Privacy Policy | गोपनीयता नीति
Last Updated: February 28, 2026
Compliant with the Digital Personal Data Protection Act, 2023 (DPDPA 2023) and the Information Technology Act, 2000
1. Introduction
Unbound Soul Science Community (“Data Fiduciary” / “we” / “USS”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Website (unboundsoulscience.com) and services. This policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDPA 2023) and the Information Technology Act, 2000 (including Section 43A and the IT Reasonable Security Practices and Procedures Rules, 2011).
2. Data Fiduciary Declaration
Name of Data Fiduciary: Unbound Soul Science Community
Contact: soul@unboundsoulscience.com
Data Protection Officer (DPO): Vikas Yadav — dpo@unboundsoulscience.com
The DPO is responsible for addressing your data-related queries, grievances, and rights requests.
3. Data We Collect
Name & Email: Collected via Google OAuth signup for account creation and communication.
Chat Messages: Collected during AI Chatbot (Guru Ji) interactions for service delivery and improvement.
Payment Information: Processed securely via Razorpay — we do NOT store card details on our servers.
IP Address: Collected via server logs for security, rate limiting, and guest tracking.
Cookie Data: Collected via browser for essential functionality and analytics (with your consent).
Community Form Data: Collected via the community signup form for community membership processing.
Testimonials/Reviews: Submitted by users for display on the Website (with consent).
4. Purpose of Data Processing & Legal Basis
Service Delivery: To provide our Website features, chatbot, and content (contract performance).
Account Management: To manage your user account and subscription (contract performance).
Payment Processing: To process premium subscription payments via Razorpay (contract performance).
Security & Fraud Prevention: To protect against unauthorized access and abuse (legitimate interest).
Analytics: To understand usage patterns and improve our services (explicit consent only — opt-in).
Marketing/Newsletter: To send newsletters and updates (explicit consent only — opt-in).
AI Chatbot Improvement: To enhance chatbot responses using anonymized data (legitimate interest).
5. Explicit Consent Mechanisms
Signup: Consent obtained via checkbox during Google OAuth registration — “I agree to the Terms of Use and Privacy Policy” (with links to both documents).
Newsletter: Separate opt-in with checkbox — “I consent to receiving newsletters from USS.”
Cookies: Cookie banner with explicit opt-in for non-essential cookies.
Community Form: Consent checkbox on community registration form.
Testimonials: Consent obtained at submission — “I agree that my testimonial may be displayed publicly.”
All consents are recorded with timestamp and can be withdrawn at any time.
6. Cross-Border Data Transfer ⚠️
Important Disclosure: Our AI chatbot service uses APIs from Anthropic (Claude) and/or OpenAI, whose servers are located in the United States of America. When you send a message to our chatbot, your message text is transmitted to these US-based servers for processing.
We do NOT send your personal identity information (name, email) to these services — only the chat message content. Pinecone (vector database) servers may also be located outside India. Brevo (email service) servers are located in the EU. By using the AI chatbot feature, you explicitly consent to this cross-border transfer of your chat data. We ensure that these service providers maintain adequate data protection standards. Razorpay processes payments within India; card/payment details are handled by Razorpay directly and not stored on our servers.
7. Data Retention
Account Data: Retained until account deletion is requested by the user.
Chat History: Retained for 90 days, then anonymized or deleted.
Payment Records: Retained for 7 years as required by Indian tax and legal requirements.
Server Logs: Retained for 90 days.
Community Form Data: Retained until membership cancellation plus 30 days.
8. Your Rights Under DPDPA 2023
Under the Digital Personal Data Protection Act, 2023, you have the following rights:
Right to Access: Request a copy of your personal data held by us.
Right to Correction: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your data (subject to legal retention requirements).
Right to Withdraw Consent: Withdraw any previously given consent at any time.
Right to Grievance Redressal: File a complaint with our Data Protection Officer.
Right to Nominate: Nominate another person to exercise your rights in case of death or incapacity.
To exercise any right, contact our DPO at dpo@unboundsoulscience.com — we will respond within 72 hours of receiving your request.
9. Data Breach Notification
In the event of a personal data breach, we will: notify the Data Protection Board of India as per DPDPA 2023 requirements; notify affected users within 72 hours of becoming aware of the breach; provide details of the breach, data affected, and remedial steps taken; and maintain a breach register for auditing purposes.
10. Data Security Measures
We implement the following security measures in compliance with IT Act 2000, Section 43A: SSL/TLS encryption on all pages (HTTPS enforced); API keys stored server-side only, never exposed in client code; server-side rate limiting on all sensitive endpoints; regular security audits; role-based access control with principle of least privilege; PCI-DSS compliant payment processing via Razorpay (we never store card details); Google OAuth authentication (no passwords stored on our servers).
11. Children’s Privacy
Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If we discover that such data has been collected, it will be deleted immediately. If you believe a minor has provided us with personal data, please contact our DPO.
12. Cookie Policy
Essential Cookies: Required for website functionality (login sessions, security) — always active, no consent needed.
Analytics Cookies: Used to understand usage patterns — ONLY activated with explicit user consent (opt-in).
Marketing Cookies: Currently not used on this Website.
Users can manage cookie preferences at any time via the “Manage Cookie Preferences” link in the footer.
13. Third-Party Services
We use the following third-party services: Google (OAuth authentication, Analytics — with consent); Razorpay (payment processing); Brevo (email automation); Anthropic/OpenAI (AI chatbot processing); Pinecone (vector database); Hostinger (web hosting). Each third-party has its own privacy policy; we encourage users to review them.
14. Changes to Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be notified via email and/or website banner. The “Last Updated” date will be prominently displayed at the top of this page. Continued use of the Website after changes constitutes acceptance.
15. Grievance Officer / DPO Contact
Data Protection Officer: Vikas Yadav
Email: dpo@unboundsoulscience.com
Response Time: Within 72 hours
If unsatisfied with our response, you may approach the Data Protection Board of India as established under the DPDPA 2023.
© 2026 Unbound Soul Science Community. All rights reserved.