Privacy Policy/Notice

1. Preamble

This Privacy Policy/Notice (the "Policy") is published by Raechal AI Technologies India Private Limited (CIN U58200HR2026PTC144163), a company incorporated under the laws of India and having its registered office at Unit No: 6O-16, 6th Floor, VSR Avenue 114, Bajghera, Gurugram-122017, Haryana, India(the "Company", "we", "us", or "our"), the entity operating the artificial intelligence-powered SEO operations platform accessible at https://raechal.ai/ through its mobile or desktop applications (Collectively, the "Platform"/ "website"). This Policy explains how we collect, use, store, disclose, transfer and otherwise process personal data relating to individuals who access or use the Platform, including individual users, business customers and their authorised representatives, website visitors and persons who communicate with us (collectively, the "Data Principals", "you" or "your", where applicable) and provides information about individual's rights. This Policy is a privacy notice and should be read together with our Terms of Service and any other applicable agreements agreed by you while availing the services of Raechal.ai.

This policy applies globally and is intended to address applicable data protection requirements in the jurisdictions in which we provide services, including India's Digital Personal Data Protection Act, 2023 (DPDP Act) and rules as applicable, the European Union's General Data Protection Regulation (GDPR), 2018, and the California Consumer Privacy Act (CCPA), 2020.

2. Scope and Applicability of this Policy

This policy applies to:

• All individual users, including but not limited to founders, creators, and marketers, who create an account on the Platform through a paid or free plan;
• All business entities, including but not limited to start-ups, marketing teams, SEO agencies, and enterprises that access the Platform through a paid or free plan, and their authorised representatives;
• Visitors to the website www.raechal.ai who do not create an account but whose technical data is passively collected during their visit;
• Any person who communicates with Raechal.ai through email or other channels referenced on the Platform.

This Policy does not apply to third-party websites, platforms, or services that may be linked from the Platform. Data Principals are advised to read the privacy policies of such third-party services independently. Raechal.ai does not control and is not responsible for the data practices of such third parties.

3. Categories of Information Collected

A. Information you Provide Directly:

• Account Information: Whenever you create an account on the Platform, identity and account related data will be collected. It will include full name, email address and password (stored in encrypted form, never stored in plain text) of the registrant; the Plan selected (free, starter, growth, pro, or agency); Billing information including payment method details (processed through third-party payment gateway providers; Platform does not store full card numbers).
• AI Interaction Information: Whenever you interact with the AI assistant of the Platform, all queries, prompts, instructions, conversation history, responses etc. will be collected.
• Communication Information: If you communicate with us, such as via email or our pages on social media sites, we may collect Personal Data like your name, contact information, and the contents of the messages you send.
• We do not intentionally collect "sensitive personal data" including but not limited to,
  1. password;
  2. financial information such as Bank account or any other payment instrument details;
  3. physical, physiological and mental health condition;
  4. sexual orientation;
  5. medical records and history;
  6. Biometric information;
  7. racial or ethnic origin, citizenship or immigration status, religious or philosophical beliefs, or union membership;
  8. genetic or neural data;
  9. reveals consumer's social security, driver's license, state identification card, passport number, precise geolocation, etc.

  unless explicitly provided by the user.

B. Information Collected when you Use Core Features of the Platform

• SEO Scan and Audit Data: Whenever you use core features of the Platform, we collect your domain name, website URLs, Domain performance metrics, crawl configurations, page titles, metadata, backlink data, search Console data, keyword visibility information, sitemap references, accessibility or performance indicators, and similar website-analysis inputs and outputs, Content Management System (CMS) credentials and access tokens (collected only when you enable automated agentic features; stored in encrypted form with strict access controls).

C. Information Collected Automatically:

• When you visit or use the Platform, we may automatically collect certain technical and usage information, such as IP address, device type, browser type, operating system, language settings, timestamps, pages viewed, referring URLs, clickstream information, cookie identifiers, session identifiers, and similar diagnostic or analytics information. Such technical data may be considered personal data under applicable data protection laws.

D. Inferred and Derived Data

• We may generate or derive additional data based on the information collected, including analytics, insights, usage patterns, performance metrics, and predictive outputs, to support the functionality and improvement of the Platform.

E. AI Clarification

• AI Interaction Information, including prompts and responses, is processed to provide and improve the Platform's functionality. Such data is not used for training general-purpose AI models unless explicitly disclosed and permitted under applicable law.

