Privacy Policy

This Privacy Policy ("Policy") describes the manner in which QilaAI, Inc. ("QilaAI," "we," "our," or "us") collects, processes, stores, and protects personal information in connection with your use of our Services.

• 2.1 Account Data: Name, mobile number, OTP verification details.
• 2.2 Technical Data: Browser name/version, operating system, device type, IP address, ISP, timezone, and user agent.
• 2.3 Submitted Content: Screenshots, text, images, and videos voluntarily shared by Users for fraud detection purposes.
• 2.4 Voice Data: Audio content included in videos submitted by Users, which may include voices of Users or third parties.
• 2.5 We do not knowingly solicit biometric, financial, health, or government identification data, but such data may be incidentally present in Submitted Content.

Personal data is collected and processed for the following purposes:

• (a) to provide scam and fraud detection Services;
• (b) to improve and train AI models using anonymized and aggregated data;
• (c) to communicate with Users regarding results, alerts, updates, and notifications;
• (d) with explicit opt-in consent, to send marketing and promotional communications; and
• (e) to comply with applicable legal obligations.

• 4.1 Data is stored using third-party service providers (including Twilio, Vercel, Render, Supabase, and similar vendors), all bound by contractual confidentiality obligations.
• 4.2 Submitted Content shall, as far as practicable, be stored only in anonymized or extracted-text form.
• 4.3 Data may be retained for as long as necessary for provision of the Services. During the MVP stage, data will be stored indefinitely until deletion mechanisms are introduced.

We may disclose data:

• (a) to trusted vendors and processors providing infrastructure, hosting, and communication services;
• (b) to regulators or law enforcement authorities upon lawful request;
• (c) to third parties in anonymized, aggregated form for research, fraud intelligence, or partnership purposes; and
• (d) in connection with mergers, acquisitions, or restructuring of QilaAI.

We do not sell personal data to advertisers or unrelated third parties.

• 6.1 Users located in India are entitled to rights under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), including rights of access, correction, and withdrawal of consent.
• 6.2 The right to request deletion of personal data will be supported once such functionality is introduced.
• 6.3 Requests may be made via contactLegalNotices@qilafy.com.

We implement technical and organizational measures, including encryption and restricted access, to safeguard personal data. However, Users acknowledge that no system can guarantee absolute security.

The Services are intended only for individuals aged eighteen (18) years and older.

With explicit, separate consent, QilaAI may send Users marketing and promotional communications via WhatsApp, SMS, or email. Users may withdraw consent at any time.

We may revise this Policy periodically. Updated versions will be posted on our website with an updated effective date.