Privacy Policy

Who we are

Laabam AI is a service of Laabam One Business Solutions Private Limited, registered at 285-A, Anna Nagar East Cross Street, Sathamangalam, Madurai 625020, Tamil Nadu, India. For the purposes of the DPDP Act we are the Data Fiduciary for the data described here, and you are the Data Principal.

What we collect, and why

Signed out, we do not save your chat. A cookie counts your free tokens for the day: it holds the date and a number, not your messages. Like every request, yours goes in the request log above, and your IP address is used for rate limits.

On what basis

We process this data with your consent, given when you create an account (you tick a box, and we record that you did) or send a message without one, and because it is necessary to provide the service you asked for. You can withdraw consent at any time by deleting your account, which is as easy to do as it was to give. Withdrawing does not undo processing that already happened. Using your chats to train our models is a separate, optional consent, described below.

Helping improve Laabam AI

Help improve Laabam AI, in Settings, is off unless you turn it on. While it is on, we may use the chats you have from then on to train and improve our models:

• Before a chat is used, we remove the email addresses, phone numbers, Aadhaar, PAN, card and account numbers, IP addresses, and passwords and keys that we can detect. Detection is automatic and can miss things, such as names or addresses, so leave out what you would not want read.
• Authorised Laabam staff may read these chats, with your account's email and the chat's title, to choose what is used. Chats our automatic checks flagged for misuse are not used.
• Files and images you attach are not used, and neither are answers that relied on a web search or on a page you linked.
• Turn it off at any time. From then on none of your chats goes into new training data, including the ones you had while it was on. Models already trained on them are not changed. Deleting your account also deletes your chats.

We record when you turn it on or off and which wording you saw, so we can show that you agreed.

Where your messages go

• The model. Laabam Agni runs on GPU servers we rent from RunPod. They can be in data centres outside India, including the United States. Your messages are sent there to produce an answer. They are not used to train our models unless you turn on Help improve Laabam AI in Settings (see Helping improve Laabam AI). Messages sent through the API go there the same way.
• Web search. Many questions are also sent to a search engine: anything that ends in a question mark, starts with a question word such as what, who or how, or mentions news, prices or dates. Your question is sent word for word to Brave Search, with your country and, for a local question, the city of your time zone; where Brave finds nothing, to DuckDuckGo or Google News. The pages found are fetched and read. The text of files you attach is never sent to a search engine. Avoid putting anything confidential in a question.
• Pages you link. If you paste a link or a website name, we fetch up to three such pages so the model can read them.
• Laabam Bots. A question to one of the ready-made bots goes to Laabam Agni in the same way. When a bot researches, the model writes its search queries from your question; we remove email addresses and phone numbers from them, and the model is told to leave out names and other personal details. The queries go to Brave Search, or DuckDuckGo or Google News, and the pages found, plus up to two pages named in your question, are fetched and read. Each answer is checked automatically before you see it, and a bot never sends, posts or buys anything on your behalf. Your questions to a bot and its answers are saved in your chat history, like your other chats, until you delete them.
• Product bots. If you connect one of your own Laabam products, such as Laabam.One or Laabam.site, to a product bot, that product gives us an access token, which we keep encrypted until you disconnect. When you ask a product bot something, it reads what it needs from your account in that product, and that data goes to Laabam Agni in the same way as a message, never to another AI provider. It changes nothing in the product without your approval in the chat, and the product keeps its own record of every change. We record which of the product's tools the bot used, when, and whether it worked, but not the data it read or wrote. Product bot chats are not saved.
• Voice input. The microphone button uses your browser's own speech recognition. In Chrome the recording goes to Google, in Edge to Microsoft and in Safari to Apple, under their terms. We receive only the text.
• Typing Tamil or Hindi in English letters. When you switch it on in a message box (the அ button), each word you type in English letters is sent from your browser to translator.laabam.ai, Laabam's own translator, which answers with its spellings in Tamil or Hindi. It receives the word you are typing, or, when you tap "Write in தமிழ்", the English words of what you pasted, never the rest of your message, and does not store them; its server records how many words were asked for, not which. Spellings you pick are remembered in your browser only.
• Payments. If you buy Plus, Razorpay processes the payment and the monthly renewal. You give your card, UPI or bank details to Razorpay, in its own checkout window.

