Privacy Policy

This Privacy Policy explains how UDAIX ("UDAIX", "we", "us"), the operator of Turelis at turelis.com (the "Service"), collects, uses, and protects your information. UDAIX is based in Hyderabad, India, and is the data controller for personal data processed through the Service. We collect the minimum needed to run the Service.

Who we are

• Controller: UDAIX, Hyderabad, Telangana, India.
• Privacy & Grievance Officer (India DPDP Act, 2023): reachable at [email protected].

Information we collect

• Account data: your username and email address when you sign up (or your name and email if you sign in with Google).
• Brand & content data: the niche, voice examples, drafts, graphics, and posts you create in the app.
• Social connections: when you connect a platform (e.g. LinkedIn, X), we store an access token to publish on your behalf. Tokens are encrypted at rest.
• Billing data: if you subscribe to a paid plan, our payment provider (Lemon Squeezy) processes your payment as the merchant of record. We receive a customer/subscription identifier and plan status; we never see or store your full card details.
• Usage & technical data: IP address, device/browser information, and logs needed to operate, secure, and debug the Service.

Why we use it (lawful bases)

Where the EU/UK GDPR applies, we rely on the following lawful bases:

• Performance of a contract: to provide the Service: research, generate, and publish content at your direction, and manage your subscription.
• Legitimate interests: to secure, maintain, and improve the Service and prevent abuse.
• Consent: for non-essential cookies/analytics and optional communications. You may withdraw consent at any time.
• Legal obligation: to comply with applicable law.

We do not sell or "share" your personal data (as those terms are defined under California's CCPA/CPRA). Nothing is published to your connected accounts without your action or your explicitly enabled autopilot.

Subprocessors & sharing

We share data only with vetted providers needed to run the Service, for example the social platforms you connect, our AI provider (Anthropic), our payment provider (Lemon Squeezy), our email provider (Resend), and our hosting provider. See our full Subprocessor list. Each processes data under their own terms and our data-processing agreements where applicable.

International transfers

We operate from India and use providers that may process data in the United States, the EU, and other regions. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

Data retention

We keep your data while your account is active. When you delete your account, we begin a 30-day soft-delete grace period (so you can recover it), after which we permanently purge your personal data. Connected social tokens are revoked/disconnected immediately on a deletion request. Operational logs and backups roll off within 90 days. We may retain anonymized, aggregated data that no longer identifies you.

Your rights

Depending on your location (EU/UK GDPR, India DPDP, California CCPA/CPRA, and similar laws), you may have the right to access, correct, export (portability), or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can disconnect any social account at any time from your settings. To exercise a right or request account deletion, email [email protected]; we respond within the timeframes required by applicable law. You also have the right to lodge a complaint with your local data protection authority (in India, the Data Protection Board).

Cookies

We use strictly necessary cookies to run the Service and, only with your consent, optional analytics cookies. See our Cookie Policy.

Children

The Service is not directed to children. You must be at least 16 (or the age of digital consent in your country) to use it.

Security

We use industry-standard safeguards, including encryption in transit (HTTPS) and encryption of social tokens at rest. No method is 100% secure, but we work hard to protect your information and will notify you and the relevant authorities of a breach where required by law.

Changes & contact

We may update this policy; we'll revise the date above and, for material changes, notify you. Questions or requests? Email [email protected].