Privacy policy
This notice explains what personal data PehleCheck processes, why, and the choices you have. It is written to meet India’s Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.
Last updated 16 October 2026Draft: this text has not yet been reviewed by a lawyer and may change before launch.
Data we process
- Account: email, name (optional), password hash, language, phone number if you verify one.
- Checks: what you submit, the extracted indicators (links, numbers, UPI IDs), the result, and a short redacted excerpt. Full text only if you choose to keep it, encrypted.
- Files: screenshots, PDFs and recordings, deleted when processing finishes.
- Family and business: group and workspace memberships, invitations, verification requests and what you share.
- Incident cases: the steps you track, notes, complaint numbers and, only with your consent, the amount and payment method.
- Security and operations: sign-in events, IP address, device type, audit logs.
- Payments: subscription and invoice records from Razorpay. We don’t receive card numbers or UPI PINs.
- WhatsApp: your WhatsApp number and the messages you send to the PehleCheck number.
Why we process it
- To run checks you ask for and show you the results (performance of the service you requested).
- AI analysis, usage statistics and marketing emails only with your consent, which you can withdraw in Settings at any time.
- Family alerts only if you opt in.
- To keep the service secure, prevent abuse and meet legal obligations, including keeping certain logs.
Who we share it with
Processors that help run PehleCheck, only as needed: hosting provider; threat-intelligence services for links and domains (such as Google Web Risk, URLhaus, VirusTotal); AI provider (Anthropic or OpenAI, as configured) for consented AI analysis of redacted text; speech-to-text provider (Sarvam AI or OpenAI) for voice notes; Razorpay for payments; email and SMS providers for account messages; Meta for the WhatsApp service. Some processors may handle data outside India. We don’t sell personal data. We disclose data to authorities only when the law requires it.
How long we keep it
- Checks: your chosen period (7–365 days, limited by plan), then deleted automatically.
- Uploaded files: deleted immediately after processing.
- Anonymous quick checks: a content-free record for 24 hours to prevent abuse.
- Security logs: kept for the period the law requires, then deleted.
- Billing records: kept as tax law requires, without your name after account deletion.
Your rights and choices
- See and download your data (Settings → Privacy & data → Download my data).
- Correct your profile, or ask us to correct other data.
- Delete checks or your whole account.
- Withdraw consent for AI analysis, statistics or family alerts at any time. Withdrawal doesn’t affect processing already done.
- Nominate someone to exercise your rights if you die or become incapable, by contacting us.
- Raise a grievance with our Grievance Officer (details on the Contact page). If you aren’t satisfied, you may complain to the Data Protection Board of India.
Children
PehleCheck accounts are for adults. We don’t knowingly process children’s data except where an adult submits a message that happens to involve a child in order to check it for fraud.
Security
We use encryption, access controls, two-factor authentication for staff and audit logging. If a personal data breach affects you, we’ll tell you and the Data Protection Board as the law requires.
Changes
We’ll post changes here and notify you of material ones.
Who we are and how to reach us
- Operated by
- Not published yet
- Support email
- Not published yet
- Grievance Officer
- Not published yet
- Grievance email
- Not published yet
- Security reports
- Not published yet
- Postal address
- Not published yet