorities Court orders To protect the rights, safety, or property of NXGS Studio or users 5.4 Business Transfers If NXGS Studio undergoes a merger, acquisition, or restructuring, user data may be transferred under the same privacy protections. 6. Data Retention Account data, chats, uploaded files, and personal knowledge entries are kept while your account is active, until you delete them or delete your account. Payment and transaction records are kept for as long as Indian tax and accounting laws require, even after your account is deleted. Security logs are kept for a limited period for security and abuse prevention. When your account is deleted, your forum posts are anonymised (your name is removed) rather than deleted, so that community discussions remain readable. Deleted data may remain in routine backups for a limited period before it is permanently removed. 7. Your Rights & Controls Under the Digital Personal Data Protection Act, 2023 you have the right to: Access a summary of the personal data we hold about you and how it is used. Correct, complete, or update your personal data. Erase your personal data, for example by deleting chats, personal knowledge entries, or your whole account. Withdraw consent you have given, such as location access. Withdrawing consent does not affect processing that happened before. Have your complaints addressed through our grievance process (Section 11). Nominate another person to exercise these rights on your behalf in case of death or incapacity. You can also update your profile information in the app at any time. To delete your account, use the account deletion option in your Profile in the app or visit https://khasigpt.com/help/delete-account. We confirm the request by email and then delete your account data, including chats, uploaded files, personal knowledge entries, and profile details, except records we must keep by law (see Section 6). To exercise any other right, email support@khasigpt.com from your registered email address. We will respond within the time required by law. 8. Children’s Privacy KhasiGPT is not intended for children under 13, and we do not knowingly collect data from them. Users aged 13 to 17 may use KhasiGPT only with the consent and supervision of a parent or legal guardian. If we learn that we have collected data from a child under 13, we will delete it. 9. Cookies & Similar Technologies We use cookies and similar technologies to: Keep you securely signed in Remember your preferences, such as language and theme Protect the Services against abuse We do not use advertising or cross-site tracking cookies. You can control cookies through your browser or device settings, but essential cookies are needed to sign in. 10. International Data Processing KhasiGPT and its service providers, including AI providers, may store or process information on servers located outside India. Wherever your data is processed, it is protected using industry-standard safeguards and compliant practices. 11. Grievance Officer & Contact If you have a question, complaint, or request about your personal data or this Privacy Policy, contact our Grievance Officer: NXGS Studio Email: support@khasigpt.com We acknowledge complaints within 24 hours and aim to resolve them within 15 days of receipt. 12. Updates to This Privacy Policy We may update this Privacy Policy when necessary. The revised version will feature a new “Last Updated” date, and we will let you know about important changes in the app or by email. Continued use of KhasiGPT after an update constitutes acceptance of the changes.