⚠️ This is a draft, not a finalized legal document. It's generated from the same itemized data-processing notice shown at registration, structured to align with DPDP Act/Rules disclosure requirements — but it hasn't been reviewed by a lawyer, doesn't cover every jurisdiction you might operate in, and doesn't yet have your company's actual legal entity name, address, or grievance contact filled in (see /grievance.php). Have this reviewed before treating it as your real privacy policy.

Privacy Policy

Draft — policy version 2026-08-v1

LLM Connect ("we", "us") provides real-time chat and video-meeting features. This policy explains what personal data we collect, why, and what rights you have over it under India's Digital Personal Data Protection Act, 2023 and its Rules.

What we collect and why

Account & profile data Your name, username, email, phone number (optional), date of birth, and profile photo — used to create and operate your account, verify who you are, and let other users find and recognize you.

Messages, files, and meeting data The content of messages, files you share, and meeting metadata (who joined, when, for how long) — used to provide the chat and video-meeting features you use, and stored encrypted at rest.

Device, network, and usage data IP address, browser/device type, and session activity — used for account security, fraud/abuse prevention, and keeping the service reliable. Retained a minimum of 1 year for security purposes.

Account-related emails We'll email you for email verification, password resets, and security notices about your own account. We do not send marketing email.

How your data is protected

Your name, email, phone number, bio, message content, and shared file names are encrypted at rest using authenticated encryption (XSalsa20-Poly1305). Passwords are never stored in a recoverable form — only a one-way hash. All data in transit is encrypted via HTTPS. Access to personal data is logged. This is not end-to-end encryption: our systems can decrypt this data to provide the service (e.g. displaying your name to your contacts, allowing moderation of reported content) — it protects against unauthorized access to our infrastructure or database, not against LLM Connect itself.

Your rights

Access: download a copy of your data any time from Settings → Privacy.
Correction: edit your profile directly from Settings → Account.
Erasure: request account deletion from Settings → Privacy. We'll erase your account at least 48 hours after your request, per law, and will email you when it's scheduled.
Withdraw consent: since the processing above is necessary to provide the service you signed up for, withdrawing consent for it means we can no longer provide your account — this is handled the same way as account deletion.
Grievance: contact our Grievance Officer — see /grievance.php.

Children's accounts

Users under 18 require verifiable consent from a parent or guardian before their account can send messages, join meetings, or add contacts. We do not knowingly show behavioral advertising or engage in tracking of accounts identified as belonging to a minor.

Data retention

We retain your account data for as long as your account is active. Access/security logs are retained for a minimum of 1 year. Deleted accounts are erased after the legally-required 48-hour notice period — except a minimal registration record (name, email, phone, registration IP), which is separately encrypted and retained for 180 days after deletion as required by India's IT Rules, 2021, then permanently purged. See the full Data Retention & Deletion Policy for the complete, table-by-table schedule.

Data breach notification

If a personal data breach occurs, we will notify affected users without undue delay and report to the Data Protection Board of India as required by law.