Privacy Policy

Yugati ("we", "our", or "us") is an AI productivity platform operated by Saurav Jha, based in India. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our service at www.yugati.in.

By using Yugati, you agree to the practices described in this policy.

We collect the following categories of information:

• Account information: Your name, email address, and profile picture provided when you sign in with Google.
• Gmail data: Email metadata (sender, subject, date, snippet), message content when you explicitly request the AI to read or act on emails. We do not read your emails without your instruction.
• Google Calendar data: Event titles, dates, times, and attendees when you use calendar features.
• Chat history: Conversations with the AI assistant, stored to provide continuity across sessions.
• Usage data: Number of AI messages sent, voice transcriptions used, and plan tier, for billing and rate limiting.
• Payment information: Razorpay order IDs and payment verification tokens. We do not store card numbers or bank details — these are handled entirely by Razorpay.
• Technical data: IP address, browser type, and session tokens for security and authentication.

We use your information to:

• Provide and operate the Yugati service
• Process AI assistant requests using your Gmail and Calendar data
• Authenticate you via Google OAuth
• Enforce usage quotas and rate limits per your subscription plan
• Process payments and manage subscriptions via Razorpay
• Cache Gmail messages and Calendar events to reduce API calls and improve performance
• Improve the reliability and performance of the platform
• Respond to support requests

We do not sell your personal information to third parties. We do not use your Gmail or Calendar content to train AI models.

Yugati uses OpenAI's API (GPT-4.1-mini and GPT-4o-mini models, and Whisper for voice transcription) to process your requests. When you send a message to the AI assistant, relevant context from your emails or calendar may be included in the request to OpenAI.

OpenAI processes this data according to their own Privacy Policy. By using Yugati's AI features, you consent to this processing.

Yugati's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only access Gmail and Calendar data to provide in-app features you explicitly request
• We do not transfer your Google data to third parties except as necessary to operate the service (OpenAI for AI features, Supabase for storage)
• We do not use Google data for advertising
• We do not allow humans to read your Google data unless you have given explicit permission for support purposes

Your data is stored in a PostgreSQL database hosted by Supabase, with servers in the European Union. OAuth credentials for Gmail and Google Calendar are encrypted at rest using envelope encryption (AES-256) via our Corsair integration layer.

Session data is stored in HTTP-only cookies with secure flags in production. We use Upstash Redis for rate limiting — only request counts are stored, not message content.

We implement industry-standard security measures, but no system is perfectly secure. Please notify us at jhasaurav020900@gmail.com if you discover a security vulnerability.

We retain your account data for as long as your account is active. Cached email and calendar data has a 3-minute freshness window and is refreshed on subsequent visits. Chat history is retained to provide session continuity and can be cleared by you at any time within the app.

Payment records (order IDs, amounts, plan history) are retained for 7 years as required by Indian tax regulations.

You may request deletion of your account and associated data by contacting us at jhasaurav020900@gmail.com.

Yugati uses the following third-party services, each with their own privacy policies:

• Google OAuth: Authentication and Gmail/Calendar access
• OpenAI: AI language model and voice transcription processing
• Supabase: Database hosting and storage
• Razorpay: Payment processing (India)
• Upstash: Redis for rate limiting
• Vercel: Application hosting and edge network
• Corsair: OAuth credential management and API integration layer

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Revoke Google OAuth access at any time via your Google Account settings
• Export your chat history

To exercise these rights, contact us at jhasaurav020900@gmail.com.

Yugati is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their data, please contact us for immediate removal.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice in the app. Continued use of Yugati after changes constitutes acceptance of the updated policy.

For any privacy-related questions or concerns, contact:
Saurav Jha
Email: jhasaurav020900@gmail.com
Website: www.yugati.in