At Ewbly, we take the security, privacy, and sovereignty of your business data seriously. This Privacy Policy details how we handle, process, and protect your information under the Indian Information Technology (IT) Act, 2000, the Digital Personal Data Protection (DPDP) Act, 2023, and international standards such as GDPR.
1. Information We Collect
We collect only the essential business and personal data required to provide and secure our vector search and AI agent generation services:
- Account Credentials: Full name, email address, and profile details provided during onboarding or Google Socialite registration.
- Training Documents: PDFs, text files, product manuals, sitemaps, and raw text crawled from web pages you submit to train your chatbots.
- Customer Leads: Names, emails, phone numbers, and customized form responses captured by your active deployed widgets.
- Billing Details: GST Identification Number (GSTIN), business address, and transaction tokens securely routed via Razorpay for UPI/Card orders.
2. Data Residency & Sovereignty
Indian Local Data Residency
Unlike global chatbot platforms that route data through multiple jurisdictions, Ewbly processes and stores your trained vector databases entirely in secure local Indian clouds.
This ensures ultra-low latency response times, zero compliance complications for regulated financial or education entities, and full alignment with DPDP directives.
3. How We Use and Protect Trained Data
Your uploaded PDF documentation and crawled sitemaps are parsed, chunked, and stored as high-dimensional math representations (vector embeddings).
| Data Type | Storage Method | Encryption Standard |
|---|---|---|
| Trained PDFs / URLs | Chunked Vector Embeddings (Qdrant) | AES-256 (At-Rest & In-Transit) |
| Leads & Contact Info | Secure SQL Tables | TLS 1.3 Encryption |
| Payment Invoices | Razorpay Encrypted Tokens | PCI-DSS Level 1 Compliant |
Critical Security Assurance: Ewbly strictly guarantees that your training files are private to your instance. We NEVER use your business documents to train public or shared base models.
4. Sharing & Third-Party Disclosures
Ewbly does not sell or distribute your private business data to third parties. We share data only in the following functional scenarios:
- Vector Inference: Interfacing with LLM endpoints (e.g. secure cloud LLMs) solely to draft final customer chat prompts. We use Enterprise API layers where inputs are excluded from active model training.
- Razorpay UPI Integration: Necessary billing tokens, email, and GST numbers are shared to verify manual renewals in INR.
5. Data Retention & Your Rights
Under local laws, you have full sovereignty over your business documents and personal details:
- Right to Deletion: You can delete any trained document or chatbot widget directly from your panel. This action permanently deletes corresponding vector weights from our servers instantly.
- Right to Correction: Easily re-upload or update catalog sitemaps to reflect correct pricing/hours.
- Right to Portability: Export collected visitor lead databases directly into standard CSV configurations.
6. Changes to this Policy
We may update this policy periodically to reflect operational, legal, or regulatory modifications. We will post notifications on this page and, if the changes are significant, email you active alerts.
7. Contact & Grievance Officer
If you have questions about this policy or data processing practices, please contact our designated Grievance Officer under Section 43A of the IT Act:
Grievance Office — Ewbly AI
Email: support@ewbly.com
Address: NxOne, Greater Noida, Uttar Pradesh, India
Support Hours: Mon-Fri: 9:00 AM - 6:00 PM IST