Privacy Policy

Last updated: 11 October 2026

1. 1. What we collect

   • Account: name, email, a one-way hash of your password, workspace and team membership, and the date, version and IP address of your acceptance of our Terms.
   • Billing: the billing details you enter (name, company, address, phone, email, GSTIN, state or country), bills, invoices, receipts and payment status.
   • Payments: handled by PayU (India) and Stripe (international). We never receive or store your card, UPI or bank credentials — only transaction IDs, amount, method and result.
   • Provider keys: the AI provider API keys you connect, encrypted at rest (AES-256-GCM) and used only to send your requests.
   • Usage metadata: for each request — time, API key used, model and provider, token counts, cost, savings, latency, routing reason and guardrail actions. Prompt text is not stored in logs.
   • Cache (optional): if you enable response caching, replies and, for the semantic cache, a numerical embedding of the prompt are kept for a limited time.

2. 2. Why we use it

   • To provide the service: route requests, fail over, cache, apply your guardrails, and show analytics and savings.
   • To bill you: compute subscription and success-fee amounts, issue GST invoices and receipts, and keep statutory records.
   • To secure the service, prevent abuse, and provide support.
   • To send service and billing notices. We do not sell personal data or use your prompts to train models.

3. 3. Legal basis

   Your consent given at registration, performance of our contract with you, and compliance with legal obligations such as GST record-keeping.

4. 4. Who we share it with

   • AI providers you choose: your requests are sent to them under your own accounts and their privacy terms.
   • Payment gateways: PayU and Stripe receive the details needed to take your payment.
   • Your authorised partner, if you have one: if you registered through an InstaRoute partner's page or link, that partner can see your account email and name, your workspaces' names, plan and access status, monthly request, spend and savings totals, and your bills and invoices, so they can support you and manage your plan. Partners never see your prompts, responses, provider keys or request logs.
   • Infrastructure: our hosting and email providers, under confidentiality obligations.
   • Authorities: where required by law.

5. 5. Retention

   Request logs are kept for your plan's retention period (180 days on Premium) and then deleted. Cache entries expire automatically. Account data is kept while your account is active. Invoices, receipts and payment records are kept for at least 8 years to meet tax law. When you close your account we delete or anonymise the rest within 90 days.

6. 6. Security

   Traffic is encrypted with TLS; provider keys are encrypted at rest; passwords are hashed; access to production systems is restricted. No system is perfectly secure — please tell us at once if you suspect a problem.

7. 7. Your rights

   You can access and correct your data in the dashboard, and ask us to erase it (subject to legal retention), withdraw consent (which ends the service), nominate a person to exercise your rights, and raise a grievance with our Grievance Officer and, if unresolved, with the Data Protection Board of India.

8. 8. Cookies and local storage

   The dashboard keeps your session token and selected workspace in your browser's local storage. If you open a partner's page, a first-party cookie (ir_partner) remembers that partner for 30 days so your sign-up is credited to them. We do not use advertising cookies.

9. 9. International transfers

   Requests you route to AI providers outside India are transferred to them on your instruction.

10. 10. Contact

    Grievance Officer, InstaDataHelp AI Services Private Limited, D-9/132, Chitrakoot, Vaishali Nagar, Jaipur – 302021, Rajasthan, India. Email info@instadatahelp.com, helpline and WhatsApp +91 9972456379.