Last updated: 09-08-2026
Effective: 09-08-2026
1. Who we are
Abhidu is operated by Bunderbrains Private Limited, an Indian company ("we", "us"). We are the data controller — the Data Fiduciary, in Indian terms — for the personal data described here.
Privacy and data rights: legal@abhidu.com · Grievance Officer (India): nodal@abhidu.com · General: support@abhidu.com
Postal: Bunderbrains Private Limited, [REGISTERED ADDRESS], India.
2. What we collect
(a) Account data. Your name, email address, phone number (including the WhatsApp number you message from), date of birth, and information you give us when you register or contact support.
(b) Content you send us. Links you forward, messages and notes you write, screenshots and images you send, tasks, reminders and lists you create, and your conversations with the assistant.
(c) Data derived from your content. Metadata we extract from links — source platform, title, author, date, description — and the tags, categories and connections Abhidu generates to organise your material.
(d) Usage data. Features used, requests made, session times and frequency, actions taken, errors and crashes, and performance data. We observe and analyse how the Service is used in order to improve it.
(e) Device and technical data. IP address, approximate location derived from it, device type, operating system, browser, app version, and session identifiers.
(f) Payment data. If you buy a paid plan, our payment processor handles your card details. We do not receive or store full card numbers. We receive the fact of payment, plan, amount and billing status.
We do not intentionally collect sensitive personal data — health, religious belief, political opinion, biometric or financial account data. Please do not send it to Abhidu. If you do, you are choosing to submit it and it will be handled as ordinary content.
3. How we use your data to run Abhidu
To create and administer your account; store, organise and retrieve your content; deliver reminders and answer requests; take payment; provide support; keep the Service secure and investigate abuse; contact you about changes and service matters; and meet legal obligations.
Where a legal basis is required (EU/UK), we rely on: contract for providing the Service; legitimate interests for security, analytics and product improvement; consent where the law requires it; and legal obligation where we must.
4. How we use your data to improve Abhidu
Please read this section before using the Service.
(a) Usage observation. We observe and analyse how people use Abhidu — what is asked for, what works, what fails, where people stop — to fix problems and decide what to build.
(b) Model and system development. We use data derived from your use of Abhidu to develop, train, test, evaluate and improve our own models, systems and features. That material is machine-processed and de-identified: it consists of derived signals and summarised representations of interactions from which direct identifiers — name, phone number, email address and similar — have been removed.
(c) Third-party AI providers do not train on your data. Abhidu is built on Google (Gemini) and Anthropic (Claude) models, accessed through their paid enterprise APIs under terms that prohibit them from using your data to train their models. Your content may be sent to them to generate a response, and is handled under those enterprise terms.
(d) What we do not do. Our team does not read your conversations as a matter of course. We do not sell your personal data. We do not share content that identifies you with third parties for their own marketing or model training.
(e) Limited human access. Despite (d), a small number of authorised staff may access specific account content where strictly necessary to investigate a security incident or suspected breach of our Terms, diagnose a fault you have reported, comply with a legal obligation or valid legal request, or protect someone's safety. Such access is restricted, controlled and logged.
(f) De-identified and aggregated data. Data de-identified or aggregated so it can no longer reasonably be linked to you is not personal data, and we may keep and use it indefinitely, including after your account is deleted.
(g) Your choice. You may object to the processing in this section at any time by emailing legal@abhidu.com, and we will honour that objection. We are building a self-service control in the product and will update this policy when it ships.
5. Sharing your data
We share personal data only as set out here: with the service providers in Section 6; where required by law or valid legal process; to protect the rights, property or safety of Bunderbrains, our users or the public; and in connection with a merger, acquisition, financing or sale of assets, in which case we will tell you if how your data is handled materially changes.
6. Service providers
- Cloud hosting and storage — Amazon Web Services (AWS), in India, the United States and Singapore
- AI model providers — Google (Gemini) and Anthropic (Claude), via paid enterprise APIs, under terms prohibiting training on your data
- Messaging — WhatsApp / Meta Platforms, for messages you exchange through WhatsApp
- Payments — [PAYMENT PROCESSOR]
- Email and communications — [PROVIDER, if any]
We do not currently use third-party analytics or advertising services. These providers process data under contract, only for purposes we specify. A current list is available at legal@abhidu.com.
7. WhatsApp
When you use Abhidu through WhatsApp, your messages pass through Meta's infrastructure and are subject to WhatsApp's own privacy policy as well as this one. We receive the content you send and your WhatsApp phone number. We do not control WhatsApp and are not responsible for its practices.
8. Where your data is stored
Your data is stored on AWS infrastructure in India, the United States and Singapore, and may be processed in any of those countries and in other countries where our providers operate. These countries have data protection laws that differ from those where you live.
For EU/UK users, transfers outside the EEA/UK are made under the European Commission's Standard Contractual Clauses, incorporated into our data processing agreements with AWS, Google and Anthropic.
9. Security
We encrypt your data in transit and at rest, restrict internal access to authorised staff on a need-to-know basis, and run on cloud infrastructure with industry-standard controls.
No system is completely secure. We do not currently hold third-party security certification such as SOC 2 or ISO 27001. We cannot guarantee your data will never be accessed, altered or destroyed in breach of our safeguards. Bear that in mind when deciding what to store in Abhidu.
If a personal data breach occurs, we will notify the relevant authority and affected users as and when the law requires.
10. Retention and deletion
We keep your data while your account is active and for as long as needed for the purposes in this policy.
Deleting your account. Request deletion at legal@abhidu.com. We will complete it within 30 days. We remove your content and identifying data from active systems; AWS backups are overwritten on a rolling 7-day cycle, so backup copies are gone within 7 days of deletion from active systems.
What survives deletion. De-identified and aggregated data (Section 4(f)), and data we must keep to meet a legal obligation or resolve a dispute, for as long as that requirement lasts.
Inactive accounts. [SET A PERIOD — e.g. accounts inactive for 24 months are notified and then deleted. Required in substance under DPDP Rule 8, which ties erasure to the purpose no longer being served.]
11. Your rights
Depending on where you live, you may have the right to: access your personal data; correct it; delete it; get a copy in a portable format; object to or restrict processing; withdraw consent where processing relies on it; and, in India, nominate someone to exercise your rights if you die or become incapacitated.
To exercise any of these, email legal@abhidu.com. We may need to verify your identity, and will respond within the period the law requires.
Complaints. If you are unhappy with our response, contact our Grievance Officer at nodal@abhidu.com. You may also complain to a supervisory authority — in India, the Data Protection Board; in the EU, your national authority; in the UK, the ICO.
12. Cookies
We use cookies only for authentication and session management — keeping you signed in and your session secure. We do not use advertising, tracking or third-party analytics cookies. Cookies strictly necessary to deliver a service you have asked for do not require consent, which is why you will not see a cookie banner. If we add analytics or any non-essential cookie, we will ask for consent first and update this policy.
You can block cookies in your browser, but the Service will not work without the authentication cookie.
13. Age and children
Abhidu is for people aged 18 and over. We ask for your date of birth at registration and refuse registration to anyone whose stated date of birth indicates they are under 18. We do not design, market or direct the Service to children.
We do not knowingly collect personal data from anyone under 18. Where we are told, or come to believe, that an account belongs to someone under 18, we will investigate and close the account and delete the associated data. Report a concern to legal@abhidu.com.
14. Changes
We may update this policy as Abhidu develops. Where changes are material, we will notify you by email or in the Service before they take effect. The "Last updated" date always reflects the current version.
15. Contact
Bunderbrains Private Limited
B-20, Milind Apts, Mulund East, Mumbai , India
Privacy and data rights: legal@abhidu.com
Grievance Officer: nodal@abhidu.com
General: support@abhidu.com