Legal
Last updated: June 8, 2026 · Effective: June 8, 2026
Ccyfer Technologies operates the Ccyfer AI-powered marketing intelligence platform. We act as the Data Controller for personal data collected through the Platform.
Data Controller
Ccyfer Technologies
Registered Address
Navi Mumbai, Maharashtra, India
Privacy Contact
privacy@ccyfer.in
Data Protection Officer
dpo@ccyfer.in
We collect only what is necessary to provide and improve the Platform:
| Category | Data Points | Source |
|---|---|---|
| Account Data | Name, email, phone number, business name, role, profile picture | You (registration) |
| Usage Data | Pages visited, tools used, AI outputs generated, timestamps, session duration | Automatically |
| Device & Technical | IP address, browser type, OS, device type, referrer URL | Automatically |
| AI Tool Inputs | Business descriptions, product details, niche, target audience you enter into tools | You (tool use) |
| Payment Data | Billing name, address, invoice records (no card numbers — handled by payment processor) | You / Processor |
| Communications | Support tickets, feedback, bug reports, emails you send us | You |
| Client Data | Client names, websites, social handles you enter into client workspaces | You (workspace use) |
We do not collect sensitive personal data (health data, biometric data, political opinions, religious beliefs) and you should not enter such information into the Platform.
| Purpose | Legal Basis | Retention |
|---|---|---|
| Provide platform services and features | Contract performance | Duration of account |
| Process payments and invoices | Contract performance / Legal obligation | 7 years (tax records) |
| Authenticate users and prevent fraud | Legitimate interest / Contract | Duration of account + 90 days |
| Improve AI models and tool quality | Legitimate interest | 2 years (anonymised after 6 months) |
| Send service notifications and updates | Contract performance / Consent | Until unsubscribe |
| Send marketing communications | Consent (opt-in only) | Until withdrawn |
| Comply with legal obligations | Legal obligation | As required by law |
| Respond to support requests | Contract performance / Legitimate interest | 3 years |
When you use Ccyfer's AI tools, the content you input (business details, product descriptions, audience data) is processed to generate outputs. Specifically:
We use minimal, essential cookies and similar technologies:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Authentication | Firebase Auth session token — keeps you logged in | Session / 30 days |
| Preferences | Theme, language, last-used client workspace | 1 year |
| Analytics | Anonymised usage statistics to improve the Platform | 90 days |
| Security | CSRF protection tokens | Session |
We do not use advertising cookies, behavioural tracking, or third-party remarketing pixels. You can disable non-essential cookies in your browser settings without affecting core functionality.
We share data with trusted third parties only as necessary:
| Provider | Purpose | Data Shared | Location |
|---|---|---|---|
| Google Firebase / Firestore | Database, authentication, hosting | All platform data | India (Mumbai) |
| Anthropic | AI model (Claude) for tool outputs | Tool inputs only | USA (SCCs apply) |
| OpenRouter | AI model routing and fallback | Tool inputs only | USA (SCCs apply) |
| Stripe / Razorpay | Payment processing | Billing details only | India / USA |
| Google Cloud Storage | File and image storage | Uploaded files | India (Mumbai) |
We do not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Data is shared only to deliver the services you use.
Some of our AI providers (Anthropic, OpenRouter) are based in the United States. When we transfer your data outside India, we ensure appropriate safeguards are in place:
For full details, see our Data Processing Agreement.
We implement industry-standard security measures to protect your data:
In the event of a data breach affecting your personal data, we will notify you within 72 hours as required by applicable law.
Depending on your location, you have the following rights regarding your personal data:
| Right | What it means | How to exercise |
|---|---|---|
| Access | Get a copy of all personal data we hold about you | Email privacy@ccyfer.in |
| Correction | Correct inaccurate or incomplete data | Account settings or email us |
| Deletion | Request deletion of your personal data | Data deletion page or email us |
| Restriction | Restrict how we process your data while a dispute is pending | Email privacy@ccyfer.in |
| Portability | Receive your data in a structured, machine-readable format | Email privacy@ccyfer.in |
| Objection | Object to processing based on legitimate interests | Email privacy@ccyfer.in |
| Withdraw Consent | Withdraw consent for marketing or optional processing | Account settings / unsubscribe |
We will acknowledge your request within 72 hours and respond fully within 30 days. There is no charge for exercising your rights. If you are unsatisfied with our response, you may lodge a complaint with the relevant data protection authority.
We retain your personal data for as long as necessary to provide services and comply with legal obligations:
After applicable retention periods, data is securely deleted or permanently anonymised.
The Platform is not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, contact privacy@ccyfer.in immediately and we will delete it within 7 days.
We may update this Privacy Policy from time to time. When we make material changes:
Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance. If you do not agree, you must stop using the Platform and may request account deletion.