Ugle.ai — Privacy Policy

Effective date: 1 July 2026 · Last updated: 14 July 2026

This Privacy Policy explains how DEEPSHIELD AI TECHNOLOGY LLP (LLPIN: ACB-4971), a limited liability partnership registered with the Registrar of Companies, Ahmedabad, having its registered office at 40 Oriyant Colony, Bhuj, Kachchh, Gujarat 370001, India (“we”, “us”, “our”), the entity that provides the Ugle.ai software (the “Software”), collects and handles personal data. We act as a Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (the “DPDPA”). By using the Software or our website, you acknowledge the practices described in this Policy. This Policy should be read together with our Terms of Service.

1. Our local-first approach

1.1 The Software is local-first. All audio, video, transcript and index files you create are generated and stored on your device. We do not receive, transmit, access or store that content on our servers, and we are not technically able to access it. This Policy therefore concerns only the limited operational data described below.

2. Personal data we collect

2.1 We collect only the following categories of personal data:

• Billing and contact information (such as your name, email address and billing details) when you purchase or renew a licence;

• Licence and device-activation data (such as your licence key and a device identifier) to activate and validate your licence;

• Website, download and access logs; and

• Crash reports — collected only if you opt in.

2.2 What we do not collect. We do not collect or receive the audio, video, transcript or index files generated by the Software. These never leave your device.

3. How we use personal data

3.1 We use this data to provide, activate and validate your licence; process payments and renewals; provide support; maintain the security and integrity of our website and services; comply with legal, tax and accounting obligations; and, where you opt in, diagnose crashes to improve the Software.

3.2 Legal basis. We process your personal data on the basis of your consent and, where applicable, for the legitimate uses permitted under the DPDPA, including to provide the service you have requested and to comply with law.

4. Data Processors

4.1 We engage the following Data Processors, each of which processes only the limited categories of personal data necessary for its function, and none of which receives any audio, video, transcript or index content generated by the Software:

• Keygen — licence activation and validation (licence-key and device-identifier data);

• Stripe — payment processing (billing and payment-instrument data);

• Hostinger — hosting of our website

• Amazon Web Services - licence-validation services;

• Cloudfront— delivery of software downloads and updates.

4.2 A current list of our Data Processors, their functions and their locations is maintained at ugle.ai/sub-processors, and is updated whenever we add or change a Processor.

5. International data transfers

5.1 Certain limited categories of your personal data — specifically payment information, licence and device-activation data, and website and content-delivery logs — may be processed by our service providers on servers located outside India. Such transfers are permitted under Section 16 of the DPDPA, save to any country or territory that the Central Government may restrict by notification. We do not transfer, and are not technically able to access, the audio, video, transcript or index files that the Software generates, as these remain on your device at all times. Where a service provider processes data outside India, we require it to be bound by contractual data-protection obligations, and we take into account the provider’s recognised security certifications (such as SOC 2 or ISO/IEC 27001). Payment data is processed in accordance with applicable Reserve Bank of India requirements, including data-storage requirements applicable to payment system providers.

6. Data retention

6.1 We retain personal data only for as long as necessary for the purposes described in this Policy, or as required by law:

• Billing and contact information — retained for up to eight (8) years from the end of the relevant financial year, to meet obligations under the GST and Income-tax laws and the LLP Act, 2008.

• Licence and device-activation data — retained for the life of the licence plus twelve (12) months, to support renewals and reactivation.

• Website, download and access logs — retained for at least 180 days, in accordance with the CERT-In Directions dated 28 April 2022, and thereafter deleted or anonymised.

• Crash reports (collected only with your opt-in) — retained for ninety (90) days, then deleted or anonymised.

7. Your rights and our Grievance Officer

7.1 In accordance with the DPDPA, you have the right to: (a) access a summary of the personal data we process and the processing undertaken; (b) seek correction, completion, updating or erasure of your personal data; (c) withdraw your consent at any time, as easily as it was given, without affecting the lawfulness of processing carried out before withdrawal; (d) have your grievances redressed; and (e) nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

7.2 To exercise any of these rights, contact our Grievance Officer, Tejas Hareshbhai Pancholi, Director, at legal@ugle.ai. We will acknowledge your request promptly and respond within the timelines prescribed under applicable law.

8. Security

8.1 We maintain reasonable technical and organisational security measures appropriate to the limited data we hold, and we require our Data Processors to do the same. No method of transmission or storage is completely secure; however, because your recordings and transcripts remain on your device, the personal data we hold is deliberately minimal.

9. Personal data breach

9.1 In the event of a personal data breach, we will intimate the Data Protection Board of India and each affected user, in the form and manner and within the timelines prescribed under the DPDPA, describing the nature of the breach, its likely consequences, and the measures we have taken or propose to take in response. Where the breach constitutes a reportable cyber-security incident, we will additionally report it to the Indian Computer Emergency Response Team (CERT-In) within the timelines prescribed under applicable law.

10. Cookies

10.1 We do not use analytics, advertising, cross-site tracking or marketing cookies on our website or within the Software. Any cookies we use are strictly necessary for core functionality, such as maintaining a secure session during checkout. If we introduce optional cookies in future, we will update this Policy and, where required, seek your consent before they are set.

11. Children

11.1 The Software and our services are intended solely for individuals who are competent to contract under the Indian Contract Act, 1872, that is, persons who are at least 18 years of age. We do not knowingly collect personal data from, direct our services to, or engage in any behavioural monitoring or targeted advertising towards, individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a minor without the verifiable consent of a parent or lawful guardian, we will delete such data promptly.

12. Changes to this Policy

12.1 We may update this Policy from time to time. We will post the updated Policy with a revised “last updated” date and, where the change is material, notify you by email. Your continued use of the Software or our website after the effective date constitutes acknowledgment of the updated Policy.

13. Contact

13.1 For any question about this Policy or your personal data, contact our Grievance Officer,Tejas Hareshbhai Pancholi, Director, at legal@ugle.ai. See also our Terms of Service.