1. Data Collection

We collect the following information:

• Account Information: Username, email, name, and securely hashed password
• Social Media Data: Information from GitHub, LinkedIn, Twitter, Reddit, and Medium, including usernames, profile details, repositories, readmes, LinkedIn profiles, tweets, Reddit posts, and Medium articles
• Calendar Data: Information from Google Calendar, including events, schedules, appointments, and meeting details
• Self-Assessment Data: Communication style, personality traits, writing samples, and interests
• Documents: Content from PDF files that you upload
• Images: Images you upload, their URLs, and descriptions
• Ratings: Ratings provided by other users about your content

2. Data Storage

Your data is stored in the following ways:

• User information and metadata are stored in MongoDB
• Images are stored in Cloudinary's cloud storage
• Documents and content are processed through our LLaMA server for AI personalization

3. Data Usage

The collected data is used for:

• Creating a personalized AI model that can respond in your communication style
• Enabling others to interact with your AI persona
• Incorporating your calendar availability and scheduling preferences into your AI model
• Improving the service and user experience

4. Data Security

We implement several security measures:

• Passwords are hashed using bcrypt before storage
• Authentication is managed using JSON Web Tokens (JWT)
• Secure connections with MongoDB and third-party services
• Rate limiting and error handling to prevent abuse

5. User Control

Users have control over their data:

• You can choose which social profiles to connect
• You can choose whether to connect your Google Calendar and what calendar data to share
• You decide which PDFs and images to upload
• You control what self-assessment information to provide

6. Third-Party Services

We use the following third-party services:

• Cloudinary: For image storage and management
• MongoDB: For database storage
• Google Calendar API: To fetch calendar data and event information
• External APIs: To fetch data from GitHub, LinkedIn, Twitter, Reddit, and Medium

7. Data Retention and Deletion

We have the following policies regarding the retention and deletion of your data:

• Google User Data: Data obtained from Google services (including Google Calendar) is retained only as long as necessary to provide you with our services. We only collect calendar data for the next 30 days, and users need to reconnect after that period to refresh the data. We will delete all Google user data immediately when you disconnect your Google account or when your account is terminated.
• Account Deletion: You may request deletion of your account and associated data at any time through your account settings or by contacting us at chordiasahil24@gmail.com. Upon such request, we will delete all your personal data within 30 days.
• Legal Requirements: We may retain certain data as required by law or for legitimate business purposes, such as to resolve disputes or enforce our agreements.

To request deletion of your Google user data or your entire account, please contact us at chordiasahil24@gmail.com or use the deletion options in your account settings.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data:

8.1 GDPR Rights (European Union)

If you are located in the European Union, you have the following rights under the General Data Protection Regulation (GDPR):

• Right to Access: You can request copies of your personal data.
• Right to Rectification: You can request that we correct inaccurate or complete incomplete data.
• Right to Erasure: You can request that we erase your personal data in certain circumstances.
• Right to Restrict Processing: You can request that we restrict the processing of your data in certain circumstances.
• Right to Data Portability: You can request that we transfer your data to another organization or directly to you.
• Right to Object: You can object to our processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us at chordiasahil24@gmail.com or visit our Data Privacy Settings page. We will respond to your request within 30 days.

8.2 CCPA Rights (California)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the personal information we collect, use, disclose, and sell.
• Right to Delete: You can request deletion of personal information we collect and maintain.
• Right to Opt-Out: You can opt-out of the sale of your personal information. Please note that we do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, please contact us at chordiasahil24@gmail.com, use the dedicated "Do Not Sell My Personal Information" link in the footer of our website, or visit our Data Privacy Settings page.

9. International Data Transfers

We are based in the United States, and your data may be processed and stored in the United States or other countries where our servers are located. These countries may have data protection laws that differ from those in your country.

By using our services, you consent to the transfer of your data to countries outside your country of residence, including the United States. We implement appropriate safeguards to ensure that your data is protected.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We will notify you via email and/or a prominent notice on our website before making any significant changes to this Privacy Policy.

Last Updated: June 15, 2024

1. Acceptance of Terms

By using this service, you agree to comply with these Terms & Conditions. If you do not agree, please do not use the service.

2. User Accounts

You are responsible for maintaining the confidentiality of your account information and password. You are also responsible for all activities that occur under your account.

3. User Responsibilities

Users must:

• Ensure they have the right to provide the data they submit
• Not violate any third-party terms of service when connecting social media accounts or calendar services
• Not upload illegal, harmful, or offensive content through PDFs or images
• Provide accurate information in their self-assessment

4. Rating System

Users can rate other users' AI models. We reserve the right to remove ratings that are abusive or inappropriate.

5. Authentication and Security

We use JWT (JSON Web Tokens) for authentication. Tokens expire after a set period, and users are responsible for maintaining their session security.

6. Service Limitations

We do not guarantee uninterrupted service. The AI model's responses are generated based on the data provided and may not always represent the user accurately. We may modify or discontinue features at any time.

7. Content Ownership

You retain ownership of the content you provide, but grant us a license to use, store, and process that content for the purpose of providing our services.

8. Changes to Terms

We may update these terms from time to time. Continued use of the service implies acceptance of the updated terms.