Privacy Policy

This Privacy Policy explains what personal data Shree AI collects, why, and the choices you have. Shree AI is operated by Shreekrishna Thapa, an individual developer based in Nepal, who is responsible for your data ("we", "us"). Contact: [email protected].

1. What we collect

• Account details: name, email address, password (stored only as a salted bcrypt hash), age range and country you choose, and your profile picture if you sign in with Google or Microsoft.
• Your content: chats, uploaded files and photos, CVs, translations and transcripts you save.
• Sign-in and security data: date and time, IP address, approximate country, device and browser, and the sign-in method — shown to you as your sign-in history.
• Usage data: which features you use and how many credits they use, so we can run plans and limits.
• Payment data: handled by our payment partner Paddle. We receive your plan, subscription status, amounts, invoice numbers and the card type and last 4 digits. We never see or store your full card number.
• Messages to us: feedback, support and upgrade requests you send.

2. Why we use it

• to provide the Service: answer your questions, save your history and CVs, run your plan and credits (performance of our contract with you);
• to keep accounts and the Service secure, prevent abuse and fix problems (our legitimate interests);
• to send service emails such as sign-in links, receipts, plan and security notices (contract and legitimate interests);
• to meet legal, tax and accounting duties (legal obligation).

We do not sell your personal data, and we do not use it for advertising.

3. How your data is protected

Every connection uses HTTPS with TLS encryption. Saved chats, documents and CVs are encrypted at rest with AES-256-GCM, with encryption keys kept separate from the data. Access to stored data is limited to authorised Shree AI administrators, only when needed for support, security or to investigate abuse, and every such access is logged.

4. Who we share it with

Only service providers that help us run Shree AI, under contracts that protect your data:

• AI model providers that process your prompts and files to generate answers;
• Paddle (payments, tax and invoices, as Merchant of Record) — see Paddle's own privacy policy;
• Google and Microsoft, only if you choose to sign in with them;
• our hosting and email providers.

We may also share data if the law requires it, or to protect people's safety. Some providers are outside your country; where that happens we use providers with appropriate safeguards.

5. How long we keep it

• Chats, files and CVs: until you delete them or delete your account.
• Sign-in and security logs: up to 12 months.
• Payment and invoice records: as long as tax and accounting law requires (usually up to 7 years).

6. Your choices and rights

• Download a copy of your data or delete your account at any time from Account → Your data.
• Correct your details in Account → Profile.
• Ask us to access, correct, delete or restrict your data, or object to how we use it, by emailing [email protected]. You can also complain to your local data protection authority.

7. Cookies and storage

We use only the cookies needed to run the Service: a secure sign-in session cookie and a security token that protects forms. Your browser also stores settings such as theme and language on your device. We do not use advertising or third-party tracking cookies.

8. Children

Shree AI is not meant for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, contact us and we will delete it.

9. Changes

We will update this policy when our practices change and tell you about important changes by email or in the app.