Privacy, plainly stated

What we store

• ·Your account details — name and email, provided via sign-in with Clerk.
• ·Your conversations and messages — so you can return to them later.
• ·Routing metadata — which model handled each query, estimated complexity score, token counts, and cost. This is what powers your usage dashboard.
• ·Credit wallet history — purchase records, pack balances, and expiry dates.
• ·Routing preference signals — when you override a model recommendation, we record it silently to improve future routing for you. You can reset this at any time.
• ·Your approximate location (country, from IP) — used only to show pricing in the right currency and apply regional rate limits, never stored as a precise address.

What we never do

• We never train any AI model on your conversations.
• We never sell your data — not to advertisers, not to data brokers, not to anyone.
• We never share your messages with third parties, except to generate your response (see "How routing works" below) or where the law requires it.
• We never store your payment card details — Stripe, Razorpay, and PayPal each handle their own payment processing; we only receive confirmation that a charge succeeded.
• We never store your API keys in a readable form — only a one-way hash, so even we cannot see them once issued.

How routing works

When you send a message, DirΛIght reads it to determine complexity, category, and the best model for the job. This analysis uses your message content — we cannot route without reading it. The routing decision is logged alongside your message record (complexity score, category, model chosen, reason). This log is yours; it lives in your account and can be deleted at any time.

Your message is then forwarded to the selected AI model — usually via OpenRouter, which routes it on to the underlying provider, but for some models we connect directly to the provider's own API instead (a reliability measure, not a data-sharing expansion — it is still the same one model you or we selected). Today that provider list may include Anthropic, OpenAI, Google, DeepSeek, Moonshot AI (Kimi), Alibaba Cloud (Qwen), or NVIDIA, depending on which model handles your request. Each has its own privacy policy governing how it processes a request once it reaches them; we choose providers whose policies align with responsible data handling and do not permit training on your input by default.

Other services we rely on

Beyond the AI providers above: Clerk (sign-in), Stripe / Razorpay / PayPal (payments), Railway (database and backend hosting), and Vercel (frontend hosting). Each processes only what it needs to perform its function for us.

Cross-border data transfer

MAVPRO Technologies is registered in India, but our infrastructure and the AI providers we route to are global — your data may be processed on servers outside your own country, including outside India. We rely on our providers' own standard contractual and security safeguards for these transfers. By using DirΛIght, you consent to this, which is necessary for the service to function at all (there is no version of AI routing that avoids sending your query to an AI provider).

How long we keep it

Free-tier conversations you haven't touched in 7 days are deleted automatically. Paid-tier conversations and account data are kept until you delete them yourself (immediate, self-service, in Settings) or delete your conversations one at a time. Payment records are kept longer, as required by Indian tax and financial record-keeping law, even after an account is closed. For the full, code-verified breakdown of exactly what's logged and for how long — messages, usage logs, API keys, payment data, IP addresses — see our Data Retention page.

Children's data

DirΛIght is not directed at children. The account itself must belong to an adult or to a minor with verifiable parental/guardian consent. We do not knowingly collect data from a child under 18 without that consent, and we do not use any user's data for behavioural advertising to begin with — consistent with the heightened protection India's Digital Personal Data Protection Act, 2023 requires for anyone under 18.

Your rights

• ·Delete conversations — any time, from the chat sidebar.
• ·Delete your account — Settings → Data & Privacy → Delete my account. This is immediate and self-service, not a request you have to email in — it deletes everything (conversations, credits, keys, usage history) and your sign-in identity in one action, except what we must retain by law. If you're ever locked out, email privacy@dirAIght.com instead.
• ·Access, correct, or export your data — email us at the same address. We will send a JSON export of your conversations and usage history.
• ·Withdraw consent / object to processing — for anything not required to run your account, email us.
• ·Reset routing preferences — email us and we reset the silent preference signals that influence model recommendations.

If you are in the EU/UK, GDPR gives you the rights above under those names (access, rectification, erasure, restriction, portability, objection) plus the right to complain to your local data protection authority. If you are in India, the same requests are handled under the DPDP Act, 2023 through our Grievance Officer below. If you are in California, you have the CCPA right to know what we collect and to request deletion — covered by the same process.

Cookies and tracking

We use session cookies for authentication (via Clerk), a cookie to remember your detected country for currency display, and a single localStorage key to remember whether you have seen the Founding Member onboarding modal. We do not use advertising cookies, cross-site trackers, or analytics beyond what is built into our own platform.

Security

Data is encrypted in transit. API keys are stored as one-way hashes, never in plaintext. Administrative access to production data is restricted and logged.

Changes to this policy

If we make a material change, we will notify you by email before it takes effect. The date at the top of this page is always the date of the last update.

Grievance Officer & contact

In accordance with Indian law, our Grievance Officer is [ADD GRIEVANCE OFFICER NAME], reachable at privacy@dirAIght.com. MAVPRO Technologies · DirΛIght · [ADD REGISTERED OFFICE ADDRESS, INDIA].