Privacy policy

1. Who we are

PolicyBlip is operated by PolicyBlip by Vivek Pujari, a sole-proprietorship based in Haldwani, Uttarakhand, India. For the purposes of the DPDP Act, we are the Data Fiduciary for the personal data described below.

Questions, complaints or data-rights requests can be addressed to our grievance officer Vivek Pujari at support@learnwithvivek.com.

2. What we collect

Account data

• Email address and basic profile — collected via Google Sign-In when you create an account. We receive your email, name, and Google account ID; we do not receive your Google password.

Trade profile (self-provided)

• Company name, country of registration, employee band, annual turnover band
• Trade role (importer / exporter / both)
• Import and export countries
• HS codes you trade and a plain-English product description

Usage data

• Which policy alerts you read, save, and give feedback on (thumbs up / down). This is what personalises your feed.
• Messages you send to our AI assistant ("Ask PolicyBlip") and the responses it returns, so we can improve the assistant and debug errors.
• Standard technical data — IP address, browser / device type, pages viewed — collected automatically when you use the web or mobile apps.

We do NOT collect

• Payment card data (we don't currently charge)
• Your contacts, photos, mic, or camera
• Precise location (we only use the country you enter in your profile)

3. Why we collect it

• To run the service — matching policies to your HS codes, trade role and corridors is the core product function.
• To personalize your feed — your reads, saves and feedback train the relevance ranker so you see fewer irrelevant alerts over time.
• To provide the AI assistant — your messages and the policies in your feed are the context the assistant reasons over.
• To operate, secure and improve the product — debugging errors, preventing abuse, measuring feature usage.
• To comply with law — responding to valid legal orders, preserving records required by law.

4. Where your data lives

PolicyBlip is built on third-party cloud services. Relevant processors and sub-processors:

• Supabase(database + authentication). Hosts your profile and interaction data. Data region is Supabase's default hosting region.
• OpenAI (embeddings + LLM). We send your product description and assistant messages to OpenAI for embedding generation and answer generation. OpenAI processes this under its API terms and does not train on API data by default.
• Railway (AI assistant backend). Hosts the FastAPI service that handles your assistant conversations.
• Google (authentication). Google provides the Sign-In token exchange. We never see your Google password.
• Vercel (web hosting). Hosts the web app and handles request routing.

Some of these providers are located outside India. By using PolicyBlip you consent to the cross-border transfer of the data described above to these providers for the purposes described.

5. How long we keep it

• Account and profile data — kept while your account is active; deleted within 30 days of account deletion.
• Policy interactions (reads, saves, feedback) — kept while your account is active; deleted with your account.
• Assistant conversation history — kept for up to 90 days for debugging, then automatically purged.
• Backups and legal holds — we may retain limited data for longer where required to comply with law or resolve disputes.

6. Your rights

Under the DPDP Act you have the right to:

• Access — request a copy of the personal data we hold on you.
• Correction — correct inaccurate or incomplete data. You can edit your profile in-app at any time; for anything else email us.
• Erasure — delete your account and all associated data. See how to delete your account. We honour deletion within 30 days.
• Grievance — raise a complaint with our grievance officer Vivek Pujari at support@learnwithvivek.com. We aim to respond within 7 days.
• Consent withdrawal — you can withdraw consent for processing at any time by deleting your account. Some processing (e.g. abuse-prevention logs) may continue under legitimate interest.

7. Children

PolicyBlip is a business tool and is not intended for use by anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided data to us, please email support@learnwithvivek.com.

8. Security

Data is transferred over HTTPS and stored encrypted at rest by our cloud providers. We use Google OAuth for authentication, so we never store your password. Access to production data is limited to the engineers operating the service.

No system is perfectly secure. If you suspect your account has been compromised, email support@learnwithvivek.com immediately.

9. Changes to this policy

We may update this policy as the product evolves. Material changes will be announced in the app and the effective date at the top of this page will be updated. Continued use of PolicyBlip after the effective date constitutes acceptance of the updated policy.

10. Contact

PolicyBlip / PolicyBlip by Vivek Pujari
Haldwani, Uttarakhand, India
Email: support@learnwithvivek.com
Grievance officer: Vivek Pujari