Privacy Policy

Furobox is a product of Sytrus AI Pvt Ltd ("we", "our", or "us"), a company incorporated under the laws of India. We are committed to protecting your privacy and ensuring transparency about how your personal information is collected, used, stored, and shared. This Privacy Policy applies to all users worldwide and explains your rights and choices regarding your data when using our AI-powered productivity platform.

1. Information We Collect

• Personal Information: Name, email address, profile information, resumes, login credentials, and authentication details
• Usage Information: AI prompts, generated content, chat history, tool interactions, feature usage patterns
• Device Information: IP address, browser type and version, device identifiers, operating system, cookies and similar technologies
• Payment Information: Transaction metadata, billing address, payment method details (processed by Razorpay - we never store card details)
• Communication Data: Support emails, feedback, survey responses, and other communications with us
• File Data: Documents, audio files, images, and other content you upload for processing

2. How We Use Your Information

• Service Delivery: To provide AI tools, generate content, process documents, and deliver core platform functionality
• Account Management: To create, maintain, and secure user accounts and profiles
• Payment Processing: To manage subscriptions, process payments, handle billing, and prevent fraud
• Customer Support: To respond to inquiries, resolve technical issues, and provide assistance
• Platform Improvement: To analyze usage patterns, enhance features, and develop new tools
• Security: To protect against fraud, unauthorized access, and ensure platform security
• Legal Compliance: To comply with applicable laws, regulations, and legal obligations
• Communications: To send service updates, billing notifications, and important account information

3. Legal Bases for Processing

• Contract Performance: Processing necessary to provide services under our Terms of Service
• Consent: Where you have given explicit consent for specific processing activities
• Legal Obligations: To comply with laws, regulations, and legal requirements
• Legitimate Interests: For platform security, fraud prevention, service improvement, and business operations

4. Third-Party Service Providers

We share your information with trusted third-party providers who help us deliver our services:

• Payment Processing: Razorpay (India) - for secure payment processing and subscription management
• AI Services: OpenAI, Google AI, Microsoft Azure AI - for content generation and natural language processing
• Cloud Infrastructure: Amazon Web Services (AWS), Microsoft Azure - for secure data storage and processing
• Analytics: Google Analytics, Hotjar - for usage analysis and service improvement (data anonymized)
• Communication: Email service providers - for transactional emails and notifications
• Security: Security monitoring services - for fraud detection and prevention
• Legal Compliance: Government authorities and legal bodies when required by law

5. Payment Processing Details

• We use Razorpay as our primary payment processor for all transactions in India
• Credit card and payment details are processed directly by Razorpay and never stored on our servers
• We only receive transaction confirmations, payment status, and billing metadata
• Payment data is governed by Razorpay's privacy policy and PCI DSS compliance standards
• We retain transaction IDs and payment history for billing support and legal compliance
• International payments may be processed through Stripe with similar security measures

6. International Data Transfers

Your data may be processed outside your country of residence, including in India, the United States, and other countries where our service providers operate. We ensure appropriate legal safeguards are in place, including:

• Standard Contractual Clauses approved by relevant authorities
• Adequacy decisions by data protection authorities
• Certification schemes and binding corporate rules
• Data Processing Agreements with all third-party providers

7. Data Retention Periods

• Account Data: Retained while your account is active and deleted within 30 days of account closure
• Generated Content: Retained according to your subscription plan (30 days for free users, unlimited for paid subscribers)
• Payment Records: Retained for 7 years for legal, tax, and accounting compliance
• Support Communications: Retained for 3 years for quality assurance and dispute resolution
• Analytics Data: Anonymized usage data retained for 26 months for service improvement
• Security Logs: Retained for 12 months for security monitoring and fraud prevention

8. Your Data Rights

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data we hold
• Right to Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Data Portability: Export your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Restrict Processing: Limit how we process your personal data
• Right to Withdraw Consent: Remove consent for specific data processing activities

To exercise these rights, contact us at support@sytrusai.com. We will respond within 30 days and may require identity verification.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for login, security, and core platform functionality (cannot be disabled)
• Analytics Cookies: Google Analytics and similar tools for usage insights (can be disabled in browser settings)
• Performance Cookies: Monitor service performance, load times, and error tracking
• Preference Cookies: Remember your settings, language preferences, and customizations

You can manage cookie preferences through your browser settings or our cookie consent banner. Disabling certain cookies may affect platform functionality.

10. Security Measures

We implement comprehensive security measures to protect your data:

• End-to-end encryption for data transmission and storage
• Multi-factor authentication and access controls
• Regular security audits and vulnerability assessments
• Employee training on data protection and security protocols
• Incident response procedures and breach notification protocols

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but continuously work to protect your information.

11. Third-Party Links and Services

Our platform may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of these external services. Please review their privacy policies independently before providing any personal information.

12. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected such information, we will delete it immediately. If you believe we have collected information from a child under 13, please contact us.

13. California Consumer Privacy Act (CCPA) Rights

If you are a California resident, you have additional rights:

• Right to Know: Know what personal information we collect and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information to third parties
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at support@sytrusai.com with 'CCPA Request' in the subject line.

14. India Data Protection Rights (DPDP Act 2023)

For users in India, you have rights under the Digital Personal Data Protection Act 2023:

• Right to Access: Obtain confirmation of processing and access to your personal data
• Right to Correction: Correct inaccurate or misleading personal data
• Right to Erasure: Request deletion of personal data when no longer needed
• Right to Grievance Redressal: File complaints with our designated Grievance Officer
• Right to Nomination: Nominate someone to exercise your rights in case of death or incapacity

15. Grievance Officer (India)

For Indian users, our designated contact for privacy and data protection concerns:

• Email: grievance@sytrusai.com
• Company: Sytrus AI Pvt Ltd
• Response Time: Acknowledgment within 24 hours, resolution within 15 working days

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version is always available on this page. We will notify users of significant changes through:

• Email notifications to registered users
• In-app notifications when you log in
• Website banners for major policy updates

Your continued use of our services after changes take effect constitutes acceptance of the updated policy.