Privacy Policy

Milan AI ("we", "our", or "us"), operated under Study Notes 365, is committed to safeguarding the privacy of students, educators, and users who access our website at https://milanai.io. This Privacy Policy details how we collect, use, disclose, and protect your information in compliance with the Digital Personal Data Protection (DPDP) Act 2023, Information Technology Act 2000, and Google API Services User Data Policy.

1. Information We Collect

• Account Information: When you sign in using Google Identity Services (Google OAuth), we receive your basic profile information (name, email address, profile picture) to authenticate your account and manage your token balance.
• Study Session & Query Data: Questions asked, textbook search queries, mock test responses, and handwritten answer sheet scans uploaded for AI evaluation.
• Payment Information: Transaction identifiers, order IDs, and payment status via Cashfree Payments. We do not store raw credit card numbers or banking passwords.
• Device & Usage Data: IP addresses, browser types, session timestamps, and interaction logs collected for performance optimization and abuse prevention.

2. How We Use Your Information

• To provide, operate, and maintain Milan AI’s doubt-solving and mock test services.
• To retrieve textbook citations from official ICAI, ICMAI, and ICSI modules.
• To calculate token consumption, process payments, and provide customer support.
• To prevent fraudulent token abuse, unauthorized scraping, or terms violations.

3. Google User Data & AI Model Training

We strictly adhere to the Google API Services User Data Policy. User data obtained via Google OAuth is used solely for user authentication and session management. We do not sell, rent, or trade your personal data to third parties, nor do we use private student conversations to train public foundation models without explicit consent.

4. Data Security & Retention

We implement industry-standard encryption (TLS 1.3 in transit and AES-256 at rest). Student data is retained for the duration of your active account or until you request account deletion.

5. Grievance Officer & Contact

In accordance with the Information Technology Act 2000 and DPDP Act 2023, if you have questions, concerns, or wish to exercise data access/deletion rights, please contact our Grievance Officer: