Privacy Policy
Effective Date: 16 April 2025
Last Updated: 15 July 2026
This Privacy Policy explains how OPRITS RESEARCH PRIVATE LIMITED, operating under the brand name AshnaAI, collects, uses, discloses, stores, transfers, and protects information when you use AshnaAI websites, applications, platforms, AI agents, workflows, integrations, connectors, and related services.
By using AshnaAI, you acknowledge this Privacy Policy. Where consent is required by applicable law, AshnaAI will request consent before processing personal data for the relevant purpose.
1. Company Details
AshnaAI is operated by:
OPRITS RESEARCH PRIVATE LIMITED
CIN: U62090UP2025PTC239158
Registered address: Berger Delhi One, Noida Sector 16, Noida, Gautam Buddha Nagar – 201301, Uttar Pradesh, India
Website: https://www.ashna.ai/
For privacy questions, data-access requests, deletion requests, complaints, or data-protection requests, contact:
Privacy: privacy@ashna.ai
Support: support@ashna.ai
In this Privacy Policy, AshnaAI, we, us, and our refer to OPRITS RESEARCH PRIVATE LIMITED. You and your refer to the individual or organization using AshnaAI.
2. About AshnaAI
AshnaAI is a no-code agentic AI platform that enables individuals and organizations to create, configure, deploy, and manage AI agents and workflows.
AshnaAI may coordinate AI models, tools, applications, files, connectors, third-party services, sub-agents, business systems, and execution environments.
Depending on the features used, AshnaAI may assist with workflows involving education, university and college applications, finance, operations, hiring, productivity, communication, document management, scheduling, business applications, and other authorized activities.
AshnaAI is an orchestration platform rather than a single AI model. Different models, infrastructure providers, tools, and integrations may be used to complete a task requested by you.
3. Scope
This Privacy Policy applies to information collected through https://www.ashna.ai/, AshnaAI applications and platforms, AshnaAI AI agents and workflows, connected Google, Meta, Microsoft, and other services, account registration and authentication, customer-support interactions, forms, surveys, and communications, subscriptions and payment processes, and other services that link to this Privacy Policy.
This Privacy Policy does not replace a separate written agreement, enterprise agreement, Data Processing Addendum, or other contract that expressly governs data processing for a particular customer.
If AshnaAI processes information solely on behalf of an organization, that organization may determine the purposes and means of processing. In that situation, the organization may act as the controller, business, data fiduciary, or equivalent entity, and AshnaAI may act as a processor, service provider, data processor, or equivalent entity.
4. Information We Collect
4.1 Information You Provide
We may collect information that you provide directly, including name, email address, phone number, account credentials, organization or company information, profile information, billing and subscription information, support requests, communications with AshnaAI, prompts, questions, and instructions, uploaded files and documents, images, audio, video, and spreadsheets, workflow configurations, agent instructions, connector settings, AI-generated Outputs and task results, feedback and survey responses, and information you choose to provide through integrations.
Payment-card information may be collected and processed by a third-party payment provider. AshnaAI generally does not store complete payment-card numbers.
4.2 Information Collected Automatically
When you use AshnaAI, we may collect IP address, browser and device type, operating system, device identifiers, language and time-zone settings, referring and exit pages, pages and features used, dates and times of access, authentication and security logs, crash and diagnostic information, approximate location derived from IP address, cookies and similar technologies, and usage, performance, and interaction information.
4.3 Information from Connected Services
If you connect a third-party service, we may receive information according to the permissions you approve, the actions you request, the configuration selected by you or your organization, and the third party’s terms and policies.
Connected services may include Google Workspace, Meta services, Microsoft services, communication services, cloud-storage services, productivity tools, enterprise applications, payment services, and other services enabled by you or your organization.
We request and access only the information made available through the relevant authorization process and supported feature.
4.4 Information from Organizations
If you use AshnaAI through an organization, school, university, employer, or other institution, that organization may create or manage your Account, provide information about you, configure your access, control connected services, access information in its environment, and request deletion or export of organizational data.
