Privacy Policy

Milan AI ("we", "our", or "us"), operated under Study Notes 365, is committed to safeguarding the privacy of students, educators, and users who access our website at https://milanai.io. This Privacy Policy details how we collect, use, disclose, and protect your information in compliance with the Digital Personal Data Protection (DPDP) Act 2023, Information Technology Act 2000, and Google API Services User Data Policy.

1. Information We Collect

• Account Information: When you sign in using Google Identity Services (Google OAuth), we receive your basic profile information (name, email address, profile picture) to authenticate your account and manage your token balance.
• Study Session & Query Data: Questions asked, textbook search queries, mock test responses, and handwritten answer sheet scans uploaded for AI evaluation.
• Payment Information: Transaction identifiers, order IDs, and payment status via Cashfree Payments. We do not store raw credit card numbers or banking passwords.
• Device & Usage Data: IP addresses, browser types, session timestamps, and interaction logs collected for performance optimization and abuse prevention.

2. How We Use Your Information

• To provide, operate, and maintain Milan AI’s doubt-solving and mock test services.
• To retrieve textbook citations from official ICAI, ICMAI, and ICSI modules.
• To calculate token consumption, process payments, and provide customer support.
• To prevent fraudulent token abuse, unauthorized scraping, or terms violations.

3. Google User Data & AI Sub-Processors

We strictly adhere to the Google API Services User Data Policy. User data obtained via Google OAuth is used solely for user authentication and session management. We do not sell, rent, or trade your personal data to third parties, nor do we use private student conversations to train public foundation models.

Which AI services see students' questions: When you submit a doubt question, syllabus prompt, or mock exam answer sheet for evaluation:

• Enterprise AI Inference: The query text and extracted OCR answers are transmitted over secure, encrypted TLS channels to our enterprise inference sub-processors: Google Cloud (Gemini API) and OpenAI / Groq Cloud (Enterprise LLM APIs) solely to generate real-time explanations, citations, and marks.
• Zero Foundation Model Training: Under our enterprise agreements and data privacy terms, these third-party AI services operate in a stateless inference mode. Neither Google nor OpenAI stores, logs, or uses student questions, answers, or study documents to train, fine-tune, or improve their public AI models.

4. Data Security & Retention

We implement industry-standard encryption (TLS 1.3 in transit and AES-256 at rest). Student data is retained for the duration of your active account or until you request account deletion.

5. Named Grievance Officer & Postal Address

In accordance with the Digital Personal Data Protection (DPDP) Act 2023 and Rule 5(9) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, the name and contact details of the designated Grievance Officer are set out below: