Privacy Policy

Euryale Ferox Private Limited, incorporated in Darbhanga, Bihar, India, is responsible for personal data processed through YantraOS and yantraos.com. Depending on the law that applies, we may be called a Data Fiduciary, controller, or similar term.

For privacy questions, rights requests, or grievances, contact privacy@yantraos.com.

We process personal data to respond to waitlist and contact requests; provide the feature you request; present and record confirmed actions; prevent abuse and fraud; investigate reliability or security issues; measure website usage with your consent; and meet legal obligations.

The lawful basis depends on the jurisdiction and context. We process data to provide a requested service, with consent where required, for legitimate security and service-operation purposes where permitted, and to comply with legal obligations. We will give an additional notice or request consent when applicable law requires it. Website analytics runs only on consent collected through the cookie banner, and withdrawing that consent — via “Cookie settings” in the footer — is as easy as giving it.

When you enable a supervised AI feature, YantraOS may send your instruction and a screenshot to a model provider so the system can reason about the visible interface and propose the next bounded action. YantraOS asks for your confirmation before an action requiring system access is taken and records the action in its audit trail.

Review what is visible before you confirm an AI-assisted request. Do not expose passwords, payment data, health information, private communications, or another person's data unless you are authorized and the task genuinely requires it. You can decline a proposed action instead of confirming it.

AI providers' handling of prompts, images, safety monitoring, model features, and processing location can depend on the service and deployment configuration. Our Subprocessors Disclosure identifies the providers involved in the described product flow.

We share data only when needed to run the Service, comply with law, protect rights and safety, or complete a transaction you request. Current service providers include Vercel for website hosting and performance measurement, Cloudflare for network delivery and bot protection, Supabase for account, form, and consent-record storage, Stripe for payment processing and usage billing, Google for consent-based website analytics (Google Analytics), Microsoft for consent-based session analytics (Clarity) and for Azure AI Foundry model processing, and Fireworks AI when a selected model route uses that service.

See our Subprocessors Disclosure for each provider's role and the data it may receive. We may also disclose data in response to lawful requests or in connection with a corporate transaction, subject to applicable law.

Your data may be processed in India and in other locations where we or our service providers operate. Processing location can depend on the configured cloud region, model deployment, and provider service. Where transfer rules require safeguards, we will use the measures and contractual arrangements required for the relevant transfer; restrictions imposed by applicable law continue to apply.

We retain personal data only for as long as reasonably necessary for the purpose described in this policy, including service delivery, security, auditability, dispute resolution, and legal compliance. Retention can differ by category and by provider configuration. Cookie-consent records are retained for as long as needed to demonstrate consent compliance under applicable law.

You can request deletion through the contact address below; we will assess the request under applicable law and explain any retention required for security, audit, fraud-prevention, or legal reasons.

We use reasonable technical and organizational measures appropriate to the Service. YantraOS's product controls include bounded action scopes, user confirmation before system-access actions, and an audit trail. No security measure or AI system is perfect, so you should use least-privilege accounts, review confirmations, protect credentials, and maintain backups.

Our Security page explains the public-facing safety model and how to report a potential vulnerability.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, objection, information about automated processing, or grievance redressal. Indian Data Principals may also have rights provided by the Digital Personal Data Protection Act, including nomination where applicable. EU and US state laws may provide additional or different rights.

Submit a request to privacy@yantraos.com with enough information for us to identify the interaction. We may verify your identity before acting and will respond within the period required by applicable law. This address is also our grievance contact.

YantraOS and yantraos.com are not intended for children under 18. Do not submit personal data if you are under 18. If you believe a child has provided personal data, contact us so we can review and take appropriate action.

We may update this policy to reflect a change to the Service, our processing, or applicable law. We will post the revised version here with a new update date and provide additional notice when required.

For privacy matters, contact privacy@yantraos.com. For general product questions, use the Contact page.