Dishaya / Privacy Policy
Privacy Policy
The shortest honest version: we save your history so Dishaya works for you across your devices, we never train on your content, and you can delete anything or turn on Incognito anytime.
What We Never Store
- Incognito chats. Turn on Incognito and that conversation is never saved to your account; it stays on your device only for the session and is cleared when you turn Incognito off.
- Your documents and decks. Generated on our servers, delivered to you, stored only on your device.
- Notes you import. Dishaya reads them on your device and they stay there. If you build on one, its text is processed to produce the result and is not written to our servers.
- Your export themes and brand kit. Theme, accent color, and any saved brand kit live on your device, not on our servers.
- Payment card details. Stripe and Razorpay process payments; card numbers never touch our systems.
We also never train AI models on your content, and we never sell personal data. Both are permanent commitments, not current settings.
What We Store, And Why
| Data | Why | Kept |
|---|---|---|
| Your email address | Sign-in codes, receipts, service notices | Until you delete your account |
| Your chats and their history | So conversations are saved, follow you across devices, and Dishaya can tailor answers to you | Until you delete them or your account; Incognito chats are never saved; never used to train |
| Research reports you create | So you can reopen them from your Library | Until you delete them or your account |
| Plan and usage counters | To meter monthly allowances fairly | Rolling months |
| Payment records (amount, plan, date) | Receipts, taxes, accounting | As law requires |
| Feedback notes you choose to send | So we can hear what to fix; may earn you package credits | Until you delete them or your account; never used to train |
| Content-free service metadata | Quality, cost, and reliability of answers (never the words of your prompts or answers) | Aggregated over time |
Research Uses The Web
When you run research or turn on web search, your question is sent to web search providers, and the public pages we then read receive an ordinary page request, because that is what finding sources means. We use privacy-respecting search infrastructure and never attach your identity to those queries. Regular chat without web search does not touch the internet beyond producing your answer.
Third Parties We Rely On
Model providers (to generate answers; they receive the prompt being answered, under contracts that forbid training on it), search services (for research), Stripe and Razorpay (payments), and our email service (sign-in codes). Each receives only what its job requires.
We also use Google Analytics on our website to understand aggregate traffic: which pages are visited and roughly where visitors come from, never the content of your work. We do not use it for advertising, and advertising signals are switched off. In the EEA, UK, and Switzerland it runs without analytics cookies unless you consent.
Local Mode
With the app's on-device engine, prompts and answers are processed entirely on your own hardware. Nothing about those conversations reaches us at all.
Your Rights
Email [email protected] to access, correct, export, or delete your data. You can delete any chat or research report yourself at any time, and use Incognito to keep a conversation off your account. Account deletion removes your email, chats, reports, and counters within 30 days (payment records are kept as law requires). If you are in India, these rights align with the DPDP Act; if in the EU/UK, with the GDPR. We answer within 7 days.
Security
Signing in works by email code or, optionally, Google Sign-In; with Google we receive only your verified email address and name, never your content. Sign-in codes are hashed, sessions are token-hashed, provider keys are encrypted at rest, and disclosure reports go to the address published at /.well-known/security.txt. No system is perfect; if a breach ever affects your data, we will tell you promptly and plainly.
Changes
Material changes are emailed at least 14 days in advance. The current version always lives at this address.