All legal documents

Privacy Policy

Last updated: July 2026

1.Data we collect

We collect: email address, display name (provided by you), authentication provider data, analysis session data (AI interactions you choose to save), subscription and payment metadata, and anonymized usage analytics. We do not collect sensitive personal data beyond what is necessary for platform functionality.

2.How we use your data

Your data is used to: authenticate your account, provide AI statistical analysis services, track your analysis project progress across tools, process payments, and improve platform performance. We do not sell your data to third parties.

3.AI and your analysis data

AI features run only when you trigger them, and only the content that feature needs is sent. It is processed by Google Vertex AI to generate your result, and is not used to train AI models. Results you save are stored in your personal records, accessible only to you, and deletable at any time.

Read the full AI Privacy & Workflow →

4.Payment processing

Subscription payments are processed by Razorpay, our payment gateway. Your card and payment details are collected and handled directly by Razorpay under its own privacy policy and PCI-DSS security standards — StatMinds does not see or store your full card number. We retain only a record of each transaction (plan, amount, date) as required for billing, tax and accounting.

5.Data security

Data is encrypted in transit (TLS) and at rest (Google Cloud, Google-managed keys). Authentication uses Firebase Auth with industry-standard security. We implement session timeouts and cross-tab logout for account protection. Your account data and uploaded datasets are stored in the asia-south1 (Mumbai) region; see Data retention below for how long each category of data is kept.

6.Data retention

Different categories of data have different retention windows:

  • Account data (email, display name) is retained for the duration of your account.
  • Datasets you upload — together with their derived files (parquet previews, cleaning checkpoints, and analysis history) — are kept for as long as you keep using them, and are automatically and permanently deleted after 100 days of inactivity (100 days since you last opened, analysed, or edited them). Any activity resets the clock, so a study in progress is never deleted from under you. You do not need to take any action for this to happen.
  • If your subscription lapses, your datasets are retained for a 60-day grace period so you can resubscribe and pick up where you left off; after that they are permanently deleted.
  • You can delete any dataset yourself at any timefrom within the tool. Deletion is immediate and there is no undo; the raw file and all of its derived files are permanently purged — including from short-lived operational backups — within 30 days at the latest.
  • Analysis sessions (AI interactions you choose to save) are retained until you delete them.
  • Payment records are retained as required by Indian tax law.

You can delete your account at any time from Usage & Billing. Your personal data — datasets, analyses, and profile — is erased immediately (and within 30 days at the latest). Only payment records that Indian tax law requires us to keep are retained.

7.Your rights

You have the right to: access your data, request correction, request deletion, and export your data. To exercise these rights, contact privacy@statminds.in or visit our Data Rights portal.

8.Cookies and analytics

We use essential cookies for authentication and session management. The exact cookie inventory will be finalized after the Phase 0 cookie audit. We do not use third-party advertising cookies.

9.Data Fiduciary (DPDP Act 2023)

Under the Digital Personal Data Protection Act 2023 (India), the Data Fiduciary responsible for processing your personal data is:

  • Entity: Yogatraya AIResearch LLP
  • Registered address: [Address — to be updated by owner]
  • Contact: legal@statminds.in

10.Grievance Officer

As required under DPDP §10, we have appointed a Grievance Officer to address concerns about the processing of your personal data:

11.Cross-border data transfers

Data is processed on Google Cloud Platform. Your account data (Firestore) and any datasets you upload are stored in asia-south1 (Mumbai, India). AI analysis is performed by Google Vertex AI via Google's global endpoint, which may route individual requests to Google data centres outside India; Google Cloud's standard data processing agreements apply to any such cross-border processing.

13.Children's data (DPDP §9)

Under DPDP §9, we require verifiable consent for users under 18. Sign-up requires attestation that you are 18 years of age or older. If we discover an account belonging to a user under 18 without parental consent, we will delete it within 7 days of discovery and notify the registered email address.