Priyanix Legal

Privacy Policy

Version 1.0 Effective 9/29/2026
Priyanix AI - Enterprise Privacy Policy V1.0 1. INTRODUCTION Priyanix AI ("Priyanix AI", "Priyanix", "we", "us", or "our") respects the privacy, confidentiality and security of individuals and organizations using our artificial intelligence, software, automation and productivity platform. This Privacy Policy ("Privacy Policy" or "Policy") explains how Priyanix AI may collect, receive, access, use, process, store, transmit, disclose, secure, retain, anonymize and delete Personal Data in connection with the Priyanix AI Services. This Policy applies to the Priyanix AI website; web applications; desktop applications; mobile applications; AI Chat; AI Core; AI Memory; Goal Mode; Priyanix Brain; AI Agents; automation systems; Business AI; accounting and GST tools; Priyanix Studio; AI Writer; Social Media AI; Interview AI; Priyanix Transfer; APIs; integrations; subscriptions; administrative services; enterprise Services; customer support; and any other present or future feature made available under Priyanix AI (collectively, the "Services"). By using Priyanix AI, you acknowledge this Privacy Policy. Where applicable law requires consent for a particular processing activity, Priyanix AI will seek such consent through an appropriate consent notice, permission screen, authorization flow or other lawful mechanism. 2. LEGAL OPERATOR Priyanix AI is operated by the legal entity identified on the applicable official Priyanix AI website, Priyanix AI application, tax invoice, subscription confirmation, official payment record, or statutory business disclosure. Principal Business Jurisdiction: Jaipur, Rajasthan, India. The exact registered legal entity name, registered address, privacy contact and statutory registration particulars must match Priyanix AI's official business records. 3. APPLICABLE PRIVACY FRAMEWORK Priyanix AI intends to process Personal Data in accordance with applicable law, including applicable provisions of the Digital Personal Data Protection Act, 2023; the Digital Personal Data Protection Rules, 2025 and applicable commencement provisions; the Information Technology Act, 2000; applicable Information Technology Rules; cybersecurity requirements; consumer-protection requirements; payment and financial regulations where applicable; and other sector-specific legal requirements. Where Priyanix AI provides Services in jurisdictions outside India, additional legal requirements may apply. Nothing in this Policy limits rights or obligations that cannot lawfully be waived. 4. DEFINITIONS Personal Data means data about an individual who is identifiable by or in relation to such data, to the extent recognized under applicable law. Processing means any operation performed upon Personal Data, including collection, recording, organization, storage, retrieval, use, analysis, transmission, sharing, modification and deletion. User means a person or organization accessing Priyanix AI. Data Principal means the individual to whom applicable Personal Data relates where such terminology applies under Indian data-protection law. User Content means prompts, messages, files, documents, photographs, images, audio, video, designs, data, business information or other material submitted through Priyanix AI. AI Agent means an AI-powered software capability configured to perform, recommend or assist with tasks. Connected Service means a third-party application, API, software platform, account, database, cloud service, website or other external system connected by a User. Page 2 Priyanix AI - Enterprise Privacy Policy V1.0 Service Provider means a vendor, processor, contractor, infrastructure provider or other third party engaged to assist Priyanix AI. 5. OUR PRIVACY PRINCIPLES Priyanix AI intends to follow these principles: purpose limitation; data minimization; transparency; appropriate consent where legally required; security by design; access control; limited retention; User control where appropriate; accountability; privacy-conscious AI development; auditability of high-impact Agent actions; and lawful processing of third-party information. 6. CATEGORIES OF INFORMATION WE MAY PROCESS Depending upon the Services used, Priyanix AI may process account information; authentication information; contact information; subscription information; payment metadata; prompts and conversations; AI Memory information; Agent configuration; Agent execution records; uploaded documents; business information; customer or supplier information submitted by Users; project files; designs; resumes; social-media information; connected-service information; usage analytics; technical logs; security information; support communications; and other information voluntarily supplied by Users. 7. ACCOUNT INFORMATION Account information may include name; mobile number; email address; User ID; profile information; business or organization name; role; account creation date; subscription plan; account status; User preferences; last-login information; and security-related account information. 