Questions about an organization-managed Account should generally be directed to that organization.
5. How We Use Information
We may use information to create and manage Accounts; authenticate users; provide and operate AshnaAI; process prompts, files, instructions, and workflows; operate AI agents and sub-agents; generate and return Outputs; connect to authorized Third-Party Services; perform actions requested or approved by you; provide customer support; process subscriptions and payments; monitor usage and enforce service limits; maintain security; detect and prevent fraud, abuse, and unauthorized activity; investigate security incidents; troubleshoot and improve reliability; analyze product performance; develop and improve user-facing features; communicate with you; comply with legal obligations; enforce agreements and policies; and protect the rights, property, and safety of AshnaAI, users, and others.
We will not use personal data for purposes incompatible with this Privacy Policy unless permitted by applicable law or after obtaining required consent.
6. Legal Bases for Processing
Where required by applicable law, AshnaAI relies on one or more of the following legal bases: Contract, to provide the Services you request and manage your Account; Consent, where you have provided consent for a specified purpose; Legitimate interests, to secure, maintain, improve, and administer the Services, provided those interests do not override your rights; Legal obligation, to comply with law, court orders, regulatory requirements, tax obligations, and lawful government requests; and Vital interests, where necessary to protect someone’s life or physical safety and legally recognized.
Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing that occurred before withdrawal or processing permitted on another legal basis.
7. AI Processing and Model Providers
AshnaAI may process prompts, instructions, files, task data, and other User Content through AI models and technology services necessary to provide a requested feature.
Our AI and technology providers may include Microsoft Foundry, Amazon Web Services AI services, Google Vertex AI, and other model or infrastructure providers disclosed by AshnaAI.
OpenAI, Anthropic, Google AI, or another provider should be added to this list only if that provider actually receives or processes AshnaAI or customer data.
Providers may process information only as necessary to provide the requested feature, generate an Output, execute a workflow, maintain security, provide support, troubleshoot the Services, or comply with applicable law.
AshnaAI applies contractual, technical, and organizational controls appropriate to the relevant processing.
AshnaAI does not sell personal data to AI providers.
AshnaAI does not authorize providers to use Google user data for advertising, independent commercial purposes, or generalized model training where prohibited by applicable Google policies or contractual commitments.
AshnaAI does not use Google user data to train generalized or shared AI models.
8. AI Outputs and Human Review
AshnaAI may use automated systems, AI models, agents, and sub-agents to process information and generate Outputs.
Outputs may be inaccurate, incomplete, outdated, biased, misleading, or unsuitable for a particular purpose. Outputs may also be similar to Outputs generated for other users.
You are responsible for reviewing and validating Outputs before sending or publishing them, submitting them to another person or institution, relying on them, making a business decision, or taking an action affecting another person.
AshnaAI does not make decisions about your legal rights, employment, education, healthcare, credit, insurance, housing, immigration, or access to public benefits unless expressly agreed in a separate written arrangement.
You should not rely solely on an AI Output for a decision that may materially affect a person’s rights, health, finances, employment, education, safety, or legal position.
Where required by law, the relevant user or organization is responsible for human review, oversight, explanation, appeal, correction, and other safeguards.
9. Google Workspace and OAuth Data
AshnaAI provides optional integrations with Google Drive, Gmail, Google Calendar, Google Forms, and Google Sheets.
When you connect a Google Account, AshnaAI uses the permissions approved by you to perform tasks requested or approved by you.
9.1 How Google Connections Work
When you connect Google:
- Google displays the permissions requested by AshnaAI.
- You review and approve or reject those permissions.
- Google provides AshnaAI with authorization credentials.
- AshnaAI uses Google APIs within the approved permissions.
- AshnaAI performs the requested task and returns the result.
AshnaAI does not request or store your Google password.
