Privacy Policy

This Privacy Policy explains what information Mogie AI ("Mogie AI", "we", "us") collects when you use the service at mogie.in, why we collect it, who we share it with, and the choices you have. It is written to comply with India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"). We've kept it truthful and specific — it describes only what the product actually does.

1. Who we are (the Data Fiduciary)

Mogie AI is an AI assistant operated by its founder, Amogh (13 · India). For the purposes of the DPDP Act, Mogie AI is the Data Fiduciary that decides how your personal data is processed. You can reach us any time at feedback@mogie.in.

2. What we collect

We deliberately collect as little as possible. Concretely:

• Account details (if you sign in): we use Google Sign-In. When you log in, Google shares your email address, name, and profile picture with us. We do not see or store your Google password.
• Limited prompt text: to run usage analytics and improve the product, the first 240 characters of each prompt you send are stored on our servers for up to 30 days, associated with your email (or an anonymous ID if you're not logged in). Your full conversations and the AI's replies are not stored on our servers.
• Usage and visit data: approximate country (derived from your network, not your precise location or raw IP address), browser user-agent, referring page, request counts, and per-model usage totals. Used for capacity planning and analytics. Retained for up to 90 days.
• Preferences: theme, voice speed, and similar settings are stored only in your browser (localStorage), never on our servers.

3. What we do NOT collect or store

• We never see or store your payment card details — those are handled entirely by Razorpay (see §6).
• We do not store your full chat transcripts or the AI's responses on our servers. Your chat history lives only in your own browser.
• We do not store images you upload for analysis, or any microphone audio, on our servers.
• We do not sell your data, run third-party advertising, or set advertising/tracking cookies.

4. How your prompts are processed

To actually produce a response, Mogie AI relies on trusted third-party infrastructure partners — the same way most online services run on cloud and specialised compute they don't own themselves. Here is exactly what gets sent where, and what we do to keep it minimal:

• What we send: only the content needed to fulfil your specific request — for a chat reply, the text of your conversation; for an image, your image prompt; for a web-grounded answer, your search query. We do not attach your name, email, or account identifiers to these requests, so the processing partners receive your content without knowing who you are.
• Who processes it: specialised AI compute, image-generation, and live web/reference lookup partners. For your privacy and to protect our own technology, we do not publish the specific vendors or models behind Mogie AI. Each partner processes your content only to return the result, under its own privacy and security commitments, and is not permitted to use your content for its own purposes.
• Sign-in & voice: Google provides Sign-In (you choose to use it). If you use Voice Mode, your microphone audio is handled by your browser's own built-in speech recognition — Mogie AI never receives or stores that audio.
• We don't train on you: we do not use your prompts or conversations to train any Mogie AI model, and we do not sell them.

In short: your content is sent only as needed to generate what you asked for, stripped of your identity, processed by partners who may not reuse it, and never used to train our systems or sold to anyone.

5. Connected Google accounts (Gmail, Drive, Docs, Sheets, Calendar)

You can connect Google services to Mogie AI on the Plugins page. Each one is a separate connection you make on purpose, and each asks for the narrowest permission that makes its feature work. Nothing here happens unless you connect it, and disconnecting stops it immediately.

• Gmail (gmail.readonly, gmail.send): reading and searching your messages so Mogie can answer questions about your mail — "what's unread", "did anyone email me about the exam". Sending happens only after you press Send on a card that shows the real recipient, subject and full message; that click is the only thing in Mogie that can send an email.
• Drive, Docs and Sheets (drive.file): creating files, documents and spreadsheets you asked Mogie to make, and reading back the ones it made so it can continue them. This is per-file access. Mogie cannot see the rest of your Drive — not your documents, not your photos, nothing it did not create itself.
• Calendar (calendar.events): reading events on your main calendar to answer "what's on tomorrow", and adding or moving events when you ask. Mogie cannot invite anyone and cannot delete an event — neither is built.

What is stored: only the connection itself. The token that keeps you connected is encrypted (AES-256-GCM) before it is written, along with the permissions you granted, when you connected, and which account it was — so the page can show you. Your emails, files, documents and events are never stored by Mogie AI. They are read when a request needs them, used to produce that one answer, and dropped.

Who else sees it: to turn your request into an answer, the relevant content goes to the same AI processing partners described in section 4, stripped of your identity and used only to return that result. It goes nowhere else. No advertiser, no data broker, nobody.

Our Limited Use commitment. Mogie AI's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Concretely, that means:

• Your Google data is used only to provide the features you can see in Mogie — answering your question, saving the file you asked for, adding the event you asked for.
• It is never used for advertising of any kind, including retargeting or personalised ads.
• It is never sold, and never transferred to anyone else except where you direct it, where the law requires it, or for a security investigation.
• It is never used to train any AI model — ours or anyone else's.
• No human reads it. Nobody at Mogie AI can see your mail, files or calendar. There is no tool to, and the tokens are encrypted with a key the application uses and people do not.

Taking it back: disconnect any service on the Plugins page and Mogie's stored token is deleted at once. You can also revoke access yourself at myaccount.google.com/permissions, which works whatever we do.

6. Cookies

If you sign in, we set a single secure session cookie (via Google/NextAuth) to keep you logged in. We do not use advertising or analytics cookies. Everything else (your theme, settings, chat history, and subscription status) is kept in your browser's localStorage, which is not a cookie and is not sent to us automatically.

7. Payments

PRO subscriptions are processed by Razorpay, a PCI-DSS-compliant payment gateway. Your card, UPI, and banking details are entered directly with Razorpay and are never seen, handled, or stored by Mogie AI. We receive only a payment/order confirmation. See our Refund & Cancellation Policy for billing terms.

8. How long we keep data

• Truncated prompt text: up to 30 days, then automatically deleted.
• Visit, usage, and analytics records: up to 90 days, then automatically deleted.
• Account email: retained while your account is active; removed on request (see §9).

9. Children's data

Mogie AI is built to be safe for students. If you are under 18, please use Mogie AI with the involvement of a parent or guardian. Under the DPDP Act, we do not knowingly carry out tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a child's data has been collected without appropriate consent, contact us and we will delete it.

10. Your rights & how to request data deletion

Under the DPDP Act you have the right to access, correct, and erase your personal data, and to withdraw consent. To exercise any of these:

• Email feedback@mogie.in from the address associated with your account, with the subject line "Data Request".
• Tell us what you want: a copy of your data, a correction, or deletion.
• We will verify your identity and action the request within 30 days.
• You can also clear your locally-stored chat history any time by clearing your browser's site data for mogie.in.

If you have a grievance about how your data is handled, you may write to us at the same address and we will respond. You also have the right to lodge a complaint with the Data Protection Board of India.

11. Security

We use reputable, industry-standard cloud infrastructure with encryption in transit (HTTPS) and store the limited server-side data described above in access-controlled storage. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.

12. Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected by the "Last updated" date above. Continued use after an update means you accept the revised policy.