Marg AI — Privacy Policy

  • Status: Draft for legal review — not in force.
  • Version: 0.1 (draft)
  • Effective date: [EFFECTIVE_DATE]
  • Service: Marg AI, at [MARG_DOMAIN], operated by [LEGAL_ENTITY_NAME]
  • Contact: support@legosapien.com

1. Who we are and who this covers

[LEGAL_ENTITY_NAME] ("we", "us") is the data fiduciary for Marg AI, a company with CIN [CIN], registered at [REGISTERED_ADDRESS]. This policy covers everyone who uses Marg AI, whether you are taking an assessment, reading your report or writing to us for support.

2. What we collect

We collect and store the following about you:

  • Your full name and display name
  • Your email address
  • Your mobile number
  • Your password, which we store hashed and never in plain text
  • Your self-declared date of birth
  • Your assessment answers, in your own words
  • The scores, grades and generated narrative feedback produced from those answers
  • Your report, stored both in our database and as a PDF file in object storage
  • Your payment records: the amount paid, the GST charged, and the gateway's order and payment identifiers

Your date of birth is self-declared and we do not otherwise verify it. Your card and other payment details never reach our systems; the payment gateway handles them directly.

3. Chat and other content

We collect your assessment answers, and any chat you have with Marg AI. We use this content only to score your assessment and generate your report.

4. Why we process it

We process your information to:

  • Create and run your account
  • Deliver and score your assessment
  • Generate your report
  • Take payment and issue a GST invoice
  • Answer your support requests
  • Meet our legal and tax obligations

5. Consent and your choices

We process your information on the basis of your consent. You give this consent when you sign up for Marg AI. You may withdraw it at any time by writing to support@legosapien.com. If you withdraw consent, we can no longer run your assessment or keep your account open.

6. Who processes your information

We use a small number of service providers to run Marg AI, and they process your information only to provide their service to us. We host Marg AI and store your report files on Amazon Web Services infrastructure in [HOSTING_REGION]. Payments are processed by Razorpay, which handles your card or other payment details directly; those details never reach our systems. The answers you write are sent to third-party AI providers to generate the written feedback in your report. An email delivery provider sends your account, activation and password emails.

Some of these providers may process or store your information outside India, depending on where their infrastructure is located.

LAWYER-CONFIRM: delete this paragraph if all processing is in India; keep it and name the safeguard if any processor stores or processes data outside India.

7. Children and under-18 users

Marg AI is for people aged 18 and over. You tell us your date of birth when you sign up, and an account cannot be created if it shows you are under 18. We do not otherwise verify your age; the date of birth you give us is self-declared.
If we open Marg AI to aspirers under 18, we will first obtain verifiable consent from a parent or guardian before any account is created or any payment is taken, and we will keep a record of that consent. That step is planned and is not in place today.
LAWYER-CONFIRM: the DPDPA's children's-data obligations — verifiable parental consent, the ban on tracking and targeted advertising, and the ban on processing likely to harm a child — attach only if and when Marg AI opens to under-18 aspirers, not today. Confirm that this policy needs nothing further while the 18+ signup block is in force.

8. How long we keep it

We keep your general account and assessment records for [DATA_RETENTION_PERIOD] after your account closes. Financial, GST and parental-consent records are retained for eight years in anonymised form, because tax and company law require it. Records already marked as deleted are permanently removed by a periodic purge.

9. Access, correction, export and erasure

You may ask us to access, correct, export or erase your information by writing to support@legosapien.com, and a member of our team will carry out the request for you. We aim to respond within [ERASURE_REQUEST_TURNAROUND]. Erasure does not remove the anonymised financial, GST and consent records described in section 8, which we are required to keep.

10. Security

We encrypt your information in transit, limit who on our team can access it, and store your password hashed, never in plain text. No service can promise perfect security, so we cannot guarantee that your information will never be accessed without authorisation.

11. Grievance officer

Our grievance officer is [GRIEVANCE_OFFICER_NAME], reachable at [GRIEVANCE_OFFICER_CONTACT]. support@legosapien.com is the first route for any concern about your information. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

12. Changes to this policy

We may update this policy from time to time. We will tell you about any material change before it takes effect, and the current version and its effective date are always shown at the top of this page. Continuing to use Marg AI after a change takes effect means the new version applies to you.