Privacy Policy
Last updated: September 25, 2026
This Privacy Policy explains how Palzin Private Limited ("Palzin Private Limited," "AnswerixAI," "we," "us," or "our"), a private limited company incorporated in India, collects, uses, discloses, and protects personal data in connection with the AnswerixAI website, dashboard, APIs, and related services (collectively, the "Service").
This Policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the "SPDI Rules"), and the Digital Personal Data Protection Act, 2023 and the rules made under it (together, the "DPDP Act"). For personal data we collect about you, we act as a Data Fiduciary under the DPDP Act. Where we process personal data contained in Customer Data on a customer's instructions, we act as that customer's Data Processor.
1. Information We Collect
Account information. When you register, we collect your name, work email, organization name, and password (stored as a salted hash, never in plain text).
Billing information. Payment card details are collected and processed directly by our payment processor (Stripe); we do not store full card numbers on our own servers.
Brand and tracking data. Information you configure in the Service, such as brand names, domains, competitor names, prompts, and topics you choose to track, plus the AI-platform results the Service retrieves on your behalf.
Usage data. Log data such as IP address, browser type, pages visited, and actions taken in the dashboard, collected automatically to operate and secure the Service.
Communications. Messages you send to our support or sales channels, and records of your consent and marketing preferences.
AI traffic pixel data. If you install our optional tracking beacon on your own website, we process the referring AI platform, landing page, and country associated with that visit, at the level of detail described in Section 6 below.
The Service is intended for business use by individuals aged 18 or older. We do not knowingly process personal data of children (individuals under 18) as defined under the DPDP Act. If you believe a child has provided us personal data, contact us and we will delete it.
2. How We Use Information
We use personal data to:
- Provide, maintain, and improve the Service, including running scheduled and on-demand AI visibility tracking on your behalf;
- Process payments and manage your subscription;
- Send transactional communications (account, billing, security notices) and, where you have opted in, product updates;
- Provide customer support;
- Detect, investigate, and prevent fraud, abuse, and security incidents;
- Comply with legal obligations.
We do not sell personal data. Where we share data with service providers (Section 4), it is to help us operate the Service, not for those providers' independent marketing purposes.
3. Consent and Legal Grounds for Processing
Under the DPDP Act, we process your personal data either on the basis of your consent, given through a clear affirmative action such as creating an account or opting in to communications, or for legitimate uses permitted by the DPDP Act, such as where you voluntarily provide personal data for a specified purpose or where processing is required to comply with law.
Where processing is based on consent, you may withdraw it at any time, as easily as you gave it, by contacting us or using the controls in the Service. Withdrawal does not affect processing carried out before it, but we may be unable to continue providing parts of the Service that depend on that data.
Where the EU or UK General Data Protection Regulation (GDPR) applies, we rely on performance of a contract, our legitimate interests, your consent, and compliance with legal obligations as our legal bases.
6. The AI Traffic Pixel
The optional AI traffic beacon (/t.js) that customers may embed on their own websites is designed to attribute a visit to the AI platform that referred it, without collecting personal data about the visiting individual beyond standard web-request metadata (referring platform, landing page, approximate country derived from IP, and timestamp). We do not use the beacon to build cross-site advertising profiles.
7. Data Retention
We retain personal data only for as long as it is necessary for the purpose for which it was collected. When you close your account or withdraw consent, and the purpose is no longer being served, we erase your personal data and instruct our Data Processors to do the same, unless we are required to retain it longer under applicable law (for example, tax and accounting records under Indian law).
8. Data Security and Breach Notification
We implement reasonable security practices and procedures, as required by the SPDI Rules and the DPDP Act, including encryption of sensitive fields at rest (such as BYOK API keys and webhook secrets), encryption in transit (TLS), and access controls limiting internal access to data on a need-to-know basis. No method of transmission or storage is completely secure; if you believe you've found a security issue, please report it to [email protected].
In the event of a personal data breach, we will notify the Data Protection Board of India and affected individuals, and report cyber security incidents to CERT-In, in the manner and within the timelines required by applicable law.
9. Your Rights
Under the DPDP Act, you have the right to:
- Obtain a summary of the personal data we process about you, the processing activities, and the identities of the Data Fiduciaries and Data Processors with whom it has been shared;
- Have inaccurate or incomplete personal data corrected, completed, or updated;
- Have your personal data erased where it is no longer necessary, unless retention is required by law;
- Withdraw consent at any time;
- Have your grievances redressed through the Grievance Officer named in Section 12;
- Nominate another individual to exercise these rights in the event of your death or incapacity.
To exercise these rights, contact [email protected]. We may need to verify your identity before acting on a request, and will respond within the timelines prescribed under applicable law.
If you are located outside India, you may have additional rights under your local law, such as the GDPR in the EEA/UK or the California Consumer Privacy Act (CCPA). We do not sell or share personal information as defined by the CCPA.
10. International Data Transfers
Palzin Private Limited is based in India. To operate the Service, we may transfer personal data to service providers outside India, including in the United States. We do so in accordance with the DPDP Act, including any restrictions on transfers the Government of India notifies, and, where required by the laws of your country, with appropriate safeguards such as standard contractual clauses.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or an in-product notice before they take effect.
12. Grievance Officer
In accordance with the Information Technology Act, 2000, the SPDI Rules, and the DPDP Act, you can contact our Grievance Officer about any concern or complaint regarding the processing of your personal data:
Grievance Officer
Palzin Private Limited
#610, Vraj Valencia, Science City Road, Sola, Ahmedabad 380060, India
Email: [email protected]
We will acknowledge your grievance and resolve it within the timelines prescribed under applicable law. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.
13. Contact
Privacy questions or requests: [email protected]
General inquiries: [email protected]
Palzin Private Limited
#610, Vraj Valencia, Science City Road, Sola, Ahmedabad 380060, India