Privacy Policy

1. Information We Collect

Account Information: When you register, we collect your name, email address, company name, and GSTIN (optional). Passwords are hashed using bcrypt and never stored in plain text.

Product Data: Product names, descriptions, categories, SKUs, and brand information you enter into the platform.

Label Images: Product label images (JPG, PNG, PDF) you upload for compliance analysis. These are stored securely and processed by our AI extraction engine.

Usage Data: We log page views, feature usage, and compliance check activity for platform improvement and analytics. This includes IP addresses, browser type, and timestamps.

Payment Data: Payment processing is handled by Razorpay. We store Razorpay order and payment IDs but never store credit card numbers, UPI PINs, or bank credentials.

2. How We Use Your Data

• To provide compliance analysis and generate reports for your products
• To send label images to Google Gemini Vision API for text extraction
• To process payments and manage subscriptions via Razorpay
• To send transactional emails (alerts, reports, license reminders) via Brevo SMTP
• To improve our compliance rules, AI models, and platform features
• To respond to support requests and communications

3. Third-Party Services

We use the following third-party services to operate the platform:

• Google Gemini API — for AI-powered label extraction and compliance analysis
• Razorpay — for payment processing (subject to Razorpay's Privacy Policy)
• Brevo (Sendinblue) — for transactional email delivery
• Railway — for application hosting and database services

Label images sent to Google Gemini are processed for text extraction only and are not used to train Google's AI models.

4. Data Storage & Security

• All data is stored in encrypted PostgreSQL databases hosted on Railway
• All connections use HTTPS/TLS encryption
• Passwords are hashed with bcrypt (never stored in plain text)
• API keys are hashed; only the prefix is visible in the UI
• Shared reports use time-expiring tokens for access control

5. Data Retention

Your data is retained for as long as your account is active. If you delete your account:

• Account data is marked for deletion immediately
• Product data, labels, and reports are permanently deleted within 30 days
• Anonymized usage analytics may be retained for platform improvement

Labels uploaded before you create an account

If you upload a label on our homepage before signing up, we hold that file temporarily so your analysis is not lost while you create your account. Specifically:

• The file is kept for a maximum of 2 hours and is then deleted automatically, whether or not an account was created
• It is linked to your browser by a single-use token, not to your identity. We do not know who you are at this point
• Your IP address is stored only as a one-way hash, used to prevent abuse of the upload form. The address itself is not retained
• There is no way to retrieve the file over the web before it is claimed by a new account — it is not served back to anyone
• Once you create an account, the file becomes an ordinary label under that account and follows the retention rules above

6. Your Rights

You have the right to:

• Access your personal data stored on the platform
• Correct inaccurate data via the Settings page
• Export your product and compliance data
• Delete your account and all associated data
• Withdraw consent for optional data processing

7. Cookies

We use essential cookies for authentication (JWT session tokens). We do not use third-party tracking cookies or advertising pixels.

8. Children's Privacy

Regbite is a B2B platform and is not directed at individuals under 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of material changes via email. Continued use of the Service after changes constitutes acceptance.

10. Contact

For privacy-related questions or data requests, contact us at privacy@regbite.in.