Paste safe.
Share clean.

1. Description of Service

MYPD is a software platform designed to detect, categorize, and mask (including through redaction, pseudonymisation, and tokenisation) personally identifiable information ("PII") within text, documents, and datasets submitted by the user, before that content is shared with any third-party tool or system. The Service is intended to help users identify data privacy risk and apply masking as a technical safeguard; it is provided as a web-based application accessible via subscription or trial access, and, where applicable, via API. For the purposes of applicable data protection law, including India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), Privacy ON AI Labs Pvt. Ltd. acts as a Data Processor / processing intermediary in respect of the content you submit for masking, and you (the user, or the organisation on whose behalf you act) remain the Data Fiduciary responsible for the underlying personal data and the lawfulness of its collection and use. MYPD is a technical aid and does not, by itself, guarantee legal compliance with any law. See "Data Privacy & Compliance Responsibility" below.

2. Use License — Prohibited Uses

You may NOT (in addition to the restrictions above): (i) use MYPD's outputs, detection results, or API responses to train, fine-tune, or benchmark a competing product; (ii) attempt to re-identify, de-anonymise, or reverse a masked, pseudonymised, or tokenised output without independent legal authorization to hold the underlying data; or (iii) use the Service to process special category data (health records, biometric data, financial account credentials, or data belonging to children under 18) at a scale or in a manner inconsistent with your representations under "Data You Upload to MYPD" below.

You may not:

• Reverse engineer, decompile, or attempt to extract source code beyond what is publicly visible
• Use the Service for illegal, harmful, fraudulent, or malicious purposes

3. User Content — License Grant & Retention

By submitting content to the Service, you grant Privacy ON AI Labs Pvt. Ltd. a limited, non-exclusive licence to process that content solely and strictly for the purpose of returning a masked, categorised, or analysed output to you in real time.

Content you submit for processing is handled in cloud and is written to persistent storage, logged, or retained after your masked output has been returned, except where retention for a defined, limited period is strictly required to investigate suspected abuse of the Service or to comply with a legal obligation, in which case retention is limited to that specific purpose and duration. We do not use the content you submit — including any part of it, in any aggregated or de-identified form — to train, fine-tune, or evaluate any AI model, we only use it to make our services better. Non-content account and usage metadata (such as feature used, request volume, and timestamps, none of which includes the substance of what you submitted) may be used in aggregated form to improve the Service.

4. Limitation of Liability — Liability Cap

Except as set out in "Exceptions" below, our total aggregate liability to you for all claims arising out of or related to these Terms or your use of the Service — whether in contract, tort, or otherwise — shall not exceed the greater of: (a) the total fees you paid to us for the Service in the 12 months immediately preceding the event giving rise to the claim; or (b) INR 5,000.

This Section "Limitation of Liability" applies to free-tier, trial, and paid individual users. Liability terms for Enterprise customers are governed exclusively by the liability provisions in the applicable signed Enterprise agreement between the parties, which shall prevail over this Section in the event of a conflict.

5. Governing Law

These Terms and Conditions, and any dispute arising out of or in connection with them or the Service, shall be governed by and construed in accordance with the laws of India, without regard to its conflict of law provisions.

6. Dispute Resolution — Arbitration

If mediation is unsuccessful within 30 days of a party first raising the dispute in writing, the dispute shall be referred to and finally resolved by arbitration under the Arbitration and Conciliation Act, 1996 (as amended). The arbitration shall be conducted by a sole arbitrator appointed by mutual agreement of the parties, or, failing agreement within 15 days, appointed in accordance with the Act. The seat and venue of arbitration shall be Nagpur, Maharashtra, India. The language of the arbitration shall be English. The arbitral award shall be final and binding on the parties, and each party shall bear its own costs unless the arbitrator directs otherwise.

7. Advertising (Google AdSense)

MYPD may display advertisements served by third-party advertising networks, including Google AdSense, on informational and marketing pages of the Site, in order to support the cost of offering a free tier of the Service. Advertisements are never displayed within the masking tool interface itself, and no content you submit for PII detection or masking is shared with, or accessible to, any advertising network. Advertising cookies and similar tracking technologies are only set with your consent, obtained through our cookie consent banner in accordance with applicable law, including the DPDP Act. You may withdraw or manage that consent at any time through the cookie settings link in the Site footer. Advertisers are solely responsible for their own content; we do not endorse, and are not liable for, any product or service advertised.

8. Data You Upload to MYPD — Retention & Contact

Personal information and datasets you upload for masking or analysis are processed and are not retained after your output is returned, except as expressly described in "User Content" above (opt-in scan history, or a narrowly scoped abuse/legal-compliance hold). Account-level information (such as your name, email, and billing details) is retained for the duration of your subscription and deleted in accordance with the "Termination" section below. You may request access to, correction of, or deletion of your personal information at any time by contacting our designated privacy contact at info@mypd.co.in. We will acknowledge your request within 3 business days and complete verified deletion requests within 30 days, except where retention is required by law.

9. International Data Transfers

Where you are located outside India, your information may be transferred to, stored in, and processed in India, where MYPD's infrastructure is primarily hosted. Where MYPD or its sub-processors transfer personal data outside India, such transfers are made in accordance with the cross-border transfer provisions of the DPDP Act, 2023, and, where the data concerns individuals in the European Economic Area or United Kingdom, in accordance with GDPR-recognised safeguards such as Standard Contractual Clauses. By using MYPD, you consent to such transfers on this basis.

10. Children's Privacy

MYPD is not intended for, and must not be used by, children under 18 years of age. We do not knowingly collect personal information from children, and, consistent with Section 9 of the DPDP Act, 2023, we do not conduct behavioural monitoring, tracking, or targeted or behavioural advertising directed at children. If we become aware that we have collected personal information from a child without verifiable parental consent, we will promptly delete such information and, where applicable, notify the parent or lawful guardian.

11. Grievance Officer & Data Protection Officer

In accordance with Section 13 of the DPDP Act, 2023, Privacy ON AI Labs Pvt. Ltd. has appointed a Grievance Officer to address complaints and grievances from data principals regarding the processing of their personal data. The Grievance Officer can be contacted at info@privacyonai.com. We will acknowledge grievances within 3 business days and aim to resolve them within 30 days of receipt, in accordance with the timelines prescribed under the DPDP Act.

12. Force Majeure

We shall not be liable for any failure or delay in performance of the Service to the extent caused by circumstances beyond our reasonable control, including but not limited to acts of God, natural disasters, war, terrorism, riots, governmental action, internet or telecommunications failures, or failures of third-party cloud infrastructure providers. We will use reasonable efforts to resume performance as soon as reasonably practicable.

13. Assignment

You may not assign or transfer these Terms, or any rights or obligations under them, without our prior written consent. We may assign or transfer these Terms, in whole or in part, without your consent, in connection with a merger, acquisition, corporate reorganisation, or sale of substantially all of our assets, provided that the assignee agrees to be bound by these Terms.

14. Notices

Any notice required or permitted under these Terms shall be in writing and delivered by email to the address you provided at registration (for notices to you) or to info@privacyonai.com (for notices to us). Notices are deemed received 24 hours after being sent by email, provided no delivery failure notification is received by the sender.