8. AUTHENTICATION INFORMATION Priyanix AI may support authentication through email and password; mobile number and OTP; Google authentication; other supported identity providers; and additional authentication methods introduced in the future. Passwords maintained directly by Priyanix AI should be cryptographically hashed rather than stored in readable form. Users should never provide Priyanix AI support personnel with passwords or OTPs. 9. PAYMENT AND SUBSCRIPTION DATA Where Users purchase paid Services, Priyanix AI may process subscription plan; billing cycle; amount; invoice information; applicable tax details; payment-provider transaction identifier; payment status; renewal status; AutoPay status; refund status; chargeback information; and payment-provider references. Payment credentials may be processed directly by independent payment providers. Priyanix AI does not intend to store complete payment-card CVV, UPI PIN, internet-banking password, banking OTP, or similar payment authentication secrets. Page 3 Priyanix AI - Enterprise Privacy Policy V1.0 10. AUTOPAY INFORMATION Where recurring billing is enabled, Priyanix AI may process information necessary to identify subscription status; mandate status; billing date; renewal status; recurring-payment reference; and transaction outcome. The underlying payment mandate may remain with the relevant bank, UPI provider, card provider, application store or payment gateway. 11. AI CHAT AND PROMPTS When Users interact with Priyanix AI, Priyanix AI may process prompts; messages; instructions; conversation context; attachments; requested tasks; generated responses; feedback; tool-use information; and associated technical metadata. Such processing is necessary to generate requested AI outputs and provide conversation functionality. 12. USER CONTROL OVER INPUTS Users determine what information they provide to Priyanix AI. Users should avoid including unnecessary government identification data; financial credentials; authentication secrets; medical information; confidential third-party information; sensitive employee information; or other high-risk information unless the applicable Priyanix Service expressly requires and securely supports such processing. 13. PRIYANIX AI MEMORY Priyanix AI may provide memory and personalization functionality. Where memory functionality is active, Priyanix AI may process selected information from prior interactions to remember User preferences; maintain project continuity; provide context-aware assistance; reduce repetitive instructions; personalize the Service; and maintain ongoing workflows. Where product functionality permits, Users may be provided controls to manage memory-related functionality. 14. PRIYANIX BRAIN AND AI AGENTS Priyanix Brain may process information including Agent identity; Agent name; Agent purpose; Agent instructions; workflows; permissions; connected services; execution requests; approvals; action history; API activity; tool usage; results; error information; timestamps; and security events. 15. AI AGENT AUTHORIZATION RECORDS Priyanix AI may retain records establishing which User initiated an action; which Agent performed the action; what permission existed; whether human approval was required; whether approval was provided; what external service was accessed; when execution occurred; execution status; and relevant security information. These records are intended to support accountability, fraud prevention, debugging, security and dispute resolution. 16. AI AGENT DATA ACCESS An AI Agent should access only information reasonably necessary for the User-requested task, the permissions granted by the User, the available integration, and relevant platform security requirements. Technical capability to access additional information does not constitute authorization for unrestricted processing. Page 4 Priyanix AI - Enterprise Privacy Policy V1.0 17. THIRD-PARTY SOFTWARE AND INTEGRATIONS Users may connect supported third-party services such as email; calendars; cloud-storage services; productivity applications; social-media platforms; CRM systems; business software; databases; APIs; websites; and other supported external services. Priyanix AI may process information accessible through such integrations according to the permissions granted. 18. OAUTH AND ACCESS TOKENS Where available, Priyanix AI should use industry-standard authorization mechanisms such as OAuth. Priyanix AI may securely store authorization tokens where technically required to maintain a connected integration. Such tokens should be encrypted or otherwise protected; accessible only to authorized systems; scoped where provider functionality allows; and revocable where supported. 19. REVOCATION OF CONNECTED SERVICES Users may disconnect supported third-party integrations where functionality permits. Disconnecting generally prevents future access under the revoked authorization. Users may also need to revoke authorization directly through the third-party provider. Information already lawfully processed may remain for legitimate retention purposes. 