9.2 Google Data We May Access
Depending on the feature and permissions you approve, AshnaAI may access basic Google Account information, including name, email address, profile identifier, and profile image; Google Drive files, folders, and metadata; Google Calendar events and related details; Google Forms content and configuration; Google Sheets, including metadata, tabs, cell values, formulas, and related content; Gmail data required for an authorized Gmail feature; Gmail labels where the relevant permission is approved; the current Gmail message where an authorized Gmail feature requires it; and information required to send an email requested or approved by you.
AshnaAI requests only the Google data and permissions required for the selected feature. The exact permissions are displayed on Google’s authorization screen.
9.3 How We Use Google Data
AshnaAI uses Google data only to understand and execute tasks requested by you; create, read, summarize, organize, update, or delete authorized Google content; create, update, reschedule, or cancel Calendar events; create or modify Google Forms; create or modify Google Sheets; prepare and send emails you request or approve; interact with the current Gmail message where the authorized feature requires it; provide task results and confirmations; maintain, secure, troubleshoot, and improve the reliability of the integration; prevent abuse, fraud, and unauthorized activity; and comply with legal obligations.
AshnaAI does not sell Google user data, use Google user data for advertising or personalized advertising, use Google user data to train generalized or shared AI models, or use Google user data for unrelated independent commercial purposes.
Google data may be processed by an AI model only when necessary to provide the specific AshnaAI feature requested or authorized by you, subject to applicable Google policies and contractual restrictions.
9.4 Google User Confirmation
AshnaAI may prepare a draft or proposed action before execution.
For consequential actions, including sending an email, deleting or moving a Drive file, cancelling a Calendar event, deleting a Form, or changing important spreadsheet content, AshnaAI may request confirmation before completing the action.
You are responsible for reviewing AI-generated content, recipients, files, events, permissions, and other actions before approving them.
9.5 OAuth Tokens
OAuth tokens are retained only while the relevant Google connection remains active and are used to provide the authorized integration.
When you disconnect the service, revoke AshnaAI’s authorization, remove AshnaAI from your Google Account permissions, or delete your AshnaAI Account, AshnaAI will terminate access to the connected Google Workspace environment and invalidate or remove the associated authorization credentials in accordance with its procedures.
9.6 Google Data Retention
API request data and temporary Google Workspace cache data are retained for no longer than 48 hours, unless a longer period is required for security, fraud prevention, abuse prevention, dispute resolution, legal compliance, or protection of AshnaAI’s rights and systems.
Task history, Account information, user-created content, and workflow configurations may be retained separately under the applicable Account, Plan, Organization agreement, or deletion procedure.
After disconnection, AshnaAI stops obtaining new Google data. Previously stored Google data is deleted according to the applicable retention and deletion procedures.
9.7 Disconnecting Google
You may disconnect Google through AshnaAI account settings or by removing AshnaAI from your Google Account permissions page:
https://myaccount.google.com/permissions
9.8 Google Limited Use
AshnaAI’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.
AshnaAI will not use or transfer Google user data for purposes unrelated to providing or improving user-facing features authorized by you, except as permitted by the Google API Services User Data Policy or with your express consent.
10. Meta Services and Connected Accounts
AshnaAI may provide optional integrations with Facebook, Instagram, WhatsApp, Messenger, Meta Business tools, and other Meta products made available through AshnaAI.
10.1 Meta Data We May Access
Depending on the feature and permissions approved by you, AshnaAI may access Meta Account or profile information; Facebook Page or business-account information; Instagram professional-account information; messages, comments, or conversations required for an authorized feature; posts, media, captions, and related metadata; advertising or business information where specifically authorized; WhatsApp Business information where specifically authorized; and technical information required to maintain the connection.
AshnaAI accesses only information permitted by Meta and approved by you.
10.2 How We Use Meta Data
AshnaAI may use Meta data to create, schedule, publish, or manage content at your direction, respond to messages or comments when you authorize that feature, summarize or analyze authorized content, manage business workflows, assist with customer-support workflows, retrieve information required for authorized automation, and maintain, secure, troubleshoot, and improve the integration.
