Privacy Policy

Last updated: February 20, 2026

BanaoAI respects your privacy. We are fully compliant with the Information Technology Act, 2000, and the Digital Personal Data Protection Act (DPDP), India.

1. Extensive Data Logging for Security (Forensic Tracking)

To prevent the creation of deepfakes, cybercrimes, and illegal content, we proactively collect and securely store the following data even for public requests:

• Identity & Contact: Name, Email Address, and OAuth Profile details (if logged in).
• Forensic Data: IP Addresses, Device Fingerprints, Browser details, and exact Timestamps of every login and generation request.
• Content Logs: All text prompts, uploaded source images/documents, and the final generated output media URLs.

2. Crucial 14-Day Third-Party Retention Policy

We use external AI engines (such as Google Gemini) to process your generation requests. By submitting queries or media, you explicitly consent to this data being securely transferred to these third-party servers. Notice: These third-party APIs retain your input data and generated outputs for a mandatory period of up to 14 Days for caching and Trust & Safety monitoring. We cannot force early deletion from their servers.

3. Unconditional Disclosure to Law Enforcement

Your privacy rights DO NOT cover illegal activities. In the event of an investigation related to Deepfakes, cyberbullying, pornography, political misinformation, or national security, we will bypass standard privacy protections. We will immediately and unconditionally surrender your IP logs, prompt history, and forensic details to the Police, Cyber Cell, or judicial authorities without any prior notice to you.

4. Data Security & Storage

We implement industry-standard SSL encryption and secure database hashing to protect your information. However, no digital platform or internet transmission is 100% immune to breaches. You use the platform and upload your media at your own risk.

5. Your Rights (DPDP Act)

Under India's DPDP Act, you have the right to request access to your personal data or request account deletion. However, such requests will be denied if your account is currently under a Trust & Safety review or if your data is required for pending legal investigations.

6. Grievance & Data Protection Officer

In accordance with the IT Act, 2000 and the DPDP Act, if you wish to report a privacy breach, copyright violation, illegal deepfake content, or to withdraw your consent for data processing, please contact our Grievance/Data Protection Officer immediately.