4. Cookies

Cookies are small text files containing a unique string of alphanumeric characters that may be placed on your browser or device when you visit our website or other online service to remember information about you. We use cookies and similar technologies to operate the Raechal.ai Platform, maintain user sessions, remember preferences, measure performance, improve user experience, analyse usage trends, and support security functions. The categories we use are described below, and the individual cookies within them are listed in the table at the end of this section.

A. Strictly Necessary Cookies (Functional):

These cookies are used to enable functionality on the Services, such as setting privacy preferences, logging in, or filling in forms and allow us to remember choices you make (such as your user name, language, or the region you are in) and provide enhanced features. For instance, the Platform may be able to remember your login details, so that you do not have to repeatedly sign in to your account when using a particular device to access the Platform. These cookies can also be used to remember changes you have made to text size, font, and other parts of web pages that you can customize. The information these cookies collect is usually anonymized. They do not gather any information about you that could be used for advertising or remember where you have been on the internet.

B. Analytics or Performance Cookies:

These cookies help us understand the count visits and traffic sources in order to measure and improve the performance of our Platform. They help identify which pages or functions within the Platform are the most and least popular and see how visitors move around our Services.

C. Social media:

These cookies are used to enable features such as social media sharing on our Platform. They may also provide the ability to link your social media account or engage with our content on or through a social media platform such as "X", "LinkedIn" or "Instagram". These technologies may enable the providers of such social media platforms to track your online activity and interests.

D. Third-Party Cookies:

We also work with third-party services that may place their own cookies on your device. These are governed by their respective privacy and cookie policies, which we encourage you to read independently.

Where required by applicable law, currently visitors in the European Economic Area, the United Kingdom and Switzerland; we present a cookie consent banner before any analytics or marketing cookie is set, and no such cookie is set unless you accept it. You can accept or reject each category, and you can change or withdraw your choice at any time using the Cookie preferences link in the footer of every page. Elsewhere, analytics and marketing cookies are set when you arrive, and the same footer link lets you turn them off.

Withdrawing consent stops the relevant cookies being set from your next page view onward. A script that has already loaded in the page you are looking at cannot be recalled, and we say so rather than implying an immediate stop we cannot deliver. Disabling non-essential cookies does not affect your ability to use the Platform; disabling strictly necessary cookies would prevent you signing in.

Cookies set by a third party are also governed by that party's own policies: Google Analytics and Google Ads by Google's privacy policy, the Meta Pixel by Meta's, the LinkedIn Insight Tag by LinkedIn's, and Microsoft Clarity by Microsoft's. Our tag manager is Google Tag Manager, which sets no cookies of its own but loads the tags listed above, including Microsoft Clarity, which records how pages are used (clicks, scrolls and page views) so we can improve them.

We work out your country from your IP address to decide whether to ask about cookies and which currency to show. Country data: Number Resource Organization (nro.net), CC BY 4.0.

5. Children's Privacy

Our Services are not directed to, or intended for, children under the age of 18 (eighteen) years. We do not knowingly collect Personal Data from children under the age of 18 (eighteen) years. If you have reason to believe that a child being under the age of 18 (eighteen) years has provided Personal Data, please email us at info@raechal.ai. We will investigate any notification and, if appropriate, delete the Personal Data from our systems. Raechal.ai does not knowingly collect, process, or store personal data of children under the age of 18 (eighteen) years without the prior verifiable consent of their parent or lawful guardian.

6. How we use Personal Data

We process personal data on the basis of: (i) performance of a contract; (ii) compliance with legal obligations; (iii) legitimate business interests as specified hereinafter; and (iv) consent, where required under applicable law. We use Personal Data for following purposes:

• To provide, operate and maintain the services offered through the Platform;
• To process your inputs and generate AI-based responses, insights, and outputs;
• To perform website scans, audits, analytics, benchmarking, technical diagnostics, and related SEO or answer-engine visibility functions;
• To process user inputs and generate AI-assisted outputs, reports, recommendations, summaries, or workflow actions requested through the Platform;
• to process billing, payments, renewals, invoicing, and related account administration;
• to provide customer support, troubleshoot issues, and respond to enquiries;
• to detect, investigate, prevent, and address fraud, abuse, security incidents, unauthorised access, and other misuse of the Platform;
• to maintain logs, monitor performance, conduct internal analytics, and improve the usability, reliability, and security of the
• To improve and develop our Services and conduct research;
• To comply with laws and regulatory requirements, respond to lawful requests, exercise or defend legal claims, and perform sanctions/export-control screening;
• To support corporate transactions (e.g., merger, acquisition, reorganization), subject to appropriate safeguards.

7. Data Sharing and Third-Party Disclosures

• Raechal.ai does not sell, rent, trade, or otherwise transfer your personal data to any third party for their own independent commercial purposes. We share your personal data only to the extent necessary to provide you with the services you have requested through the Platform, to comply with our legal obligations, or to protect the rights and interests of the Platform, our Data Principals, and the general public.
• Third-Party Service Provider: Where we share your data with third-party service providers including hosting providers, payment processors and analytics tools, we do so strictly to deliver the Platform's services on your behalf. Such Third-Party processors are prohibited from using your personal data for any purpose beyond the specific service they provide to us on your behalf. The sub-processors we currently engage are named in the table at the end of this section.
• Artificial Intelligence Providers: The Platform's artificial intelligence features are delivered by third-party AI model providers, which we reach through a routing provider. When you use a Service that generates or analyses content, the prompt you enter, the relevant context, and content read from the websites you have connected are transmitted to those providers in order to produce the output you requested. They act as our processors for that purpose and are contractually restricted to it. As stated in section 3(E), such data is not used to train general-purpose AI models unless expressly disclosed and permitted under applicable law. Where you supply your own AI provider key, requests made with that key are sent to the provider you hold the account with, under your agreement with that provider rather than ours.
• Google User Data: If you connect a Google account, Raechal requests read-only access to Google Search Console (webmasters.readonly) and Google Analytics (analytics.readonly), plus your basic profile and email to identify the connected account. We use this data only to show you your own search performance, rankings, traffic and AI-referred visits inside the Platform, and to produce the recommendations and fixes you ask for. Where a feature you use needs it, the relevant data may be processed by the AI model providers described above, solely to provide that feature to you. We do not sell Google user data, do not use it for advertising, do not use it to train or improve generalised AI or machine-learning models, and do not let humans read it except with your permission, for security, or to comply with law. You can disconnect Google at any time in Settings → Search data sources; we then stop accessing it and delete the stored tokens. Raechal's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Affiliates and Business Transfers: We may share your personal data with our parent company, subsidiaries, holding companies, joint ventures, or other entities, whether existing now or incorporated in the future. In the event that another company acquires our company or merger, acquisition, or restructuring, of the company's take place, your personal data may be transferred to the acquiring entity, which shall assume all rights and obligations with respect to your data as described in this Policy.
• Government Authorities: We may disclose your personal data to government authorities, law enforcement agencies, courts, the Reserve Bank of India, the Data Protection Board of India, or any other regulatory body where we have a good faith belief that such disclosure is reasonably necessary to take action regarding suspected illegal activities or fraud, to enforce our Terms of Service or this Privacy Policy, to comply with legal processes issued by any lawful authority.

Sub-processors

The following third parties process personal data on our behalf in order to deliver the Platform. Those described as used "only for the accounts you connect" receive data only if you choose to connect that integration. We update this list when we add or change a sub-processor; write to info@raechal.ai to be notified of changes.

8. International Transfer of Personal Data

We primarily store and process personal data on infrastructure located in India. However, in certain circumstances, personal data may be transferred to and processed in jurisdictions outside India where necessary for operational, technical, support, vendor, or legal purposes. Such transfers are undertaken in accordance with applicable data protection laws and subject to appropriate safeguards, including contractual protections, standard contractual clauses, or other legally recognised mechanisms.

Personal data of users located outside India, including in the United States, the European Union, the United Arab Emirates, or any other jurisdiction, may be processed and stored in India by us, our affiliates, service providers, cloud infrastructure providers, and authorised sub-processors, in accordance with applicable law and subject to appropriate security measures.

By using the Platform or providing your information, you acknowledge that your personal data may be transferred to and processed in India and other jurisdictions where data protection laws may differ from those in your jurisdiction.

9. Data Retention and Deletion

We retain your personal data only for as long as reasonably necessary for the purposes for which it was collected, including to provide services through Raechal.ai Platform, maintain business and security records, comply with legal or contractual obligations, resolve disputes, and enforce our agreements. Retention periods may vary depending on the category of data and the nature of the relationship. For example:

• account and flexible plan records may be retained for the duration of the account and a reasonable period thereafter; and
• billing, tax, and transaction records may be retained for applicable statutory, tax, or accounting periods; and
• support communications and operational logs may be retained for a limited period necessary for support, security, audit, and service-improvement purposes; and
• prompts, actions, SEO requirements, workflow inputs, project history, SEO reports, and related platform content may be retained while the relevant workspace or account remains active and may be used to operate, improve, test, validate, and enhance our Platform and AI-driven SEO features, subject to applicable law and appropriate safeguards; and
• access credentials, tokens, and integration secrets may be retained only for so long as the relevant integration remains active or operationally necessary, after which they will be deleted, revoked, or rendered unusable, and will not be used for AI model training except where expressly disclosed and legally permitted.

Where personal data is no longer required for the relevant purpose, we will delete, de-identify, anonymise, or securely dispose of it in accordance with applicable law.

Please note that we do not intentionally retain personal data for AI model training except as expressly disclosed; however, certain user prompts, workflow instructions, and SEO-related inputs retained for platform functionality and improvement may contain personal data provided by users.

To submit a request for review, correction, withdrawal of consent or deletion of your personal data, please reach out to our Grievance Officer by writing to us at ravi@raechal.ai with the subject line : Grievance, Request for Data Retention/ Deletion, [Your Name], and we will respond to you as soon as reasonably possible. Please be assures that, we will make every reasonable effort to action your request promptly, however please note that processing such requests may take some time depending on the nature and complexity of the information involved.

10. Data Security

The Platform implements industry-standard technical and organisational measures, including encryption, access controls, and monitoring and procedures in accordance with applicable laws. We employ a combination of technical and organisational safeguards across all layers of the Platform like encryption of your data, use restricted to authorised personnel only etc.

However, no Internet or email transmission is ever fully secure or error free. Therefore, you should take special care in deciding what information you provide to the Services. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third-party websites.

11. Rights of Data Principals

i. Rights under DPDP Act and Rules (For Indian Residents)

• Right to access information;
• Right to correction and erasure;
• Right to grievance redressal;
• Right to nominate;
• Right to withdraw consent;
• Right to complaint before grievance officer and Data Protection Board.

ii. Rights under CCPA (For USA Residents)

• Right to know about personal information a business collect;
• Right to delete;
• Right to opt out of the sale or sharing of personal information;
• Right to non-discrimination about their CCPA rights;
• Right to correct inaccurate personal information;
• Right to limit the use and disclosure.

iii. Rights Under GDPR (For EU Residents)

• Right to transparent information and modalities;
• Right to access to personal data;
• Right to rectification and erasure;
• Right to object;
• Right to automated processing;
• Right to data portability;
• Right to restriction of processing.

12. Grievance Officer and Supervisory Authority

Raechal.ai has designated a Grievance Officer to address complaints, concerns and requests relating to personal data. The details of the Grievance Officer are as follows:

Grievance Officer:

Name: Ravi Nimbhal

Designation: Grievance Officer

Email: ravi@raechal.ai

Postal Address: Unit No: 6O-16, 6th Floor, VSR Avenue 114, Bajghera, Gurugram-122017, Haryana, India

We will acknowledge and address requests and complaints in accordance with applicable law. For requests governed by the Digital Personal Data Protection framework in India, we will respond within the timeline prescribed by law, including the maximum period applicable to access, correction, updating, or erasure requests. If you are not satisfied with the response of our Grievance Officer, or if your complaint remains unresolved within 30 days of the grievance submission, you have the right to escalate your complaint to the Data Protection Board of India, established under Section 18 of the Digital Personal Data Protection Act 2023.

If you are located in the European Union, United States, UAE or in any other jurisdiction and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

13. Changes to the privacy policy

We may update this Policy from time to time. When we do, we will post the revised version and update the "Last updated" date. If changes materially affect how we process your personal data or your rights, we may provide an additional notice (e.g., email, in-product message, or site banner) and, where required, obtain your consent before applying these changes. For non-material changes, posting the updated Notice will always be sufficient. We encourage you to review this Notice periodically. We will not use personal data already collected in a materially different way without an appropriate legal basis (and consent where required by law).

14. Platform-Specific Addenda

Where Raechal AI integrates with third-party platforms via OAuth, supplementary data policies apply on top of this main policy. They cover what each platform shares with us, what we do not collect, and how we respond to that platform's mandatory compliance webhooks.

• Shopify Data Policy , applies to merchants who install the Raechal AI Shopify app.

15. Contact Us

If you have any questions about this Privacy Policy, our data practices, or your privacy rights, please contact us at: info@raechal.ai

© 2026 Raechal AI, All Rights Reserved