20. BUSINESS AI DATA Business AI may process customers; suppliers; invoices; receipts; vouchers; expenses; sales; payments; GST information; accounting entries; business documents; products; inventory; reports; and other business records. 21. BUSINESS USER RESPONSIBILITY Where a business User uploads Personal Data relating to another person, including customers, employees, suppliers, applicants, contractors or business contacts, the business User is responsible for ensuring that such information has been lawfully obtained and may lawfully be processed. Priyanix AI's technical ability to process information does not constitute confirmation that the business User has fulfilled its independent privacy obligations. 22. OCR AND DOCUMENT PROCESSING Documents processed by Priyanix AI may contain names; addresses; invoice numbers; financial values; tax identifiers; contact information; business information; dates; transaction records; and other visible document information. Priyanix AI may extract and process such information only as necessary to provide the requested functionality and related platform operations. 23. PRIYANIX STUDIO Priyanix Studio may process project files; images; vector artwork; logos; fonts; design assets; brand assets; templates; dimensions; production settings; signage specifications; material information; project versions; and related design metadata. 24. AI WRITER AI Writer may process prompts; briefs; brand information; brand voice; keywords; campaigns; drafts; edits; generated content; and content preferences. Page 5 Priyanix AI - Enterprise Privacy Policy V1.0 25. SOCIAL MEDIA AI Where Users connect a social-media account, Priyanix AI may process information made available under the User's authorization, potentially including profile information; page information; posts; media; scheduled content; publishing permissions; comments; engagement information; analytics; and API metadata. The precise information available depends upon the relevant third-party platform and permissions granted. 26. INTERVIEW AI Interview AI may process resumes; CVs; educational information; professional experience; skills; job descriptions; interview responses; generated feedback; career preferences; role preferences; and voice/audio where relevant functionality is enabled. 27. PRIYANIX TRANSFER Priyanix Transfer may process uploaded files; filenames; file type; file size; relative folder path; transfer identifiers; expiration date; access configuration; download information; transfer logs; and security metadata. 28. SUPPORT DATA When Users contact Priyanix AI support, information processed may include User ID; contact information; support request; screenshots; attachments; account information; diagnostic logs; and correspondence history. 29. TECHNICAL INFORMATION Priyanix AI may automatically process technical information such as IP address; device type; browser; operating system; app version; language; session identifier; approximate network-derived location; timestamps; network information; crash information; performance data; and security events. 30. PRODUCT USAGE DATA Usage information may include features accessed; modules used; Agent executions; token consumption; storage usage; session activity; interaction patterns; errors; latency; workflow completion; and performance information. 31. PURPOSES OF PROCESSING Priyanix AI may process information for purposes including providing requested Services; creating accounts; authentication; generating AI responses; providing memory; operating AI Agents; executing authorized automations; providing external integrations; saving projects; processing documents; providing business functionality; providing design functionality; processing subscriptions; handling payments; managing credits and tokens; providing support; preventing fraud; cybersecurity; detecting abuse; enforcing Terms; debugging; improving reliability; measuring performance; providing product analytics; maintaining execution integrity; maintaining audit records; resolving disputes; complying with legal obligations; communicating essential Service information; and other purposes appropriately disclosed at the point of collection. 32. CONSENT Where consent is legally required, Priyanix AI intends to provide appropriate notice explaining what Personal Data is requested; why it is being Page 6 Priyanix AI - Enterprise Privacy Policy V1.0 requested; how it will be used; relevant User rights; and how consent may be withdrawn. Consent shall not be bundled unnecessarily with unrelated processing where separate consent is legally appropriate. 33. CONSENT RECORDS Priyanix AI may maintain records showing User ID; consent type; Policy version; Terms version; date and time; consent status; withdrawal status; relevant product context; and other evidence reasonably necessary to demonstrate consent. 34. WITHDRAWAL OF CONSENT Where processing depends upon consent, Users may withdraw consent using supported account settings or privacy channels. Withdrawal should be as reasonably accessible as the method used to provide consent. Withdrawal does not invalidate processing undertaken lawfully before withdrawal. Functionality dependent upon such processing may become unavailable. 