Privacy Policy

This Privacy Notice for TORKEHUB PRIVATE LIMITED (CIN: U58201KA2024PTC192536; GSTIN: 29AALCT2399D1ZW), doing business as Torki and Torki AI ("we," "us," or "our"), describes how and why we access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at https://www.torkiai.com, or any website of ours that links to this Privacy Notice;
• Download and use our mobile or desktop application (Torki);
• Use Torki AI — an AI assistant for chat, research, image generation, voice, and related tasks; or
• Engage with us in other related ways, including support, marketing, or events.

We are the data controller responsible for your personal information. Our registered office is TORKEHUB PRIVATE LIMITED, Crescent 4, 2nd Floor, Prestige Shantiniketan, Whitefield Main Road, Thigalarapalya, Krishnarajapuram, Bengaluru, Karnataka 560048, India.

Questions or concerns? If you do not agree with our policies and practices, please do not use our Services. If you have questions, contact us at privacy@torkiai.com.

SUMMARY OF KEY POINTS

• What personal information do we process? Account details you provide (such as your name and email), the content you submit to the Services (your prompts, conversations, and any files, images, or audio you provide), and technical/usage data collected automatically.
• Do we process sensitive personal information? No. We do not request or intentionally process special-category data such as racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation.
• Do we use your content to improve our AI? Only with your consent. We may use your content to help improve and train our AI models, but only if you have opted in, and you can withdraw your consent at any time. We never sell your content.
• Where is your data processed? Our AI models are proprietary to Torki and run on our own infrastructure in India — we do not send your content to third-party AI providers.
• Do we sell your data or run ad-network advertising? No. We do not sell or rent your personal information, and we do not share it with advertising networks or data brokers.
• How do we keep your information safe? We use appropriate organizational and technical safeguards, though no method of transmission or storage is 100% secure.
• What are your rights? Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict processing.
• How do you exercise your rights? Through your account settings at https://torkiai.com/app, or by contacting us at privacy@torkiai.com.

TABLE OF CONTENTS

• 1. WHAT INFORMATION DO WE COLLECT?
• 2. HOW DO WE PROCESS YOUR INFORMATION?
• 3. WHAT LEGAL BASES DO WE RELY ON?
• 4. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION?
• 5. DO WE USE COOKIES AND TRACKING TECHNOLOGIES?
• 6. DO WE OFFER AI-BASED PRODUCTS?
• 7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
• 8. HOW LONG DO WE KEEP YOUR INFORMATION?
• 9. HOW DO WE KEEP YOUR INFORMATION SAFE?
• 10. DO WE COLLECT INFORMATION FROM MINORS?
• 11. WHAT ARE YOUR PRIVACY RIGHTS?
• 12. CONTROLS FOR DO-NOT-TRACK FEATURES
• 13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
• 14. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?
• 15. INTERNATIONAL DATA TRANSFERS
• 16. DO WE MAKE UPDATES TO THIS NOTICE?
• 17. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
• 18. HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect the personal information you voluntarily provide when you register, use the Services, or contact us. This may include:

• Account information: your name, email address, and (if you choose to provide it) your phone number;
• Login credentials: your username and password, or the identifier from a third-party login you choose to use;
• Billing information: the details needed to process a purchase (see "Payment data" below).

User Content

When you use Torki, you provide content that we process to deliver the Services, including:

• Your prompts, messages, and conversations with Torki;
• Files, documents, and images you upload or generate;
• Audio you provide when you use voice features.

We store your conversations and content so you can access your history and so the Services function as expected. We use this content to improve and train our AI models only where you have given your consent — this is opt-in, and you can withdraw your consent at any time in your settings. We do not sell your content. You can delete your conversations and content, and you can use Private Mode for sessions you don't want saved to your history.

Sensitive information

We do not request or intentionally collect sensitive (special-category) personal information.

Payment data

We do not collect or store your full payment card details. When you make a purchase, your payment is processed directly by our payment processors, Razorpay and PayPal, who handle and store your payment information under their own privacy policies (Razorpay: https://razorpay.com/privacy-policy/; PayPal: https://www.paypal.com/myaccount/privacy/privacyhub).

Social media login data

If you choose to register or log in using a third-party account (for example Google, Microsoft, Apple, Facebook, or X), we receive limited profile information from that provider, such as your name and email address. See Section 7.

Connected services (you choose to enable)

If you connect a third-party account such as Google (Calendar, Drive) or Microsoft (Outlook), we access only the data needed to perform the actions you request through that connector, using the minimum permissions (scopes) required. You can disconnect a connector at any time in your settings.

