Privacy Policy

Effective Date: 19 May 2026 · Last Updated: 19 May 2026

1.Information We Collect

We collect: (a) information you provide directly — name, email, company name and website URL when you request an audit or contact us; (b) technical data — IP address, browser type and pages visited, for security and rate limiting; (c) website content you submit for scanning — processed by AI and immediately deleted after the scan is complete.

2.How We Use Your Information

• To deliver audit reports and respond to your enquiries
• To send your portal access token and billing receipts
• To prevent abuse of our free scan service (rate limiting by IP hash)
• To improve the accuracy of our dark-pattern detection system

3.PII Protection During Scans

All website content submitted for scanning is automatically scrubbed of personally identifiable information (PII) — including phone numbers, Aadhaar numbers, PAN numbers, email addresses and credit-card numbers — before any AI processing occurs. This is a technical control, not a policy promise. We are DPDP Act 2023 compliant.

4.Data Sharing

We do not sell your data to third parties. We share data only with: Anthropic (AI processing — bound by their data-processing agreement), Supabase (database hosting — Mumbai region, India) and Railway (application hosting). All processors are bound by data-processing agreements.

5.Data Retention

Scan data is retained for 12 months or until you request deletion. Contact privacy@ethosui.com to request data deletion at any time.

6.Your Rights (DPDP Act 2023)

• Right to access your personal data
• Right to correct inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to grievance redressal

Exercise any right by emailing privacy@ethosui.com. We respond within 30 days.

7.Cookies

This website uses minimal session cookies for functionality only. We do not use tracking cookies or third-party advertising cookies.

8.Contact

Privacy Officer: Gagan R — privacy@ethosui.com