35. OTHER LAWFUL PROCESSING Where permitted under applicable law, Priyanix AI may process Personal Data for lawful purposes without separate consent where another lawful ground applies. This may include compliance with law; responding to emergencies; cybersecurity; fraud investigation; judicial requirements; regulatory requirements; and enforcement or defense of legal claims. 36. DATA MINIMIZATION Priyanix AI intends to limit Personal Data processing to information reasonably necessary for the relevant purpose. Priyanix AI may modify product architecture to reduce unnecessary collection. 37. PURPOSE LIMITATION Personal Data should not be materially repurposed for unrelated purposes without an appropriate lawful basis, additional notice, and consent where legally required. 38. AI TRAINING POLICY Private User Content is not intended to be automatically used to train Priyanix AI foundation models merely because the User uses the Service. Priyanix AI may use aggregated information; appropriately de-identified information; product telemetry; error signals; safety signals; User feedback; and other information that may lawfully be used for Service improvement. Where identifiable User Content is proposed to be used for model-training purposes beyond providing the User's requested Service, Priyanix AI will provide appropriate disclosure and obtain consent where required. Enterprise agreements may impose additional AI-training restrictions. Page 7 Priyanix AI - Enterprise Privacy Policy V1.0 39. THIRD-PARTY AI PROVIDERS Priyanix AI may use third-party AI or machine-learning providers. Only information reasonably required to perform the requested task should be transmitted to such providers. Priyanix AI should seek contractual and technical configurations designed to protect User information; restrict unauthorized processing; secure transmissions; support confidentiality; and meet applicable privacy obligations. 40. SUBPROCESSORS AND SERVICE PROVIDERS Priyanix AI may use Service Providers in categories such as cloud infrastructure; database hosting; object/file storage; AI models; authentication; payment processing; email delivery; SMS/OTP delivery; analytics; monitoring; cybersecurity; error tracking; customer support; and content-delivery infrastructure. 41. SUBPROCESSOR TRANSPARENCY Priyanix AI intends to maintain a separate Subprocessor List for enterprise and business customers. The list may identify provider name; service provided; data category; processing location where relevant; and applicable purpose. The Subprocessor List may change as Priyanix AI infrastructure evolves. 42. ENTERPRISE CUSTOMERS Enterprise customers may receive additional contractual protections through Data Processing Agreements; security schedules; confidentiality agreements; enterprise-specific retention terms; subprocessor terms; and negotiated processing restrictions. Where a valid enterprise agreement conflicts with this Policy regarding a specific processing activity, the applicable contractual document may control to the extent legally permissible. 43. DATA PROCESSING AGREEMENT Priyanix AI may enter into a Data Processing Agreement ("DPA") where required. A DPA may address processing instructions; confidentiality; security; subprocessors; breach notification; deletion; audits; assistance with data rights; international processing; and other processing obligations. 44. NO SALE OF PERSONAL DATA Priyanix AI does not intend to sell User Personal Data to unrelated data brokers for monetary consideration as part of its ordinary business model. If this practice materially changes, Priyanix AI will update this Policy and provide any legally required notice or consent mechanism. 45. MARKETING Priyanix AI may send marketing communications where legally permitted. Users may unsubscribe from promotional communications using supported preference or unsubscribe controls. Opting out of marketing does not prevent security notifications; account notices; billing messages; legal notices; product-critical communications; or transactional communications. 46. COOKIES Priyanix AI may use cookies and similar technologies for strictly necessary authentication, security, account sessions and fundamental product functionality; preferences such as language and display; analytics; security and Page 8 Priyanix AI - Enterprise Privacy Policy V1.0 abuse detection; and marketing or attribution where legally permitted and consented to where required. 47. COOKIE CONSENT Where legally required, Priyanix AI will provide a cookie-management interface allowing Users to control non-essential cookies. Strictly necessary technologies may operate without optional cookie consent where permitted by law. 48. CHILDREN Priyanix AI will process children's Personal Data only where permitted under applicable law and appropriate safeguards exist. Where required, Priyanix AI may use age-gating; parental verification; verifiable parental consent; restricted functionality; additional privacy protections; or prohibited processing categories. Priyanix AI may block or close accounts where age requirements are not satisfied. 