Application data

If you use our mobile or desktop app, we may request the following permissions, only where needed for a feature you use: microphone (for voice features); camera and photo library / files (so you can upload images and files); and push notifications (which you can disable in your device settings). We do not access your device contacts, SMS messages, or device calendar, and we do not track your precise device location.

Information collected automatically

In short: Some technical information is collected automatically when you use the Services.

This includes log and usage data (IP address, browser and device type, operating system, language, referring URLs, and information about how you use the Services, including timestamps, pages or features used, and error reports). We use this to operate, secure, and improve the Services. We may infer an approximate location (such as country) from your IP address; we do not collect precise GPS location. We also collect certain information through cookies and similar technologies — see our Cookie Notice: https://www.torkiai.com/cookies.

Google API

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. HOW DO WE PROCESS YOUR INFORMATION?

In short: We process your information to provide and improve the Services, communicate with you, maintain security, and comply with law.

• Create and manage your account and authenticate you;
• Provide the Services — generate responses, process your prompts and content, and deliver the AI features you request;
• Improve and train our AI models — only where you have given your consent (opt-in), which you can withdraw at any time;
• Process payments and manage your subscription;
• Respond to your inquiries and provide support;
• Send service communications (account, security, and billing messages), and — only if you opt in — occasional product updates, which you can unsubscribe from at any time;
• Maintain security, including fraud monitoring and prevention;
• Understand and improve how the Services are used; and
• Comply with legal obligations and protect the rights, safety, and property of you, us, and others.

3. WHAT LEGAL BASES DO WE RELY ON?

In short: We only process your personal information when we have a valid legal basis.

If you are in the EU or UK, our legal bases under the GDPR / UK GDPR are:

• Performance of a contract — to provide the Services you sign up for;
• Legitimate interests — to secure, maintain, and improve the Services, and to prevent fraud, provided these do not override your rights;
• Consent — for example, to use your content to improve and train our AI models (opt-in), and for optional marketing communications. You can withdraw consent at any time, without affecting processing carried out before withdrawal; and
• Legal obligations and vital interests where applicable.

If you are in Canada, we process your information with your express or implied consent, and in the limited circumstances permitted by applicable law (for example, fraud prevention or legal requirements). You can withdraw consent at any time.

4. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION?

In short: We do not sell your personal information, and your content and AI processing stay on our own infrastructure.

We do not sell or rent your personal information, and we do not share it with advertising networks or data brokers.

Your prompts, content, and AI processing — including chat, image generation, voice, search, and analytics — run on our own infrastructure. We do not use third-party AI, voice, image, or analytics providers.

We use a small number of essential service providers only for functions we do not perform in-house, who process information on our behalf and under contract:

• Payment processing — Razorpay and PayPal;
• Email delivery — for transactional messages, and opt-in product updates.

We may also disclose information in connection with a business transfer (merger, acquisition, financing, or sale of assets), or to comply with law or a valid legal request, or to protect rights, safety, and property. If you enable a connected service (such as Google or Microsoft), that provider receives only what is needed to perform the action you request through the connector.

5. DO WE USE COOKIES AND TRACKING TECHNOLOGIES?

In short: We use cookies to operate the Services and remember your preferences.

We use cookies and similar technologies that are necessary for the Services to function (for example, to keep you logged in and to secure your session) and to remember your settings.

For usage analytics, we use our own first-party analytics, hosted on our own infrastructure. We do not use Google Analytics or any third-party analytics or advertising trackers, and this usage data is not shared with external parties.

For details and your choices, see our Cookie Notice: https://www.torkiai.com/cookies.

6. DO WE OFFER AI-BASED PRODUCTS?

In short: Yes — Torki is an AI product.

Torki provides features powered by artificial intelligence and machine learning, including: conversational AI assistance; text generation, summarization, and analysis; image generation and image understanding; voice interaction (speech-to-text and text-to-speech); research and web search; code and document generation; and language translation.

How we process your data with AI. We process the prompts and content you submit in order to generate responses and provide the features you request. Our AI models are proprietary to Torki and run on our own infrastructure — we do not send your content to third-party AI providers. We use your content to improve and train our models only where you have given your consent; this is opt-in, you can withdraw it at any time, and we do not sell your content. AI outputs can be inaccurate or incomplete and should not be relied upon as professional advice. You are responsible for how you use AI-generated content.

7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In short: If you log in with a third-party account, we receive limited profile information from that provider.

If you register or log in using a third-party account, we receive profile information such as your name and email address, depending on the provider and your privacy settings with them. We use this only as described in this Notice. We do not control the third-party provider's own use of your information — please review their privacy policy.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

In short: We keep your information only as long as necessary, and delete it on the timelines below.