AshnaAI does not sell Meta data, use Meta data for unrelated advertising, use Meta data for unrelated independent commercial purposes, or use Meta data to train generalized or shared AI models.
10.3 Meta Data Retention
Meta API request data and temporary cache data are retained only as long as necessary to provide the requested feature.
Unless a longer period is required for security, fraud prevention, dispute resolution, or legal compliance, temporary Meta integration data is retained for no longer than 48 hours.
User-created task history or content may be retained separately according to the applicable Account, Plan, Organization agreement, or deletion procedure.
10.4 Disconnecting Meta
You may disconnect Meta through AshnaAI account settings or the relevant Meta account settings.
After disconnection, AshnaAI stops obtaining new Meta data, AshnaAI terminates access to the connected Meta Account, authorization credentials are invalidated or removed according to our procedures, and temporary cached Meta data is deleted according to the applicable retention period.
11. Other Third-Party Services
AshnaAI may connect with Microsoft services and Microsoft Foundry, cloud-storage services, communication tools, calendar and scheduling tools, productivity applications, enterprise-resource-planning systems, customer-relationship-management systems, education platforms, payment providers, analytics services, security and monitoring providers, and other applications selected by you or your Organization.
Information shared with each service depends on the feature you use, the permissions you approve, the instructions you provide, the configuration selected by you or your Organization, and the third party’s policies.
Third-party services operate under their own terms and privacy policies. AshnaAI is not responsible for the independent privacy practices, security, availability, or data handling of third parties.
12. Hosting, Storage, and Infrastructure Providers
AshnaAI uses infrastructure and storage services provided by Amazon Web Services, Vercel, and Google Cloud Platform.
These providers may process or store Account information, task data, prompts and Outputs, API request data, temporary workspace cache data, OAuth credentials, logs, security information, files, workflow data, and other information necessary to operate, secure, maintain, and deliver AshnaAI.
Access is limited to what is reasonably necessary for hosting, storage, authentication, security, monitoring, troubleshooting, backup and recovery, and service delivery.
These providers may not use AshnaAI data for advertising or unrelated purposes on AshnaAI’s behalf.
13. Cookies and Similar Technologies
AshnaAI may use cookies, local storage, pixels, software development kits, and similar technologies to keep users signed in, maintain session security, remember preferences, understand product usage, measure performance, detect abuse, improve user experience, and provide analytics.
You may control cookies through browser or device settings. Disabling certain technologies may affect the functionality of AshnaAI.
Where required by law, AshnaAI will request consent before using non-essential cookies or similar technologies.
14. Analytics and Communications
We may use analytics, monitoring, customer-support, and communication tools to understand service performance, diagnose technical problems, improve reliability, respond to support requests, communicate with users, and measure product engagement.
These tools may process device information, usage information, Account identifiers, support conversations, error logs, and communication preferences.
We may send service messages, security alerts, Account notifications, billing information, support responses, product updates, and marketing communications where permitted by law.
You may unsubscribe from marketing communications using the unsubscribe option in the relevant message. You may continue to receive essential service, Account, legal, and security communications.
15. Payments and Subscriptions
If you purchase a paid Service, payment information may be processed by a third-party payment provider.
We may receive payment status, transaction identifier, billing name, billing address, Subscription Plan, invoice information, and limited payment details.
AshnaAI does not intentionally store complete payment-card numbers unless expressly stated at the point of collection.
Payment providers process information according to their own terms and privacy policies.
16. How We Share Information
We may share information with providers that host, store, secure, monitor, or support AshnaAI; with AI and model providers necessary for a requested feature; with Third-Party Services authorized by you; with payment processors; with professional advisers; with auditors and insurers; with authorities where legally required; to investigate fraud, abuse, or security incidents; to enforce contracts and policies; to protect rights, property, and safety; and in connection with a merger, acquisition, financing, restructuring, or sale of assets.
We do not sell personal data.
We do not share Google user data or Meta data with third parties for advertising, cross-context behavioral advertising, or unrelated independent commercial purposes.
We may disclose information where necessary to comply with a valid legal process, protect a person from serious harm, investigate security incidents, or protect AshnaAI’s legal rights.
17. International Data Transfers
AshnaAI and its service providers may process information in India and other countries where AshnaAI or its providers operate.
Where information is transferred across borders, AshnaAI will apply safeguards required by applicable law, which may include contractual protections, approved transfer mechanisms, access controls, encryption, technical safeguards, and organizational measures.
By using AshnaAI, you acknowledge that information may be processed outside your country of residence, subject to applicable legal protections.
18. Data Security
AshnaAI uses reasonable technical, administrative, and organizational safeguards designed to protect information from unauthorized access, use, alteration, disclosure, or destruction.
Safeguards may include encrypted connections, access controls, authentication controls, logging and monitoring, least-privilege access, token protection, provider security controls, incident-response processes, and backup and recovery procedures.
No internet-based service can guarantee absolute security.
You are responsible for protecting your Account credentials and notifying AshnaAI promptly of suspected unauthorized access.
19. Security Incidents
If AshnaAI determines that a security incident affects information processed through the Services, AshnaAI will take reasonable steps to investigate the incident, contain and remediate the incident, preserve relevant evidence, notify affected customers or individuals where required by law, and cooperate with legally required investigations or notifications.
Where AshnaAI processes personal data on behalf of an Organization, incident-notification obligations may be governed by the applicable contract or DPA.
20. Data Retention
We retain information only for as long as reasonably necessary for providing the Services, maintaining Accounts, completing requested workflows, preserving task history, security and fraud prevention, resolving disputes, enforcing agreements, complying with legal obligations, and protecting our rights and systems.
Specific retention periods include: API request data and temporary Google Workspace cache data, retained no longer than 48 hours, except where a longer period is required for security, fraud prevention, dispute resolution, or legal compliance; temporary Meta integration data, generally retained no longer than 48 hours, subject to the same exceptions; OAuth tokens, retained while the relevant connection remains active, subject to invalidation or removal after disconnection, revocation, or Account deletion; Account and subscription information, retained while the Account is active and for a reasonable period afterward where required for legal, accounting, security, or dispute-resolution purposes; task history and user-created content, retained according to Account settings, product configuration, Organization instructions, customer agreements, and deletion requests; and security and audit logs, retained for the period reasonably necessary for security, fraud prevention, legal compliance, and incident investigation.
When information is no longer required, AshnaAI may delete, anonymize, or securely isolate it.
21. Account and Data Deletion
You may request deletion of your AshnaAI Account and personal data by contacting:
A deletion request may require verification of your identity and Account ownership.
When an Account is deleted, AshnaAI will take reasonable steps to disable Account access, terminate connected-service access, invalidate or remove OAuth credentials, delete or anonymize personal data that is no longer required, and retain only information required for legal, security, fraud-prevention, dispute-resolution, or legitimate business purposes.
For Google connections, you may also revoke AshnaAI through:
https://myaccount.google.com/permissions
For Meta connections, you may disconnect AshnaAI through your Meta Account settings.
Deletion of information from Third-Party Services may need to be completed directly through those services. AshnaAI cannot delete information that remains under the independent control of a third party.
22. Privacy Rights
Depending on your location and applicable law, you may have rights to access personal data, correct inaccurate personal data, request deletion, request restriction of processing, object to processing, withdraw consent, request data portability, opt out of marketing communications, request information about data sharing, revoke third-party permissions, and lodge a complaint with a relevant regulator.
To exercise a right, contact privacy@ashna.ai.
We may need to verify your identity before completing a request.
We may refuse or limit a request where permitted by law, including where responding would adversely affect the rights of another person, compromise security, interfere with fraud prevention, conflict with a legal obligation, affect legal claims, or require disproportionate effort where an exemption applies.
Where permitted by law, you may appeal a decision regarding your privacy request by contacting privacy@ashna.ai.