49. SECURITY PROGRAM Priyanix AI intends to maintain a risk-based information-security program. Security measures may include encryption in transit; encryption at rest where appropriate; password hashing; secure authentication; multi-factor authentication where supported; role-based access controls; least-privilege access; token protection; API authorization; network controls; monitoring; audit logs; rate limits; anomaly detection; vulnerability testing; dependency scanning; secure software-development practices; backups; disaster recovery; incident response; and security reviews. 50. EMPLOYEE AND INTERNAL ACCESS Access to User information should be limited to authorized personnel with a legitimate need. Access may be permitted for technical support; security; incident response; abuse investigation; billing; legal compliance; and Service operation. Unauthorized internal access is prohibited. 51. ACCESS LOGGING Sensitive administrative access may be logged where technically appropriate. Audit records may include administrator; User account affected; action; timestamp; reason; result; and security metadata. 52. SECURITY INCIDENT RESPONSE Priyanix AI intends to maintain procedures to identify security incidents; contain affected systems; investigate scope; preserve evidence; remediate vulnerabilities; assess Personal Data impact; notify appropriate internal personnel; notify affected Users where required; notify authorities where legally required; and implement corrective measures. 53. PERSONAL DATA BREACH NOTIFICATION Where a qualifying Personal Data breach occurs, Priyanix AI will provide notifications required under applicable law. Notification timing, content and recipients will follow applicable statutory requirements. 54. RETENTION PRINCIPLES Priyanix AI will not intentionally retain Personal Data indefinitely merely because storage is technically possible. Retention is determined according to product functionality; User expectations; legal Page 9 Priyanix AI - Enterprise Privacy Policy V1.0 requirements; financial obligations; fraud risk; security; dispute risk; contractual requirements; and technical backup cycles. 55. STANDARD RETENTION SCHEDULE Unless a different retention period is disclosed for a Service, enterprise agreement or legal requirement, Priyanix AI intends to apply the following baseline framework: Active Account Information: for the duration of the active account. Closed Account Core Information: normally deleted or anonymized following account closure, subject to lawful retention requirements. AI Conversations: retained while available in User history unless deleted by the User or subject to applicable Service-specific retention. Deleted Conversations: removed from active User-facing systems and scheduled for backend deletion according to technical deletion cycles, except information retained for security or legal reasons. AI Memory: retained while applicable memory functionality remains active or until the relevant information is deleted or superseded according to product controls. AI Agent Execution Logs: normally retained for up to 12 months for security, execution integrity and dispute resolution unless a longer or shorter period is legally or contractually required. Security and Authentication Logs: normally retained for up to 12 months, subject to security requirements. Support Records: normally retained for up to 24 months following resolution. Payment and Tax Records: retained for the period required by applicable accounting, taxation and financial law. Priyanix Transfer Files: retained until the transfer expiry period and subsequently scheduled for deletion. Temporary Processing Files: deleted after the relevant processing purpose ends according to technical cleanup cycles. Backups: deleted or overwritten according to secure backup rotation schedules. Page 10 Priyanix AI - Enterprise Privacy Policy V1.0 56. RETENTION EXCEPTIONS Information may be retained longer where reasonably necessary for fraud investigation; security incidents; regulatory inquiry; litigation; legal claims; taxation; payment disputes; chargebacks; enforcement proceedings; legal holds; or binding government or court requirements. 57. ACCOUNT DELETION Users may request account deletion through available account controls or designated privacy channels. Following a valid request, Priyanix AI will delete or anonymize Personal Data no longer required for a lawful purpose. Deletion may not immediately remove legally required financial records; security logs; fraud records; dispute records; legal-hold information; or information existing temporarily in backup systems. 58. BACKUP DELETION Information deleted from active systems may continue to exist temporarily within backup infrastructure. Backup information should not be restored into active production except for legitimate disaster-recovery or security purposes. Backup copies should expire according to normal rotation cycles. 