Privacy Policy

1. Who this policy covers

This policy explains how Billionaires Technologies handles personal data in Friday API Platform. It is a draft pending legal review and is not yet in force for public customers.

Data fiduciary details: [PENDING: legal entity name and registered office address].

2. Data we handle

Account data: such as your name, email address and authentication details, and organization membership.

Billing data: wallet balance, promotional credit grants, top-ups and ledger entries. [PENDING: details of payment provider data handling].

API key data: key identifiers and metadata. [PENDING: confirmation of how key secrets are stored].

Request metadata: for each API request we store metadata such as token counts, cost, model, timestamps and request IDs.

Prompt and response bodies: by default we do not store the content of prompts or responses. Content you save deliberately, for example saved agent definitions, is stored so the feature can work.

3. How we use data

To provide and secure the Service, authenticate you, route requests, meter usage and bill your wallet, prevent abuse, and meet legal obligations.

4. Third-party model providers

Prompts and inputs you send are forwarded through our self-hosted gateway to the third-party model provider you select, which processes them under its own terms. The subprocessor list is [PENDING: subprocessor list].

Data location: [PENDING: no data residency commitment is made in this draft].

5. Retention

Retention periods for account data, billing records, request metadata and logs: [PENDING: retention schedule].

Deletion timelines: [PENDING].

6. Your rights under the DPDP Act, 2023

Under India's Digital Personal Data Protection Act, 2023, you have rights including: access to information about your personal data and its processing; correction and updating of inaccurate or incomplete data; erasure of data that is no longer needed or where you withdraw consent, subject to legal retention requirements; grievance redressal; and nominating another person to exercise your rights in the event of death or incapacity.

To exercise these rights, contact: [PENDING: privacy contact email]. Grievance Officer: [PENDING: name, designation and contact details]. Response timelines: [PENDING].

7. Cookies

We use a session cookie to keep you signed in. We do not describe any other cookies in this draft; if analytics or advertising cookies are added, this policy will be updated first.

8. Security

We use reasonable safeguards appropriate to the Service. Specific certifications or audit claims: none are made in this draft.

9. Children

[PENDING counsel review: treatment of minors' data under the DPDP Act.]

10. Changes to this policy

This policy is versioned. Changes will be published with a new version identifier and effective date.