• Account deletion. If you delete your account, we delete your personal data within 30 to 90 days (a short grace period during which the deletion can be reversed, after which your data is purged, including from backups).
• Deletion requests. If you ask us to delete your data, we will do so within 30 days.
• Inactive accounts. If you create an account but do not use it, we delete it after 6 months of inactivity.

We may retain limited information for longer where required or permitted by law (for example, tax, accounting, fraud-prevention, or legal-compliance purposes). When we no longer have a legitimate need to process your information, we delete or anonymize it, or securely isolate it until deletion is possible.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

In short: We use organizational and technical safeguards.

We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. You access the Services at your own risk and should use a secure environment.

10. DO WE COLLECT INFORMATION FROM MINORS?

In short: No. The Services are not directed to anyone under 18.

We do not knowingly collect data from or market to children under 18 (or the equivalent age of majority in your jurisdiction). By using the Services, you represent that you are at least 18, or that you are the parent or guardian of a minor and consent to their use. If we learn we have collected information from someone under 18, we will deactivate the account and delete the data. If you believe we may have such data, contact us at privacy@torkiai.com.

11. WHAT ARE YOUR PRIVACY RIGHTS?

In short: Depending on where you live, you have rights over your personal information.

In regions such as the EEA, UK, Switzerland, and Canada, you may have the right to: access and obtain a copy of your personal information; request correction or deletion; restrict or object to processing; data portability; and not to be subject to solely automated decisions with legal or similarly significant effects. You can exercise these rights through your account or by contacting us at privacy@torkiai.com.

If you are in the EEA or UK and believe we are unlawfully processing your information, you may complain to your local supervisory authority. In Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing consent. Where we rely on consent — including consent to use your content to improve our AI models — you can withdraw it at any time in your settings or by contacting us; this does not affect processing carried out before withdrawal.

Marketing opt-out. You can unsubscribe at any time via the link in our emails or by contacting us. We may still send you non-marketing service messages.

Account information. You can review, update, or delete your account information in your settings or by contacting us. After deletion, we may retain limited information to prevent fraud, resolve disputes, enforce our terms, or comply with law.

12. CONTROLS FOR DO-NOT-TRACK FEATURES

Most browsers and some operating systems offer a "Do-Not-Track" (DNT) setting. Because there is no finalized common standard for DNT, we do not currently respond to DNT signals. Global Privacy Control (GPC): we honor GPC signals as a valid opt-out of any "sale"/"sharing" of personal information for targeted advertising under applicable US state laws. (Note: we do not sell or share personal information for targeted advertising in any case.)

13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In short: Residents of certain US states have specific rights over their personal information.

Categories of personal information we collect

We have not sold or shared personal information for a business or commercial purpose, and we will not sell or share your personal information.

Your rights

Depending on your state, you may have the right to: know whether we process your personal data; access it; correct inaccuracies; delete it; obtain a copy; opt out of targeted advertising, sale, or profiling; and not be discriminated against for exercising your rights. To exercise these rights, use your account settings, email privacy@torkiai.com, or contact us as described below. We will verify your identity before responding. If we deny a request, you may appeal by emailing privacy@torkiai.com.

14. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

Australia and New Zealand

We handle your personal information in accordance with Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. You may request access or correction, and may complain to the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner.

Republic of South Africa

You may request access or correction. If unsatisfied, you may contact the Information Regulator (South Africa): enquiries@inforegulator.org.za.

15. INTERNATIONAL DATA TRANSFERS

In short: We are based in India and process your information there.

We operate from India and process and store personal information on our own servers in India. If you access the Services from the EEA, the United Kingdom, Switzerland, or another region, your personal information will be transferred to and processed in India. Where required by law, we rely on appropriate safeguards for such transfers, such as the European Commission's Standard Contractual Clauses (SCCs) and the UK Addendum, consistent with the GDPR and UK GDPR.

16. DO WE MAKE UPDATES TO THIS NOTICE?

In short: Yes, as needed to stay compliant.

We may update this Notice from time to time. The "Last updated" date reflects the latest version. If we make material changes, we will notify you by posting a prominent notice or by direct notification where required.

17. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this Notice, contact us at:

TORKEHUB PRIVATE LIMITED
CIN: U58201KA2024PTC192536 | GSTIN: 29AALCT2399D1ZW
Email: privacy@torkiai.com
Registered office: Crescent 4, 2nd Floor, Prestige Shantiniketan, Whitefield Main Road, Thigalarapalya, Krishnarajapuram, Bengaluru, Karnataka 560048, India

18. HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?

You may have the right to request access to the personal information we hold about you, to correct inaccuracies, or to delete it, subject to applicable law. To do so, visit https://torkiai.com/app or email privacy@torkiai.com.