23. India Privacy Framework
AshnaAI is operated by an Indian company and aims to comply with applicable Indian privacy and information-technology laws, including, where applicable, the Digital Personal Data Protection Act, 2023, rules and regulations made under that Act, the Information Technology Act, 2000, applicable reasonable-security requirements, consumer-protection laws, contractual requirements, sector-specific requirements, and other applicable Indian laws.
Where AshnaAI processes personal data on behalf of an Organization, the Organization may determine the purposes and means of processing, and AshnaAI may process the data on the Organization’s documented instructions.
Indian users may contact privacy@ashna.ai regarding access, correction, deletion, consent withdrawal, or other applicable rights.
24. European Economic Area, United Kingdom, and Switzerland
Where the GDPR, UK GDPR, or equivalent data-protection law applies, AshnaAI may process personal data on the following bases: performance of a contract, compliance with a legal obligation, legitimate interests where those interests are not overridden by your rights, consent, and protection of vital interests where legally recognized.
Where applicable, you may request access, correction, deletion, restriction, portability, objection to processing, and withdrawal of consent.
You may lodge a complaint with your local data-protection authority.
Where required by applicable law, AshnaAI will provide additional information concerning the controller or processor role, international transfers, subprocessors, retention, automated decision-making, lawful bases, and applicable data-subject rights.
AshnaAI does not claim that every GDPR, UK GDPR, or EU AI Act provision applies to every user. Applicability depends on the user, service, location, deployment, and nature of processing.
25. California and Other United States Privacy Rights
If applicable United States state privacy laws apply to you, you may have rights to know or access categories and specific pieces of personal information, request deletion, request correction, obtain information about disclosures, opt out of sale or sharing, opt out of targeted advertising, limit certain uses of sensitive personal information, and appeal a privacy-rights decision where required by law.
AshnaAI does not sell personal information.
AshnaAI does not share Google user data or Meta data for cross-context behavioral advertising.
You may submit a privacy request by contacting privacy@ashna.ai. We will not discriminate against you for exercising rights available under applicable law.
We do not knowingly collect or sell personal information from children in violation of applicable law.
26. Children’s Privacy
AshnaAI is not intended for children under 13 unless a specific product expressly states otherwise and legally required consent and safeguards have been implemented.
Where applicable law requires a higher minimum age, that higher age applies.
If you believe that a child has provided personal data to AshnaAI without appropriate authorization, contact privacy@ashna.ai. We will take reasonable steps to investigate and delete the information where required by law.
27. User Responsibilities
You are responsible for providing accurate information, securing your Account, reviewing AI-generated Outputs, verifying recipients, files, events, and actions, ensuring that you have authority to connect Third-Party Services, ensuring that uploaded content may lawfully be processed, complying with applicable law, obtaining necessary permissions from your Organization or other individuals, and disconnecting integrations that you no longer wish to use.
AshnaAI Outputs may contain errors. Review important Outputs before relying on them or taking consequential action.
28. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
When we make changes, we may update the Last Updated date, publish the revised Privacy Policy, provide notice through AshnaAI, send an email notice where appropriate, or take additional steps required by applicable law.
Your continued use of AshnaAI after an update means that the revised Privacy Policy applies to your use of the Services, subject to any consent requirements.
29. Governing Law and Jurisdiction
This Privacy Policy is governed by the laws of India, without regard to conflict-of-law principles.
Subject to mandatory rights and remedies available under applicable law, courts located in Gautam Buddha Nagar, Uttar Pradesh, India, will have jurisdiction over disputes arising out of or relating to this Privacy Policy or the processing of personal data by AshnaAI.
Nothing in this section limits mandatory consumer, privacy, or data-protection rights that cannot lawfully be waived or restricted.
30. Contact Us
For questions, complaints, access requests, correction requests, deletion requests, or other privacy matters, contact:
OPRITS RESEARCH PRIVATE LIMITED
Berger Delhi One, Noida Sector 16, Noida, Gautam Buddha Nagar – 201301, Uttar Pradesh, India
Privacy: privacy@ashna.ai
Support: support@ashna.ai
Website: https://www.ashna.ai/