Privacy Policy

1. Introduction & Data Controller

FeelIQ ("Company", "we", "our", or "us") is committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our SaaS tools, and interact with our services.

Data Controller: FeelIQ Technologies
Contact: support@feeliq.in

2. Information We Collect

3. Legal Basis for Processing (GDPR)

Under GDPR, we process your data based on:

• Performance of Contract: To provide services you've requested
• Legal Obligation: To comply with tax (GST), accounting, and legal requirements — including generating and retaining GST invoices for 7 years
• Legitimate Interest: To improve services, fraud prevention, and platform security
• Consent: For marketing communications, optional data collection, and AI tool usage (with your explicit consent)

4. How We Use Your Information

We use the collected information for the following purposes:

• Creating and managing your account
• Processing orders and credit purchases (including GST invoice generation)
• Delivering services and tools you request
• Processing AI tool requests and generating responses via LLM providers
• Sending transactional emails (order confirmations, receipts, password resets)
• Responding to inquiries and providing customer support
• Improving platform functionality, user experience, and security
• Conducting analytics and usage research
• Preventing fraud, abuse, and illegal activities
• Complying with legal and regulatory obligations
• Sending marketing communications (only with consent)

5. AI Tool Data Processing

When you use AI-powered tools on FeelIQ, your data is processed through our two-layer architecture:

• Application Layer: Your data is first processed by our Next.js application, which handles authentication and request validation
• AI Processing Layer: Your data is then sent to our FastAPI backend, which routes requests to LLM providers
• Third-Party AI Providers: Your inputs may be sent to third-party AI service providers for processing. These providers have their own privacy policies and data handling practices
• Data Minimization: We only send the minimum necessary data to LLM providers to fulfill your request
• No Training: We do not allow LLM providers to use your data for training their models
• Session-Based: AI tool data is processed per-session and is not retained longer than necessary

6. Data Sharing & Third Parties

We do not sell or rent your personal data. We may share information with:

• Cashfree: Payment processor (encrypted, PCI-DSS compliant) — order ID, payment ID, and amount for transaction verification
• AI Service Providers: For AI tool processing (data is processed and not retained by these providers)
• Email Service Providers: For transactional emails (payment receipts, GST invoices, refund notifications)
• Analytics Providers: For platform usage analytics
• Legal Authorities: When required by law or court order
• Service Providers: Cloud hosting, security, and maintenance services

International Transfers: Your data may be transferred to and processed in countries other than your country of residence. We implement appropriate safeguards (Standard Contractual Clauses) for such transfers. LLM providers may process data in various jurisdictions.

7. Data Security

We implement comprehensive security measures including:

• End-to-end encryption for sensitive data (HTTPS/TLS)
• Regular security audits and penetration testing
• Access controls and employee confidentiality agreements
• Secure data storage with encryption at rest
• Regular backups and disaster recovery procedures
• Row Level Security (RLS) on all database tables
• RBAC (Role-Based Access Control) with 42 permission codes
• Security audit logging for all data modifications

While we strive to protect your data, no method is 100% secure. You are responsible for maintaining the confidentiality of your login credentials.

8. Your Rights (GDPR & Data Protection Laws)

You have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how your data is used
• Right to Data Portability: Export your data in a machine-readable format
• Right to Object: Opt-out of marketing communications and certain processing activities
• Right to Withdraw Consent: Revoke previously given consent at any time

To exercise these rights, contact us at support@feeliq.in with "GDPR Request" in the subject line.

9. Data Retention

We retain your data for as long as necessary to:

• Provide the services you've requested
• Comply with legal and tax (GST) obligations — invoice data retained for 7 years as required by Indian tax regulations
• Resolve disputes and enforce agreements
• AI tool data is processed per-session and is not retained longer than necessary for session management
• Moderation incident records are retained as long as needed to enforce our Acceptable Use Policy and investigate abuse; you may request erasure through a privacy request

After you delete your account, we retain certain data for compliance purposes but it is no longer actively processed unless required by law.

10. Children's Privacy

FeelIQ is not intended for individuals under 13 years old (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect information from children. If we discover that a child has provided us with personal data, we will delete such information immediately.

11. Cookies & Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience. Please refer to our Cookie Policy for detailed information.

12. Third-Party Links

Our platform may contain links to third-party websites and services. This Privacy Policy does not apply to external sites, and we are not responsible for their privacy practices. Please review their privacy policies before providing any information.

13. Data Breach Notification

In the event of a data breach, we will notify affected users and relevant authorities as quickly as possible and in accordance with applicable laws (GDPR requires notification within 72 hours where feasible).

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be effective when posted to our website with an updated "Last Updated" date. Continued use of the platform constitutes your acceptance of the updated policy.

15. Contact Us

For privacy concerns, requests, or questions:

16. Regulatory Compliance

This Privacy Policy complies with:

• GDPR (EU General Data Protection Regulation)
• CCPA (California Consumer Privacy Act)
• PDPA (India Personal Data Protection Act)
• Other applicable data protection laws