59. PRIYANIX TRANSFER DELETION Transfer files should be deleted following their configured expiry period or User-requested deletion where supported. Metadata necessary for security; anti-abuse; billing; dispute handling; or legal compliance may be retained separately where lawful. 60. DATA ACCURACY Priyanix AI may provide functionality allowing Users to update account information. Users are responsible for maintaining accurate information where accuracy is relevant to the requested Service. 61. USER PRIVACY RIGHTS Subject to applicable law, Users may have rights to information about processing; access applicable information; correction; completion; updating; erasure; withdrawal of consent; grievance redressal; nomination; and other statutory rights. 62. PRIVACY REQUESTS Privacy requests may be submitted through Priyanix AI's designated privacy or grievance channel. Requests should contain sufficient information to identify the User; describe the request; and establish authority to make the request. 63. IDENTITY VERIFICATION Priyanix AI may verify a User's identity before responding to a privacy request. This helps prevent unauthorized access; fraudulent deletion; impersonation; and disclosure of Personal Data to unauthorized persons. 64. ACCESS Where legally applicable, Users may request information concerning Personal Data processed about them. Priyanix AI may limit disclosure where required or permitted by law. 65. CORRECTION Users may request correction of inaccurate Personal Data. Priyanix AI may require appropriate verification before changing Page 11 Priyanix AI - Enterprise Privacy Policy V1.0 security-sensitive information. 66. ERASURE Users may request erasure of applicable Personal Data. Priyanix AI may decline or limit deletion where continued retention is lawfully required. 67. WITHDRAWAL OF CONSENT Users may withdraw applicable consent through available mechanisms. Where withdrawal makes a requested Service impossible to provide, Priyanix AI may discontinue the affected functionality. 68. GRIEVANCE REDRESSAL Priyanix AI shall maintain a grievance mechanism to the extent required under applicable law. Privacy grievances may be submitted through the designated privacy or grievance channel. 69. NOMINATION Where applicable law provides nomination rights relating to Personal Data, Priyanix AI will provide an appropriate mechanism as legally required. 70. INTERNATIONAL PROCESSING Priyanix AI may use infrastructure or Service Providers located outside the User's state or country. Where cross-border processing occurs, Priyanix AI will seek to comply with applicable Indian restrictions and other applicable legal requirements. 71. DATA LOCATION Priyanix AI may use geographically distributed cloud and AI infrastructure. The location in which a particular record is processed may depend upon provider architecture; reliability; Service availability; enterprise configuration; regulatory restrictions; and security requirements. Enterprise customers requiring specific data-location arrangements may be subject to separate contractual terms. 72. BUSINESS TRANSFERS Information may be transferred in connection with a merger; acquisition; financing; restructuring; sale of assets; corporate reorganization; or transfer of Priyanix AI's business. Any successor handling relevant Personal Data shall remain subject to applicable legal obligations. 73. LEGAL DISCLOSURE Priyanix AI may preserve or disclose information where legally required in response to valid court orders; binding judicial process; lawful government requests; statutory requirements; regulatory proceedings; or legally enforceable directions. 74. SECURITY AND FRAUD DISCLOSURES Information may also be processed or disclosed where legally permitted and reasonably necessary to prevent fraud; detect unauthorized access; investigate cyberattacks; protect Priyanix AI infrastructure; protect Users; protect third-party rights; or establish or defend legal claims. 75. ILLEGAL USER ACTIVITY This Privacy Policy does not grant Users a right to use Priyanix AI anonymously for unlawful activity. Priyanix AI may preserve relevant records where required for lawful security investigations or legal compliance. Priyanix AI is not required to conceal or destroy evidence where Page 12 Priyanix AI - Enterprise Privacy Policy V1.0 retention is legally required. 76. DATA CONTROLLER / DATA FIDUCIARY RESPONSIBILITIES Where Priyanix AI determines relevant purposes and means of processing, Priyanix AI will comply with obligations applicable to its role under relevant law. Priyanix AI does not attempt through this Policy to contractually transfer statutory obligations that cannot legally be transferred. 77. PROCESSING ON BEHALF OF BUSINESS CUSTOMERS Where a business customer determines why Personal Data is processed and uses Priyanix AI to perform such processing on its behalf, Priyanix AI's role may differ from processing undertaken for Priyanix AI's own purposes. The relevant responsibilities may be further defined in a DPA or enterprise agreement. 