Where it is stored

Accounts, chats, files, usage, invoices and the request log are held in Supabase, in its Tokyo (ap-northeast-1) region, with row-level security so one account cannot read another's rows. The website runs on Vercel, whose servers also process requests in the United States. Our staff console keeps its reviewers' notes on training chats in its own database. These services process data for us under their terms; we share chats only with the services named on this page, and otherwise only where the law requires it.

Cookies and browser storage

We use only the cookies the service needs to work:

• Sign-in cookies, set through our authentication provider (Supabase), keep you signed in.
• A free-token counter, for visitors who are not signed in, makes the free daily allowance work. It holds the date and a number, not your messages.

Your answer to the cookie notice and your chat display choices (font size and width) are kept in your browser's local storage, and a new chat's first message stays in its session storage for a moment while the chat opens. We use no analytics, advertising or tracking cookies. Two things load from other companies: when an answer lists its sources, your browser fetches each site's small icon from Google's icon service, which sees your IP address and the sites listed; and Razorpay's checkout window, when you buy Plus, may set its own cookies for payment security.

How long we keep it

Chats stay until you delete them or delete your account. Daily token counts are deleted after 90 days. Rate-limit records are deleted a day after they expire. The request log, including any flagged message, is deleted automatically after 180 days; if you delete your account, its entries stay until then but are no longer linked to your account. A chat that was flagged keeps a mark, without its text, so it is never used for training; the mark goes when the chat is deleted. Your Help improve Laabam AI choices are kept for as long as your account exists. A product connection's token is deleted when you disconnect it, and the record of which tools a product bot used is kept for as long as your account exists. Invoices and payment records are kept for as long as tax law requires (currently about six years), even after you delete your account. Deleted data can stay in our providers' backups for a short time before they are overwritten. We do not keep personal data for longer than the purpose it was collected for requires.

Your rights

Under the DPDP Act you may:

• Access a summary of the personal data we process about you and who we have shared it with.
• Correct, complete, update or erase your personal data.
• Raise a grievance with us, and have it answered.
• Nominate someone to exercise these rights for you if you die or cannot act for yourself.

Much of this you can do yourself: your chats are visible in the app, and any chat can be deleted from the sidebar, with any file it holds. Deleting your account removes the account, every chat and message in it, your projects, every file you uploaded and your API keys and usage records, and cancels Plus; invoices are kept, as tax law requires. It cannot be undone. On the website this is under Settings, and in the mobile app under Account. For anything else, write to the Grievance Officer below from your account's email address.

Grievance Officer

If you are unhappy with how we handle your data, or you want to exercise a right above, contact our Grievance Officer:

We acknowledge a complaint within 24 hours and resolve it within 30 days, and within 15 days where the Intermediary Guidelines require it. If you are not satisfied with our answer, or we do not answer in time, you may complain to the Data Protection Board of India.

Children

Laabam AI is for people aged 18 or over; under Indian law anyone younger is a child. We do not knowingly process a child's personal data, and we do not track children, monitor their behaviour, or direct advertising at them — we do not advertise at all. If you believe someone under 18 has an account, tell the Grievance Officer and we will delete it.

Keeping it safe

Connections are encrypted in transit, data is encrypted at rest by our processors, access to production systems is limited to the people who need it, and chats are isolated per account by row-level security. No system is perfectly secure, so if a breach affects your personal data we will tell you and the Data Protection Board of India, as the DPDP Act requires.

What we do not do

We do not sell your personal data, we do not show advertising, and we do not profile you for marketing.

Changes

If we change how data is handled, this page changes with it and the date at the top is updated.