This Privacy Policy explains how Pravaha Labs Pvt Ltd ("Pravaha Labs", "we", "us") handles personal data when you visit our website or use our products and apps, including Merakify and our AI answer-sheet evaluation platform.
By using our website or apps you acknowledge this policy. Where the law requires your consent, we ask for it before collecting or using your data.
1. Who we are
Pravaha Labs Pvt Ltd is a company incorporated in India (CIN: [CIN]), with its registered address at [ADDRESS]. We act as the data fiduciary / controller for the personal data described in this policy.
You can reach us at pravahalabs@gmail.com or [PHONE].
2. Information we collect
When you use our website
- Contact form details: your name, email address, phone number (if provided) and the message you send.
- Technical data: IP address, browser type, device information and pages visited, which our hosting provider may record in server logs.
- Cookies and similar technologies: [CONFIRM: list any cookies or analytics tools used on the website, or state that none are used].
When you use our apps
- Account information: name, email address and sign-in details [CONFIRM: sign-in methods used].
- Content you provide: for example prompts, images, videos, logos and brand material you upload to Merakify, and the content generated for you.
- For the answer-sheet evaluation platform: [CONFIRM: exactly what is collected, such as school and teacher account details, scanned answer sheets, marking schemes, marks and student names or roll numbers].
- Usage and device data: features used, timestamps, error logs and basic device information [CONFIRM].
- Payment information, if paid plans exist: [CONFIRM: payments are handled by a third-party payment provider; we do not store full card details].
When you connect a Facebook or Instagram account
See section 3 below for the data we receive from Meta and how we use it.
3. Data from connected Facebook and Instagram accounts
Some of our apps let you connect your Facebook and/or Instagram account (for example, a Facebook Page or an Instagram professional account) through Meta's login and platform APIs. Connecting is always your choice, and you control which permissions you grant on Meta's consent screen.
What we may receive
- Basic account identifiers, such as your Meta user ID and the IDs, names and profile pictures of the Pages or Instagram accounts you choose to connect.
- Access tokens that let our app act on your behalf within the permissions you granted.
- Content and metadata you authorise us to access or publish, such as posts, media, captions, scheduling details and basic performance information [CONFIRM: list the exact Meta permissions your app requests and why each is needed].
How we use it
- Only to provide the features you ask for in our apps, for example to publish or schedule content to the accounts you connect and to show you the results.
- To keep your connection working, secure and free from abuse.
What we do not do
- We do not sell data received from Meta.
- We do not use it for purposes unrelated to the features you requested, and we do not use it to make decisions about eligibility for credit, employment or insurance.
- We do not share it with data brokers or advertising networks.
Storage, disconnecting and deletion
Access tokens and Meta account data are stored securely [CONFIRM: describe encryption and access controls] and only for as long as your account is connected or as needed to provide the service.
You can disconnect at any time from within our app and by removing our app from your Facebook settings (Settings → Business Integrations) or Instagram settings (Apps and Websites). You can also ask us to delete your data as described on our Data Deletion page at /data-deletion.
Our use of information received from Meta complies with the Meta Platform Terms and Developer Policies.
4. How we use your information
- To provide, operate and improve our website, products and apps.
- To respond to your enquiries and support requests.
- To generate content and results you request using AI features.
- To maintain security, prevent fraud and abuse, and troubleshoot problems.
- To meet legal obligations and enforce our terms.
- To send service-related messages. We send marketing messages only where you have agreed [CONFIRM].
5. Consent and legal grounds
We process personal data on the basis of your consent, to provide services you have requested, and to comply with applicable law, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made under them, as they apply to us. You can withdraw consent at any time, as described in section 11.
6. AI processing
Our products use artificial intelligence to generate or analyse content. To do this, your inputs may be sent to third-party AI model providers acting on our behalf [CONFIRM: name the providers and whether your content is used to train their models; state clearly if it is not].
AI outputs can contain mistakes. Please review them before relying on or publishing them.
8. Where data is stored
Our providers may store and process data on servers inside or outside India [CONFIRM: hosting region]. Where data is transferred outside India, we take steps to protect it as required by applicable law.
9. How long we keep data
We keep personal data only as long as needed for the purposes in this policy, or as the law requires. [CONFIRM: state retention periods, for example contact enquiries, account data after account closure, uploaded content, and Meta access tokens after disconnect.] When data is no longer needed, we delete or anonymise it.
10. Security
We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS) and access controls [CONFIRM: add or adjust measures actually in place]. No system is completely secure, so we cannot guarantee absolute security.
11. Your rights and choices
Subject to applicable law, you may:
- ask for access to the personal data we hold about you;
- ask us to correct or update inaccurate data;
- ask us to delete your data;
- withdraw your consent, including by disconnecting your Facebook or Instagram account;
- nominate another person to exercise your rights if you cannot; and
- make a complaint to us, and if unresolved, to the Data Protection Board of India once it is operational.
12. Data deletion
To request deletion of your data, including data we received from Facebook or Instagram, follow the steps on our Data Deletion page at /data-deletion or email us at the address below.
13. Children and students
Our website and general apps are not directed at children under 18. Our answer-sheet evaluation platform is used by schools, and may involve information about students. [CONFIRM: describe how student data is handled, who is responsible for obtaining parental or school consent, and whether schools act as the data fiduciary and Pravaha Labs as a processor.] We do not knowingly collect a child's personal data for any other purpose, and we do not track or target children with advertising.
15. Changes to this policy
We may update this policy from time to time. We will post the updated version on this page with a new “Last updated” date, and notify you of material changes where required.
16. Contact and grievance officer
For questions, requests or complaints about this policy, contact Pravaha Labs Pvt Ltd:
- Email: pravahalabs@gmail.com
- Phone: [PHONE]
- Address: [ADDRESS]
- Grievance Officer: [GRIEVANCE OFFICER NAME], [GRIEVANCE OFFICER EMAIL]