Privacy Policy
Effective 7 October 2026 · Quality Tech Yard
Quality Tech Yard (“we”, “us”) runs QTY LocalAI. This policy explains what personal data we collect, why, who we share it with, how long we keep it, and the rights you have under India's Digital Personal Data Protection Act, 2023 (DPDP Act), the Digital Personal Data Protection Rules, 2025 and the Information Technology Act, 2000.
1. Who we are
Quality Tech Yard is a sole proprietorship owned by Balaraj Karthik at Ground Floor, No 29, 7th Cross, Near Rajkumar Statue, Next to Nayara Petrol Bunk, Mahalakshmipuram Layout, Geleyarabalaga, Bengaluru, Karnataka 560086, India. For the data described below we act as the “Data Fiduciary”. You can reach our Grievance Officer, Balaraj Karthik, at support@qtysolutions.com.
QTY LocalAI is a service for businesses. It is not meant for children, and we do not knowingly collect data from anyone under 18. If you believe a child has given us data, write to us and we will delete it.
2. What we collect
- Account details: your name, email address and an encrypted password (we never see or store your password in readable form).
- Business details you enter: business name, category, address, phone, email, website, Google Business Profile link, brand colours and logo.
- Google data you allow: if you connect Google Business Profile, we receive your business listing, reviews and posts, and a secure access token. We use Google data only to provide the features you ask for.
- Content you create: AI-generated and edited posts, review replies, SEO audits, keyword lists, competitor lists, images and recommendations.
- Payment details: plan, status and billing dates. Card, UPI and bank details are handled by Razorpay. We never see or store them.
- Support messages: what you write to us, and our replies.
- Technical data: login times, IP address, browser type and error logs, kept for security and to meet legal log-keeping duties.
- Consent record: the time and version of the Terms and this policy you accepted.
If you are a business owner who shares your customers' or reviewers' data with us (for example review text and reviewer names from Google), you are responsible for having the right to share it. We process it only on your instructions.
3. Why we use it
- To create your account, run the service and show you your results.
- To generate AI content and recommendations for your business.
- To take payments, send receipts and manage your plan.
- To answer support requests and send service emails (sign-in, security, billing, alerts).
- To keep the platform secure, prevent misuse and fix errors.
- To meet legal duties (tax, accounting, court or government orders).
We do not sell your personal data, and we do not use it for advertising.
4. Consent and your control
We ask for your clear consent when you create an account, and again for optional connections such as Google Business Profile. You can withdraw consent at any time by disconnecting an integration in the app or by writing to us. Withdrawing consent for something essential means we can no longer provide that part of the service. Withdrawal does not affect what we did before you withdrew.
5. Who we share data with
We use trusted service providers (“processors”) who handle data only to deliver their part of our service:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database and sign-in | Account, business and content data |
| Vercel | Hosting the app | Requests and technical logs |
| OpenAI | AI text and image generation | Business details and prompts needed to write content |
| Business Profile, sign-in permissions | Listing, review and post data you authorise | |
| Razorpay | Payments and subscriptions | Name, email, plan and payment status |
| Resend | Sending emails | Name, email address and email content |
We may also disclose data when the law requires it, for example to a court, police or a government agency, or to protect our rights and the safety of users. If our business is sold or merged, data may transfer to the new owner, who must honour this policy.
6. Data outside India
Some providers above store or process data outside India. We transfer data only to the extent allowed by the DPDP Act and any restrictions the Government of India notifies, and we choose providers that apply appropriate security safeguards.
7. How long we keep data
- Account and business data: while your account is active.
- After you close your account: we delete or anonymise it within 30 days of your request, except for what the law requires us to keep.
- Billing and tax records: up to 8 years, as required by Indian tax and accounting law.
- Security and access logs: at least 1 year, as required by the DPDP Rules.
- Support messages: up to 3 years after the request is closed, then deleted.
We will tell you before we delete data if you have been inactive for a long period.
8. Your rights
Under the DPDP Act you have the right to:
- know what personal data we hold about you and how we use it, and get a copy;
- correct inaccurate or incomplete data and update it;
- ask us to erase your data (subject to legal retention);
- withdraw consent;
- get your questions and complaints answered by our Grievance Officer;
- nominate another person to exercise these rights if you die or become unable to do so.
In the app, go to Settings → Privacy & your data to download your data or request deletion. You can also email support@qtysolutions.com. We will confirm who you are before acting, and reply within 30 days.
9. Security
We protect data with encryption in transit, access controls, role-based staff access, activity logs and backups. Customer data is separated by account. No system is perfectly secure, so please use a strong password and keep it private.
10. If something goes wrong
If a personal data breach affects you, we will tell you without delay with what happened, what data was involved, what we are doing and what you can do. We will report it to the Data Protection Board of India and to CERT-In within the time limits the law sets.
11. Cookies
We use only the cookies needed to keep you signed in and the app secure. We do not use advertising or tracking cookies.
12. Complaints
Please first write to our Grievance Officer (see Grievance Officer). We will acknowledge within 48 hours and resolve within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
13. Changes to this policy
When we make a material change we will update the date above and notify you in the app or by email. Your continued use after that means you accept the updated policy, and we will ask for fresh consent where the law requires it.