Terms of Service
& Privacy Policy

By using Aasai, you agree to these terms

These Terms of Service ("Terms") govern your access to and use of Aasai Technologies' platform, website, and services (collectively "Aasai" or "the Service"). By creating an account or using the Service in any way, you agree to be bound by these Terms.

If you are using Aasai on behalf of an organisation, you represent that you have the authority to bind that organisation to these Terms. If you don't have such authority, or if you do not agree with these Terms, you may not use the Service.

These Terms apply to all users, including account holders ("Users") and visitors who interact with published AI agents ("Visitors").

An AI agent platform powered by your knowledge

Aasai is a software-as-a-service (SaaS) platform that allows users to create AI-powered chat agents trained on their own knowledge bases. You can upload documents, paste text, or provide URLs, and Aasai converts that content into a conversational AI agent accessible via a shareable link.

The AI responses are generated using Google's Gemini language models. Aasai acts as the orchestration layer — we manage the knowledge base, user interface, branding, and delivery. We do not build or own the underlying language model.

Only what's necessary to run the service

We collect the minimum data needed to operate Aasai. Here is a complete list of what we store:

Account Information (Users)

• Name and email address from your Google account (via Google OAuth)
• Profile photo (from Google, or one you upload)
• Organisation name and phone number (optional, if you provide them)
• Plan type and token usage counts
• Account creation date and last login timestamp

Agent Content

• Knowledge base content you upload: text, extracted text from files, content scraped from URLs
• Agent configuration: name, system prompt, brand color, theme, welcome message, logo URL

Conversation Data

• Questions asked by visitors to your published agents
• AI-generated answers
• Visitor IP address (used for grouping conversations by session)
• A session ID and visitor ID generated per browser session (stored only in the visitor's localStorage)
• Timestamp of each message
• Token count per message (for billing and quota tracking)

Your data will never train any AI model

Specifically, we commit that:

• Your knowledge base content (PDFs, text, URLs) is used only to answer questions from your published agents. It is never used as training data.
• Visitor conversations (questions and AI responses) are stored for your dashboard analytics only. They are not fed back into any AI training pipeline.
• File uploads (PDFs, images, documents) are processed for text extraction and then referenced for answering questions. They are never used to train models.
• Google Gemini API usage: We use Google's Gemini API under terms that prohibit Google from using our API inputs to train their models. API data is not used for training per Google's API terms of service.
• We will never sell your data to any third party, including AI research organisations, data brokers, or advertising networks.

If we ever update our data practices in a way that could affect this commitment, we will notify you via email at least 30 days in advance and provide a clear mechanism to delete your data before any such change takes effect. You will always have the option to delete your account and all associated data.

Only to operate and improve Aasai

We use the data we collect exclusively for the following purposes:

• Service operation: Running your AI agents, storing your knowledge base, displaying your dashboard, and processing queries.
• Billing and quota: Tracking token usage against your plan limit. We need to know how many tokens you've consumed to enforce plan limits and calculate charges.
• Analytics for you: Populating your dashboard with query counts, session counts, and token usage charts. This data is yours — you can see it, manage it, and delete it.
• Service improvement: Aggregated, anonymised platform statistics (total queries, total tokens across all users) are used to understand platform-level usage and improve reliability. This never includes your specific content.
• Communication: Sending you important service-related emails (plan limits approaching, account updates). We do not send marketing emails unless you explicitly opt in.
• Security: Detecting abuse, unauthorized access, or violations of these Terms.

We do not sell or share your personal data

We do not sell, rent, or share your personal data with third parties for their commercial purposes. The only data sharing that occurs is:

• Google Gemini API: Your knowledge base and visitor questions are sent to the Gemini API to generate answers. This is the core function of the service. Google processes this data under their API terms, which prohibit using it for training.
• Google OAuth: We receive your name, email, and profile photo from Google when you sign in. We do not share anything back with Google beyond the standard OAuth flow.
• MongoDB Atlas: Your data is stored in MongoDB Atlas (cloud database). MongoDB has access to your data for infrastructure purposes but is contractually prohibited from accessing it for any other reason.
• Cloudflare: Our frontend is served via Cloudflare for performance and security. Cloudflare processes request metadata (IP addresses, headers) as part of their CDN service.
• Legal requirements: We may disclose data if required by law, court order, or to protect the rights, property, or safety of Aasai, our users, or others.

We do not integrate advertising networks, social media tracking pixels, or behavioral analytics platforms. There are no ads on Aasai, and we do not track you across the web.

Reasonable measures to protect your data

We implement industry-standard security measures to protect your data:

• All data in transit is encrypted using HTTPS/TLS
• Authentication is handled via JWT tokens with 30-day expiry and Google OAuth — we never store passwords
• Database access is restricted to authorised application servers only
• API keys and secrets are stored as environment variables and never exposed in code
• File uploads are processed in memory and never written to disk unencrypted

No system is 100% secure. If you discover a security vulnerability, please contact us immediately at [email protected]. We will investigate and respond promptly.

In the event of a data breach that affects your personal information, we will notify you within 72 hours of becoming aware of the breach, in accordance with applicable data protection laws.

You own your data. Full stop.

You have the following rights with respect to your data:

• Access: You can view all your data at any time through the Aasai dashboard — agents, knowledge sources, conversation history, and profile information.
• Correction: You can update your profile information at any time via the Profile page.
• Deletion: You can delete individual agents, knowledge sources, or your entire account. When you delete your account, all associated data — agents, sources, conversations, profile — is permanently deleted within 30 days.
• Export: You can contact us to request an export of your data in a machine-readable format.
• Opt-out of communications: You can unsubscribe from non-essential emails at any time.
• Conversation clearing: You can clear your agent's conversation history from the dashboard at any time. The underlying data is soft-deleted (retained briefly for disaster recovery) and then permanently removed.

To exercise any of these rights, use the dashboard controls or contact us at [email protected]. We will respond within 30 days.

Use Aasai responsibly

You are responsible for the content you upload and the agents you create. You agree not to use Aasai to:

• Upload or publish content that is illegal, defamatory, harassing, or infringes third-party intellectual property rights
• Create agents designed to deceive, defraud, or manipulate users
• Distribute malware, spam, or phishing content
• Upload content containing personally identifiable information of third parties without their consent
• Attempt to reverse-engineer, scrape, or overload the Aasai platform
• Use the service in any way that violates applicable laws or regulations

You retain ownership of all content you upload to Aasai. By uploading content, you grant Aasai a limited, non-exclusive license to store and process that content solely for the purpose of operating the service for you.

Aasai reserves the right to suspend or terminate accounts that violate these content policies. We will notify you and give you an opportunity to respond unless doing so would cause harm or we are legally prohibited from doing so.

Understanding the limits of our responsibility

Aasai provides AI-generated responses that may not always be accurate, complete, or current. AI responses should not be relied upon for medical, legal, financial, or other professional advice. Users are responsible for verifying important information.

The Service is provided "as is" and "as available." To the maximum extent permitted by law, Aasai disclaims all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, and non-infringement.

Aasai's total liability to you for any claims arising out of your use of the Service shall not exceed the amount you paid to Aasai in the 12 months preceding the claim. For free plan users, this limit is ₹0.

We are not liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or goodwill.

We'll tell you before anything changes

We may update these Terms from time to time. When we do:

• We will update the "Last updated" date at the top of this page
• For material changes, we will notify you via email at least 14 days before the changes take effect
• For changes that affect our data practices (especially the no-training commitment), we will provide 30 days notice and a clear option to delete your data
• Your continued use of the Service after changes take effect constitutes acceptance of the new Terms

We will never retroactively change how we handle data you've already uploaded without giving you an opportunity to delete it first.

Questions? We're easy to reach.

These Terms are governed by the laws of India, without regard to conflict of law principles. Any disputes shall be resolved in the courts of Tamil Nadu, India.

If you have any questions about these Terms, our privacy practices, or how we handle your data, please contact us: