Privacy Policy

Last updated: August 2026

This Privacy Policy describes how FylorisAI Technologies (“we,” “us,” or “our”), based in Andhra Pradesh, India, collects, uses, stores, and protects your personal data when you use our self-service website and management platform for schools, hospitals, and student learning (“the Platform”), accessible at fylorisai.com and its subdomains.

We are committed to compliance with applicable data protection laws including the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and the General Data Protection Regulation (GDPR) where applicable.

1. Data We Collect

We collect the following categories of personal data:

• Identity Data: Full name, email address, phone number.
• Institutional Data: Hospital/school name, address, type, board affiliation, grade levels, and other details you provide during onboarding.
• Content Data: Text, images, branding assets, and other content you publish on your tenant website through our platform.
• Authentication Data: Login credentials (hashed passwords) and Firebase Auth tokens for OTP-based verification.
• Billing Data: Payment information processed via Razorpay (we do not store full card numbers).
• Usage Data: How you interact with the Platform (pages visited, features used) for service improvement.
• Technical Data: IP address, browser type, device info, and log data automatically collected during platform access.

2. How We Use Your Data

• Authentication & Account Management: To verify your identity, manage your account, and provide secure login.
• Service Delivery: To operate your tenant website, dashboard, and AI-powered features as contracted.
• Subscription Billing: To process payments (monthly ₹2,999 or annual ₹29,999) via Razorpay and manage your subscription.
• Communication: To send service updates, billing notifications, and respond to your enquiries at support@fylorisai.com.
• Improvement: To analyse usage patterns and improve our platform.
• Legal Compliance: To comply with Indian law and respond to lawful requests.

3. Data Storage Location

Your data is stored on cloud servers located in India. We use cloud infrastructure providers (including Google Cloud / Firebase) with data centres in India. For certain AI features, data may be processed by our third-party AI processors (see Section 4) which may involve cross-border data transfers. We ensure such transfers comply with applicable data protection laws through standard contractual clauses or equivalent safeguards.

4. Third-Party Processors

We engage the following trusted third-party service providers to deliver our platform:

• Firebase (Google LLC): Authentication services (phone OTP, session management). Data processed per Google's Cloud Data Processing Addendum.
• Razorpay: Payment processing for subscription billing. Razorpay is PCI-DSS Level 1 compliant. We do not store your full payment card details.
• Resend: Transactional email delivery (welcome emails, billing receipts, password resets).
• OpenAI: AI-powered content generation, chatbots, and tutoring features. OpenAI API processes prompts and returns AI-generated content.
• DeepSeek: Alternative AI provider for content generation and tutoring features. Data processing governed by DeepSeek's API terms.

Each processor is contractually obligated to protect your data and process it only according to our instructions. We do not sell your personal data to any third party.

5. Cookies

We use only essential session cookies for authentication. These cookies are:

• fylorisai_session — HttpOnly session cookie for maintaining your logged-in state (expires after 7 days).
• rep_token — Optional cookie for representative authentication on template pages (expires after 8 hours).

We do not use tracking cookies, advertising cookies, or third-party analytics cookies on our platform. No cookie consent banner is required for essential session cookies under Indian law.

6. Your Rights (DPDP Act 2023 & GDPR)

You have the following rights regarding your personal data:

• Right to Access: Request a summary of personal data we hold about you and how it is being processed.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Deletion: Request erasure of your personal data, subject to legal retention requirements.
• Right to Grievance Redressal: File a complaint regarding our data processing practices.

To exercise any of these rights, contact us at support@fylorisai.com. We will respond within the timeframe required by applicable law.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you the Platform services. When you close your account, we delete or anonymise your data within 90 days, except where retention is required by law (e.g., tax records, payment logs).

8. Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS/SSL) for all data communications.
• Password hashing using bcrypt (cost factor 12).
• HttpOnly, Secure, SameSite cookies for session management.
• Rate limiting on authentication endpoints.
• Database-level tenant isolation (separate databases per vertical).

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We encourage you to use strong, unique passwords and keep your credentials confidential.

9. Children's Privacy

Our student learning features are intended for use under the supervision of schools and parents. We do not knowingly collect personal data from children under 13 without parental or institutional consent. If you believe we have inadvertently collected such data, contact us immediately at support@fylorisai.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to account holders and/or a prominent notice on our platform. Continued use of the Platform after changes constitutes acceptance of the updated policy.

11. Grievance Officer

For any privacy-related queries, complaints, or to exercise your data rights, please contact our Grievance Officer: