Privacy Policy

1. Who We Are

GabbarInfo AI (gabbarinfo.com) is operated and developed by Bella & Diva Ltd, registered in the United Kingdom. We are the Data Fiduciary under India's Digital Personal Data Protection Act 2023 (DPDP Act) and the Data Controller under the UK/EU General Data Protection Regulation (GDPR) for personal data processed through this platform.

2. Scope of This Policy

This Privacy Policy governs personal data collected and processed exclusively through the GabbarInfo AI platform at ai.gabbarinfo.com. It does not apply to gabbarinfo.com (the digital marketing services website), which operates under its own separate privacy policy.

This policy covers:

• ✦ Account registration and authentication (Google Sign-In, Facebook Login)
• ✦ Subscription and credit purchases processed by Razorpay
• ✦ AI tool usage within the platform
• ✦ Connection of Google Ads and Meta/Facebook/Instagram business assets
• ✦ AI-generated content (ad copy, blogs, social posts, images, reels)
• ✦ Technical logs, session data, and analytics

3. Data We Collect

3.1 Account & Authentication Data

When you sign up or sign in, we collect your name, email address, profile picture URL, and OAuth session tokens — used solely to create and maintain your GabbarInfo AI account.

3.2 Business Configuration Data

To personalise AI outputs, you may provide your business name, industry, target location, website URL, and product/service descriptions. This is used only to generate relevant content for your account.

3.3 Google Ads Account Data

If you connect your Google Ads account via OAuth consent, we access account identifiers and campaign metadata required to build campaign drafts. We do not access your Google billing data, Gmail, contacts, or any other Google service.

3.4 Meta / Facebook & Instagram Data

If you connect Meta business assets, we access — only through permissions you explicitly grant — Facebook Page IDs, Instagram Business Account IDs, Meta Ad Account IDs, and Business Manager identifiers via the official Meta Graph API.

We do not access personal Facebook timelines, friend lists, private messages, personal photos, or any data unrelated to business advertising functionality.

3.5 Payment Data

Payments are processed exclusively by Razorpay Software Pvt. Ltd. We do not collect, store, or handle your card number, CVV, UPI PIN, or net banking credentials. We receive only a payment confirmation token and transaction ID for billing records.

3.6 Technical & Usage Data

We automatically collect IP address, browser/device type, session duration, features accessed, and error logs — for security, troubleshooting, and platform improvement.

4. How We Use Your Data

5. Google Sign-In

GabbarInfo AI uses Google OAuth 2.0 for authentication. When you sign in with Google, we receive your name, email, and profile picture solely to create your account. We do not access Gmail, Google Drive, contacts, Calendar, or any other Google service outside the scope you explicitly authorise.

6. Meta / Facebook Login & APIs

Our registered Meta applications:

All Meta API access is based on permissions you explicitly grant. No advertising action is taken without your in-platform confirmation. You may revoke permissions at any time via Facebook App Settings.

7. Payments & Razorpay

All subscription and credit purchases are processed by Razorpay Software Pvt. Ltd. (CIN: U74999KA2013PTC097389), a licensed Payment Aggregator regulated by the Reserve Bank of India.

GabbarInfo AI does not collect, transmit, or store any card number, CVV, UPI PIN, or net banking credentials. The payment interface is hosted and secured by Razorpay under PCI-DSS compliance. All payment data is subject to Razorpay's Privacy Policy.

We retain only: transaction ID, payment status, amount, plan purchased, and timestamp — for billing records and customer support.

8. Third-Party Service Providers

We do not share one user's data or business configuration with any other user. We require all processors to implement appropriate security safeguards.

9. Data Retention

• ✦ Account data: Active until you delete your account + up to 90 days post-deletion for technical cleanup.
• ✦ AI-generated content: Retained in your dashboard for your subscription period.
• ✦ Payment records: Retained for 7 years per Indian tax / accounting law (Income Tax Act, 1961).
• ✦ OAuth tokens (Google / Meta): Retained while the connection is active. Immediately revocable.
• ✦ Technical logs: Retained for up to 90 days for security and debugging.

10. Your Rights

10.1 Under GDPR (EU / EEA Users)

• ✦ Right to access (Art. 15) — obtain a copy of your personal data.
• ✦ Right to rectification (Art. 16) — correct inaccurate data.
• ✦ Right to erasure / 'Right to be Forgotten' (Art. 17) — request deletion.
• ✦ Right to restriction (Art. 18) — restrict processing in certain circumstances.
• ✦ Right to data portability (Art. 20) — receive data in a machine-readable format.
• ✦ Right to object (Art. 21) — object to processing based on legitimate interests.
• ✦ Right to withdraw consent — at any time without penalty.
• ✦ Right to lodge a complaint with your local Data Protection Authority.

10.2 Under DPDP Act 2023 (India)

• ✦ Right to access a summary of your personal data and processing activities.
• ✦ Right to correction and erasure of inaccurate or unnecessary data.
• ✦ Right to grievance redressal through our contact channels.
• ✦ Right to withdraw consent at any time.
• ✦ Right to nominate another person to exercise these rights in case of death or incapacity.

11. Data Deletion

To delete your GabbarInfo AI account and all associated personal data, email contactus@gabbarinfo.com with the subject “Data Deletion Request” and your registered email address. We process verified requests within 7 working days where technically feasible.

Payment transaction records may be retained for up to 7 years as required by law. For Meta-linked data, you may also use Facebook's Data Deletion Tool (App IDs: 1478698813661517 and 741627915051634).

12. Cookies & Local Storage

GabbarInfo AI uses only essential cookies for: session management (keeping you logged in via NextAuth), user preference storage, and CSRF security tokens. We do not use advertising cookies, cross-site tracking, or third-party marketing cookies on this platform.

13. Data Security

We implement: HTTPS/TLS encryption for all data in transit, encrypted storage of sensitive tokens, role-based access controls, automated backup routines, and server-side security monitoring. In the event of a confirmed personal data breach, we will notify affected users and the relevant supervisory authority within the statutorily prescribed timelines.

14. International Data Transfers

Some third-party providers (AI processing, cloud infrastructure) operate outside India. Cross-border transfers are conducted in accordance with DPDP Act provisions and, where GDPR applies, through standard contractual clauses or other lawful transfer mechanisms.

15. Children's Data

GabbarInfo AI is intended for business use by adults (18+). We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has created an account, please contact us immediately and we will delete the data.

16. Changes to This Policy

We may update this Privacy Policy periodically. The “Last Updated” date at the top will reflect any changes. For material changes, we will notify you via email or a prominent platform notice. Continued use of GabbarInfo AI after the effective date constitutes acceptance of the updated policy.

17. Grievance Officer & Contact