Privacy Policy

Who we are

Nyaykar (“we”, “us”) is a consumer-rights AI tool that helps Indian consumers draft formal complaint letters. Nyaykar is owned and operated from India. Nyaykar is not a law firm.

What data we collect

• Account data: email address, used to sign you in (email magic-link or a one-time code) and to send your letters and reminders.
• Complaint data you provide: company name, what happened, date of incident, claim amount, desired outcome.
• Voice input (optional):if you use the “Speak” button, the audio you record is sent for transcription and is not stored — it is processed transiently and discarded immediately after the text is returned.
• Generated content: AI-drafted complaint letters.
• Payment metadata: Razorpay order ID, payment ID and status. We never see or store card numbers, UPI PINs, CVV or net-banking credentials.
• Analytics: anonymised usage events via Google Analytics 4 (only after you accept cookies). IP addresses are anonymised by GA.

How we use your data

• To generate complaint letters using the Anthropic Claude API.
• To transcribe your voice input (when you use the “Speak” button) using Sarvam AI's speech-to-text service. The audio is processed transiently and is not stored by us.
• To email letters to you on request via Resend.
• To process subscription and pay-per-use payments via Razorpay.
• To save your complaints for retrieval from your dashboard.
• To improve the product (anonymised analytics — strength scores, authority routing accuracy, conversion funnel).

We do not sell your data to third parties. We do not share your complaint text with anyone except our AI providers — Anthropic, which processes it transiently to generate your letter, and Sarvam AI, which transiently transcribes any voice input you record. Neither stores your audio after transcription.

Data retention

Complaints are retained for 2 years from the date of generation, then deleted. You may request earlier deletion at any time. Account data is retained until you delete your account.

Your rights under the DPDP Act 2023

India's Digital Personal Data Protection Act 2023 gives you the right to:

• Access the personal data we hold about you.
• Correct any inaccuracies.
• Request deletion (right to erasure).
• Withdraw consent for analytics or marketing at any time.
• File a complaint with the Data Protection Board of India.

To exercise these rights, email privacy@nyaykar.in. We respond within 30 days.

Third parties we use

• Anthropic — AI model provider (letter generation).
• Sarvam AI— speech-to-text for voice input (transcribes the audio you record when you use the “Speak” button).
• Supabase — database and authentication.
• Razorpay — payment processing.
• Resend — transactional email.
• Google Analytics 4 — anonymised usage analytics.
• Vercel / Upstash — hosting and rate-limiting.

Cookies

We use only essential cookies for authentication. Analytics cookies (GA4) load only after you click “Accept” on the cookie banner. You can clear your consent at any time from your browser's site-settings.

Security

All traffic is encrypted via HTTPS (TLS 1.3). Database access is restricted by row-level-security policies — users can only read their own rows. Service-role keys are never exposed in client code.

Children

Nyaykar is not intended for users under 18. We do not knowingly collect data from children.

Changes to this policy

We may update this policy. The “Last updated” date at the top will reflect any change. Material changes will be communicated via email to registered users.

Contact

Questions or data requests: privacy@nyaykar.in