Privacy Policy

Effective September 8, 2026

1. Our promise

Naswarai is built with the belief that your conversations, cultural identity, and personal details deserve respect. We collect only what we need to serve you well, and we never sell your data to advertisers.

2. What we collect

When you create an account:

• Your email address (for sign-in and account recovery)
• Timestamps of when your account was created and when you last used the service

When you chat with Naswarai:

• The messages you send
• Naswarai's responses
• Any personal facts you share (name, city, occupation, aspirations) — used to make Naswarai remember you across conversations
• Message counts and cost tracking (for rate limits and billing where applicable)
• Content moderation flags on messages (to ensure safety)

Automatically:

• Basic technical data (browser type, timestamp of requests) — standard web logs

We do NOT collect:

• Your location (unless you tell Naswarai your city)
• Contacts, camera, microphone, or files from your device
• Advertising identifiers or tracking cookies from third parties
• Your browsing history outside of Naswarai

3. How we use your data

• To provide the service (respond to your messages)
• To remember you across conversations (progressive profile)
• To enforce safety systems (content moderation, rate limits)
• To improve Naswarai's quality (analyzing patterns of errors, not individual conversations)
• To communicate with you about your account (sign-in emails, service updates)

4. Who we share data with

Current infrastructure providers

Naswarai currently uses these third-party services to operate:

• Anthropic (AI model provider) — your messages are sent to Anthropic's API to generate responses. Anthropic does not train on your conversations. See Anthropic Privacy Policy.
• Supabase (database and authentication) — stores your account and conversations. Data is encrypted at rest.
• Vercel (hosting) — serves the web application to your browser. Standard web logs.
• Cloudflare (DNS and DDoS protection) — routes traffic to Naswarai.
• Resend (email delivery) — sends you sign-in links and service notifications.

Future planned integrations

As Naswarai grows, we may integrate additional third-party services to expand what Naswarai can help with. We will update this Privacy Policy and notify users before activating any new vendor. Categories we are considering include:

• Voice generation and speech synthesis — e.g., ElevenLabs, OpenAI TTS, Cartesia, Play.ht, Google Cloud TTS
• Speech-to-text and transcription — e.g., Deepgram, AssemblyAI, OpenAI Whisper, Google Speech-to-Text
• Image generation — e.g., Google Imagen / Nano Banana, Midjourney, Stable Diffusion, DALL-E, Ideogram, Flux
• Video generation — e.g., Runway, Pika, Kling, Sora, Luma Dream Machine
• Music generation — e.g., Suno, Udio, ElevenLabs Music, Meta MusicGen
• Logo and design — e.g., Looka, Canva AI, Adobe Firefly
• Payment processing — e.g., Stripe, Paddle, LemonSqueezy (for future paid tiers)
• Analytics — e.g., Plausible, PostHog, Umami (privacy-respecting analytics only)
• Customer support — e.g., Crisp, Front, Intercom, HelpScout
• Additional AI providers — for specialized tasks, e.g., OpenAI, Google Gemini, Cohere, Mistral, xAI, Meta LLaMA, Perplexity

Listing a vendor here does not mean Naswarai currently uses them. It means we may consider them as the product evolves. Any actual integration will be reflected in an updated Privacy Policy with adequate notice.

We do NOT sell your data to advertisers, data brokers, or any third party for commercial purposes.

5. How long we keep data

• Active accounts: we keep your data as long as your account is active
• Deleted accounts: your data is deleted within 30 days of your deletion request
• Content moderation logs: kept for 12 months for safety review, then anonymized
• Anonymized usage stats: retained indefinitely for product improvement

6. Your rights

You have the right to:

• Access the data we hold about you
• Correct inaccurate personal information
• Delete your account and all associated data
• Export your conversation history in a portable format
• Object to specific uses of your data

To exercise any of these rights, email privacy@naswar.ai. We respond within 30 days.

7. Security

We use industry-standard security practices: HTTPS/TLS encryption in transit, encrypted storage at rest, and Row Level Security on our database to ensure users can only see their own data. No system is perfectly secure, but we take our responsibility seriously.

If we ever experience a data breach affecting your information, we will notify you within 72 hours as required by law.

8. Children's privacy

Naswarai is not intended for children under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information promptly.

9. International users

Naswarai is operated from the United States. If you are accessing the service from outside the U.S., your data may be transferred to, stored, and processed in the U.S. By using the service, you consent to this transfer.

For users in the European Economic Area (EEA), United Kingdom, or California, additional rights may apply under GDPR, UK-GDPR, or CCPA. Contact us to exercise these rights.

10. Cookies and tracking

Naswarai uses only essential cookies required to keep you signed in and remember your session. We do not use third-party advertising or analytics cookies that track you across other websites.

11. Changes to this policy

We may update this Privacy Policy as Naswarai evolves. Material changes will be communicated via email to your registered address, and by continuing to use Naswarai after such notice, you accept the updated policy.

12. Contact

Questions or requests about your privacy: privacy@naswar.ai