78. USER RESPONSIBILITY FOR THIRD-PARTY DATA Users must ensure that they have legal authority to submit Personal Data concerning another person. This includes Personal Data relating to customers; employees; applicants; suppliers; contractors; students; patients; clients; contacts; or other individuals. 79. DATA USERS SHOULD NOT PROVIDE Unless a specific secure feature expressly requests such information, Users should not enter into ordinary prompts UPI PINs; CVVs; passwords; OTPs; private encryption keys; access secrets; authentication tokens; confidential government credentials; or unlawfully obtained Personal Data. 80. AGGREGATED AND DE-IDENTIFIED DATA Priyanix AI may create appropriately aggregated or de-identified information. Such information may be used for analytics; product development; capacity planning; cybersecurity; reliability; research; and operational planning subject to applicable law. 81. PRIVACY BY DESIGN Priyanix AI intends to incorporate privacy into product design through techniques such as permission minimization; scoped integrations; User approval gates; encryption; configurable retention; role-based access; privacy controls; consent records; execution logging; deletion mechanisms; and security monitoring. 82. AI AGENT PRIVACY SAFEGUARDS For AI Agents, Priyanix AI may use safeguards including explicit integration permissions; action scope restrictions; human approvals; execution logs; Agent access controls; connection revocation; sensitive-action confirmations; rate limiting; and security monitoring. 83. DATA PORTABILITY AND EXPORT Where supported or legally required, Users may be provided functionality to export applicable User information or project data. The exact export functionality may depend upon the relevant Priyanix module. 84. API PRIVACY API customers remain responsible for ensuring that information transmitted through the Priyanix AI API was lawfully obtained and Page 13 Priyanix AI - Enterprise Privacy Policy V1.0 may lawfully be processed. Priyanix AI may process API information for authentication; execution; billing; security; abuse prevention; debugging; rate limiting; and analytics. 85. ENTERPRISE AUDITABILITY Enterprise functionality may provide security or administrative logs to authorized customer administrators. Such information may include User activity; authentication events; Agent actions; permissions; integrations; security events; and account administration. Enterprise administrators are responsible for using such information lawfully. 86. CHANGES TO THIS POLICY Priyanix AI may update this Privacy Policy due to new Services; new AI functionality; new integrations; infrastructure changes; legal developments; security requirements; or changes in processing practices. The "Last Updated" date will indicate the current version. 87. MATERIAL PRIVACY CHANGES Where Priyanix AI introduces materially different processing requiring additional notice or consent, Priyanix AI will provide such notice or seek consent where required before the relevant processing begins. 88. POLICY VERSION RECORDS Priyanix AI may retain records identifying Privacy Policy version; publication date; effective date; applicable consent record; and User acceptance information where reasonably necessary for compliance and dispute resolution. 89. GOVERNING LAW This Privacy Policy shall be interpreted in accordance with applicable laws of India. Nothing in this Policy limits mandatory statutory privacy rights. 90. JURISDICTION Subject to mandatory regulatory jurisdiction, statutory privacy rights and jurisdiction that cannot lawfully be restricted, contractual disputes concerning this Policy shall be subject to competent courts located at Jaipur, Rajasthan, India. 91. PRIVACY CONTACT Platform: Priyanix AI. Country: India. Principal Business Jurisdiction: Jaipur, Rajasthan, India. Priyanix AI's legal operator shall be identified using the registered legal entity information published in the official Priyanix AI website, application, invoice or statutory business disclosure. The commercial version of this Privacy Policy should display the registered legal entity; registered address; official privacy email; official support email; official contact number; website; and applicable business registration information. Page 14 Priyanix AI - Enterprise Privacy Policy V1.0 92. GRIEVANCE OFFICER Where required under applicable law, Priyanix AI shall publish an appropriate Grievance Officer or privacy contact. The official Service should display: Grievance Officer - Authorized Priyanix AI representative; Designation - Grievance Officer / Privacy Contact; Email - official grievance/privacy email; Postal Address - official registered or grievance address; Phone - official contact number. 