Legal

Privacy Policy

Effective Date: 1 June 2025 • Jurisdiction: Pune, Maharashtra, India • Last Reviewed: June 2025

At Aigent.Bz (a product of Social Stardom, Pune, India) we are committed to protecting your personal data and being transparent about how we handle it. This Privacy Policy explains what information we collect, why we collect it, and how we use and protect it. Please read it carefully.

This policy is aligned with the Digital Personal Data Protection Act, 2023 (DPDPA) of India and the IT (Reasonable Security Practices and Procedures and SPDI) Rules, 2011.

§ 01

Who We Are

The data controller for your personal information is:

Social Stardom

Pune, Maharashtra, India

General Enquiries: hello@aigent.bz

Data & Privacy Requests: legal@aigent.bz

Website: www.aigent.bz

Aigent.Bz is a product name / brand owned by Social Stardom. References to "we", "us", "our", or "Aigent.Bz" in this policy refer to Social Stardom collectively.

§ 02

Information We Collect

We collect only the minimum personal data necessary to deliver our service. Here is exactly what we collect and why:

2.1 — Information You Provide Directly

Data	When Collected	Purpose
Full Name	Account registration	Identity verification; personalised communications
Email Address	Account registration	Account access; transactional & service emails; support
UPI Transaction Reference / UTR	Payment notification email	Payment verification; subscription activation; refund processing; financial records
Payment Amount & Date	Payment notification email	Billing reconciliation; subscription duration tracking
Support Correspondence	When you email us	Providing technical or billing support; record-keeping

2.2 — Information Collected Automatically

When you visit our website, our hosting infrastructure may automatically log standard server access data, including:

IP address (used for security monitoring and abuse prevention).
Browser type and version; operating system.
Pages visited on our website and timestamps.
Referring URL (the page you came from).

This server log data is retained for a maximum of 90 days for security and diagnostic purposes and is not used for marketing or profiling.

2.3 — What We Do NOT Collect

We do not collect or store:

Your UPI PIN, UPI app credentials, or any banking passwords.
Credit card or debit card numbers.
Government-issued ID numbers (Aadhaar, PAN) unless you voluntarily provide them for support purposes.
Biometric data, location data, or any sensitive personal data as defined under Indian law — unless explicitly required and consented to.

§ 03

How We Use Your Information

We use the personal data we collect exclusively for the following purposes:

Service Delivery: To provision, manage, and maintain your AI agent container.
Payment Verification: To manually verify UPI transactions and activate or renew subscriptions.
Account Management: To create and manage your account, send access credentials, and process changes.
Transactional Communications: To send payment confirmations, provisioning notifications, renewal reminders, and service alerts.
Customer Support: To respond to your queries, complaints, and support requests.
Legal & Compliance: To comply with applicable laws, regulations, court orders, or lawful government requests.
Security & Fraud Prevention: To detect, investigate, and prevent abuse, fraud, or violations of our Terms.
Service Improvement: To understand how the Service is used and to improve features — using aggregated, non-identifiable data only.

We do not use your data for advertising, behavioural profiling, or any purpose not listed above.

§ 04

Legal Basis for Processing

Under India's Digital Personal Data Protection Act, 2023, we process your personal data on the following lawful grounds:

Consent: You provide consent when you register an account and submit your information to us.
Contractual Necessity: Processing your name, email, and UPI transaction details is necessary to fulfil our service agreement with you (subscription activation, support, billing).
Legal Obligation: We may be required to retain certain financial records or respond to lawful authority requests under Indian law.
Legitimate Interests: Security monitoring and fraud prevention to protect our platform and other users.

§ 05

Data Storage & Security

5.1 — Where Data is Stored

Your personal data is stored on servers operated by or on behalf of Social Stardom. We take reasonable steps to ensure that data is stored within India or in jurisdictions that provide an equivalent level of data protection.

5.2 — Security Measures

We implement industry-standard security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction, including:

TLS/HTTPS encryption for all data in transit.
Access controls limiting data access to authorised personnel only.
Regular security reviews of our infrastructure.
Password hashing and salting for account credentials.
Secure email practices for payment notification handling.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you without undue delay in the event of a data breach that is likely to affect your rights.

5.3 — Internal Access Controls

Access to personal data is restricted to Social Stardom personnel and authorised contractors who require access to fulfil their job functions. All such personnel are bound by confidentiality obligations.

§ 06

No Sale of Personal Data

We do not sell, rent, trade, or otherwise transfer your personal data to any third party for commercial gain. Your personal information is yours, and we have no interest in monetising it.

We do not share your data with marketing companies, data brokers, advertisers, or analytics platforms. The only circumstances under which we may share your data with third parties are:

Legal compulsion: Where required by law, court order, or lawful request from a competent government or regulatory authority in India.
Business protection: To enforce our Terms of Service, protect our rights, or investigate fraud or security incidents.
Service providers: Trusted contractors or hosting providers who assist us in operating the Service, under strict confidentiality agreements and only to the extent necessary.
Business transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to the same privacy protections.

§ 07

Third-Party Services & Tracking

We believe in minimal third-party exposure. Our website currently uses no third-party advertising, analytics, or tracking scripts. Specifically:

We do not use Google Analytics, Meta Pixel, or any behavioural tracking tool.
We do not use advertising networks or ad-retargeting services.
We do not use social media widgets or share buttons that track your browsing.

7.1 — Google Fonts

Our website loads fonts from Google Fonts (fonts.googleapis.com). This is the only third-party resource our website requests. When your browser loads a Google Font, your IP address may be transmitted to Google's servers as part of the standard HTTP request. This is governed by Google's Privacy Policy.

We use Google Fonts solely for typographic presentation. No persistent identifiers or cookies are set by this request on our behalf.

If you wish to prevent this, you may configure your browser or a DNS/firewall tool to block requests to fonts.googleapis.com. The website will fall back to system fonts gracefully.

§ 08

Cookies & Local Storage

Aigent.Bz uses a minimal cookie footprint:

8.1 — Session Cookies (Essential)

We use session cookies only — temporary cookies that are automatically deleted when you close your browser. These are strictly necessary to:

Maintain your login state while you navigate the portal.
Protect against cross-site request forgery (CSRF).
Remember your preferences within a single browsing session.

These cookies do not track you across websites, do not contain personally identifiable information in themselves, and are not used for marketing or analytics.

8.2 — No Persistent or Third-Party Cookies

We do not set persistent cookies (those that remain after your session ends) for tracking or profiling purposes. We do not allow third-party advertisers or analytics providers to set cookies on our website.

8.3 — Local Storage

We may use browser local storage to persist UI preferences (such as theme selection or language choice) on your device. This data is stored entirely on your device, is not transmitted to our servers, and can be cleared at any time via your browser settings.

§ 09

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law:

Active account data (name, email): Retained for the duration of your account plus 12 months after closure to handle any disputes or final correspondence.
Payment records (UPI UTR, amounts, dates): Retained for a minimum of 7 years in compliance with Indian accounting and tax laws.
Server access logs (IP, timestamps): Retained for a maximum of 90 days.
Support correspondence: Retained for 2 years after the last interaction, then deleted.

Upon account deletion at your request, we will delete or anonymise all personal data within 30 days, except for records we are legally required to retain.

§ 10

Your Rights

Under India's Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you, along with information about how it is processed.

Right to Correction

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

Right to Deletion / Erasure

You have the right to request deletion of your personal data. We will honour this request within 30 days, subject to any legal retention requirements (e.g., financial records).

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal. Withdrawal may result in termination of your account if the data is necessary to provide the Service.

Right to Grievance Redressal

If you believe your data rights have been violated, you may contact us directly, or escalate to the Data Protection Board of India once it is established under the DPDPA.

To exercise any of these rights, please contact us at legal@aigent.bz with your full name, registered email address, and a description of your request. We will respond within 30 days.

§ 11

Children's Privacy

The Aigent.Bz Service is not intended for individuals under the age of 18 years. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided personal data to us, please contact us immediately at legal@aigent.bz and we will take prompt steps to delete that information.

§ 12

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

Update the "Effective Date" at the top of this page.
Send a notification email to your registered email address.
Post a prominent notice on our website for at least 14 days.

We encourage you to review this policy periodically. Continued use of the Service after any update constitutes your acceptance of the revised Privacy Policy.

§ 13

Contact & Data Requests

For any privacy-related queries, data access requests, deletion requests, or concerns, please contact our designated privacy point of contact:

Social Stardom — Privacy & Data Team

Pune, Maharashtra, India

Email: legal@aigent.bz

Subject line: "Privacy Request — [Your Name]"

We aim to acknowledge all privacy requests within 5 business days and resolve them within 30 days. Complex requests may take longer, in which case we will notify you of the extended timeline.

For general service enquiries, please write to hello@aigent.bz.