Privacy Notice
Effective date: 18 August 2026
Who operates this service
Aarulya Saathi is operated by Aarulya DigitalWorks, a sole proprietorship of Soni Kumari.
Udyam Registration: UDYAM-BR-27-0089368
Registered business address: House No. 04, House of Arvind Kumar Mehta, Village/Town Bajrasthan, Road/Street/Lane Raghunathpur, Block Bhawanipur, District Purnia, Bihar 854204, India.
Current release scope
This release provides a publicly reachable website with private owner-controlled account access. General public signup and paid billing are not active.
Information processed
Depending on the feature used, the service may process account identifiers, encrypted conversations, user-selected memory, uploaded documents, support requests, security events, device/session information, and action or verification receipts.
Purpose and choice
Information is processed to authenticate the owner, provide requested assistance, preserve authorised conversation history, secure the service, respond to support or grievance requests, and maintain evidence of important actions. Optional durable memory is used only when enabled or requested. Do not submit OTPs, UPI PINs, CVVs, banking passwords, private signing keys, or unrelated sensitive information.
Storage and service providers
Application and database workloads run in an owner-administered Aarulya Cloud deployment on a privately administered VPS. Domain and DNS services use GoDaddy. Business-email DNS is configured for Google-hosted mail routing. Additional providers are not treated as active unless separately configured and approved.
Security
The production design uses HTTPS, mounted secret files, account-scoped PostgreSQL access, forced row-level security, separated database roles, encrypted backups, revocable sessions, CSRF protection, rate limits, and fail-closed provider states. No system can guarantee absolute security.
Retention
- Account data: while the account remains active, then removed through the verified deletion workflow unless retention is legally required.
- Conversations and optional memory: until deleted by the account owner or removed with account deletion.
- Security and access logs: normally up to 90 days.
- Encrypted operational backups: normally a rolling period of up to 30 days.
- Support and grievance records: normally up to 3 years.
- Financial or statutory records: for the period required by applicable law.
- Legal hold: relevant records may be retained until a dispute, investigation, or lawful requirement ends.
Your choices and rights
You may request access, correction, export, deletion, consent withdrawal where applicable, and grievance review. Some records may be retained where law, security, fraud prevention, or an active legal hold requires it. Deletion is not claimed complete until the configured deletion workflow records its result.
Children
This private-owner release is not intended for independent use by children. Do not submit a child’s personal data without lawful authority and appropriate guardian involvement.
Contact and grievance
Privacy: privacy@aarulya.com
Grievance Officer: Amit Kumar — support@aarulya.com
Security reports: security@aarulya.com