93. USER ACKNOWLEDGEMENT By using Priyanix AI, the User acknowledges that Priyanix AI processes information necessary to provide requested Services; AI prompts may be processed by AI infrastructure; AI Agents may access User-authorized Connected Services; Users control which integrations they voluntarily connect; Agent permissions and execution activity may be logged; Priyanix AI may maintain security records; Priyanix AI may use third-party Service Providers; independent payment processors may process payment information; Priyanix AI may retain records necessary for legal, security and financial purposes; Users remain responsible for Personal Data they independently upload; Priyanix AI does not intend to automatically use private User Content to train foundation models merely because a User uses Priyanix AI; Users may exercise applicable privacy rights; no electronic platform can guarantee absolute security; Priyanix AI may disclose information where legally required; User consent may be recorded for compliance; Personal Data should not be retained indefinitely without an appropriate reason; Privacy obligations that law places directly upon Priyanix AI remain Priyanix AI's responsibility; and this Policy may evolve as Priyanix AI's Services evolve. 94. FINAL PRIVACY STATEMENT PRIYANIX AI IS COMMITTED TO DEVELOPING ITS SERVICES USING PRIVACY, SECURITY, TRANSPARENCY AND USER CONTROL AS CORE PRODUCT PRINCIPLES. PRIYANIX AI WILL SEEK TO LIMIT PERSONAL DATA PROCESSING TO INFORMATION REASONABLY NECESSARY FOR THE RELEVANT SERVICE, SECURITY REQUIREMENT OR LAWFUL PURPOSE. USERS REMAIN RESPONSIBLE FOR ENSURING THAT THIRD-PARTY PERSONAL DATA THEY VOLUNTARILY PROVIDE, CONNECT OR INSTRUCT PRIYANIX AI TO PROCESS HAS BEEN LAWFULLY OBTAINED AND MAY LAWFULLY BE PROCESSED. PRIVATE USER CONTENT IS NOT INTENDED TO BE AUTOMATICALLY USED TO TRAIN PRIYANIX AI FOUNDATION MODELS MERELY BECAUSE THE USER USES THE PRIYANIX AI SERVICE. PRIYANIX AI MAY MAINTAIN APPROPRIATE CONSENT, SECURITY, AUTHENTICATION, PERMISSION AND AI AGENT EXECUTION RECORDS TO PROVIDE ACCOUNTABILITY, PROTECT USERS, PREVENT FRAUD, INVESTIGATE ABUSE AND SATISFY APPLICABLE LEGAL REQUIREMENTS. 95. GOOGLE USER DATA — ACCESS, USE, SHARING, TRANSFER AND DISCLOSURE Priyanix AI may allow users to connect Google services, including YouTube, through Google OAuth and applicable Google APIs. Priyanix AI accesses Google user data only after the user grants the requested permissions and only to provide the features expressly requested or authorized by the user. Depending on the Google or YouTube features enabled by the user, the data accessed may include basic Google account information and Google/YouTube account, channel, content, or related API data permitted by the scopes authorized by the user. Priyanix AI uses Google user data only to provide and operate the user-requested features, maintain the connected service, perform authorized actions, provide support, maintain security, prevent abuse, and comply with applicable legal obligations. SHARING, TRANSFER AND DISCLOSURE OF GOOGLE USER DATA Priyanix AI does not sell Google user data. Priyanix AI does not share Google user data with third parties for advertising purposes. Google user data may be disclosed or transferred only in the following limited circumstances: 1. To service providers or infrastructure providers acting on behalf of Priyanix AI where access is reasonably necessary to operate, secure, host, maintain, or support the requested Priyanix AI service. Such providers are permitted to process the information only for the applicable service purpose and subject to appropriate confidentiality, security, and data-protection obligations. 2. To Google, YouTube, or their APIs and systems where communication with those services is necessary to perform an action expressly requested or authorized by the user. 3. When disclosure is required by applicable law, regulation, legal process, or a valid governmental request. 4. When reasonably necessary to protect the security, rights, property, or safety of Priyanix AI, its users, or the public, including detecting or preventing fraud, abuse, or security incidents. Priyanix AI does not permit its employees, contractors, or service providers to access Google user data except where access is necessary for an authorized operational, security, support, or legal purpose. Priyanix AI's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements. USER CONTROL AND REVOCATION Users may disconnect Google or YouTube from Priyanix AI and may revoke Priyanix AI's access to their Google Account through Google's account permissions/security settings. After disconnection or revocation, Priyanix AI will no longer obtain new Google user data through the revoked authorization, except where otherwise permitted or required by law. RETENTION AND DELETION Priyanix AI retains Google user data only for as long as reasonably necessary to provide the user-requested service, maintain security and integrity, comply with applicable legal obligations, or resolve disputes. Users may request deletion of applicable personal data through Priyanix AI's available account, privacy, data-deletion, or contact mechanisms, subject to lawful retention requirements. END OF PRIVACY POLICY This Privacy Policy should be read together with the Priyanix AI Terms and Conditions, Acceptable Use Policy, Cookie Policy, Refund and Cancellation Policy, AI Agent and Automation Policy, Subprocessor List, applicable Data Processing Agreement, and any product-specific privacy notices. Page 15 Priyanix AI - Enterprise Privacy Policy V1.0