Privacy Policy

Effective from 26 September 2026.

This policy explains what personal data ANKY.AI ("ANKY.AI", "we") collects when you use https://anky.ai, why we collect it, who we share it with and the rights you have. It is written to comply with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules; visitors from the European Economic Area and the United Kingdom also have the rights described in section 10.

1. Data we collect

• Account data: name, email address, password (stored only as a salted hash), profile details you add, your preferred currency and theme, and security settings such as two-factor authentication.
• Purchase data: the items you buy, prices and taxes, the country and, for India, the state you tell us you buy from (needed for the tax invoice), an optional business name and GSTIN, invoice and credit-note records, coupon use and refund requests.
• Payment data: payments are handled by Razorpay and Stripe. We receive a payment reference, the payment method type (for example "card" or "UPI"), its status and, where the partner provides it, the last digits of a card. We never receive or store full card numbers, CVV codes, UPI PINs or bank passwords.
• Download and security data: when you download a purchase we record the time, the file and version, a random identifier stored in your browser to recognise the device, your browser type and a one-way hash of your IP address. These records enforce the limits in the Fair Usage Policy (20 downloads a day, 5 devices) and protect your library from misuse. Sign-in events, password resets and similar security actions are logged in the same way.
• Creator data: if you sell on ANKY.AI we additionally collect your storefront profile, the details you submit in your application, your PAN, GSTIN and address for tax reporting, and the bank account details needed for payouts. Bank details are encrypted at rest and only the last four digits are shown after entry.
• Communications: emails you send us, support and grievance tickets, reviews, questions and answers you post.
• Technical data: server logs (request path, status, timestamp, user agent and IP address, kept briefly for security and debugging), and privacy-preserving analytics from Cloudflare that measure page performance without cookies or cross-site tracking.

We do not collect data from children knowingly; ANKY.AI is intended for adults and for minors only under adult supervision.

2. How we use it

• to create and secure your account and deliver the products you buy;
• to issue tax invoices, collect and report GST, keep accounts and comply with Indian tax and company law;
• to run the marketplace: reviews, creator storefronts, payouts, fraud prevention and enforcement of our policies;
• to answer support requests and grievances;
• to send transactional emails such as verification links, receipts, refund confirmations and security alerts, which cannot be switched off while you have an account;
• to send product news and offers only if you subscribe, with an unsubscribe link in every message;
• to understand how the site is used, in aggregate, and improve it.

3. Legal basis and consent

We process data to perform our contract with you (your account, your purchases, payouts to creators), to meet legal obligations (tax invoices, accounting records, responding to lawful requests), for legitimate purposes such as security and fraud prevention, and with your consent where the law requires it, for example for the newsletter. You may withdraw consent at any time; withdrawal does not affect processing that already took place or processing that we must carry out by law.

4. Who we share it with

We share personal data only with service providers that process it on our instructions and under contract:

• Razorpay Software Private Limited (India) and Stripe to process payments, refunds and chargebacks;
• Cloudflare, Inc. to serve the website, protect it from attacks, store product files and media (Cloudflare R2), and provide cookieless performance analytics;
• our email provider to deliver transactional and subscription emails;
• an error-monitoring service, when enabled, which receives technical details of failures and never your passwords or payment data;
• creators, who see the country and the licence purchased for their own sales, and your name and email only when you contact them through a support request;
• auditors, accountants and legal advisers bound by confidentiality;
• public authorities when the law requires it, including tax authorities and lawful requests under the Information Technology Act, 2000.

We do not sell personal data and we do not share it with advertisers.

5. International transfers

Our servers are in India and our storage and content delivery use Cloudflare's global network; payment partners may process data in other countries. Where data leaves India we rely on contractual safeguards with the provider and only transfer it to countries permitted under Indian law.

6. Cookies and local storage

• A session cookie keeps you signed in. It is essential and is deleted when you sign out or the session expires.
• A preference cookie remembers your theme and currency.
• A device identifier in your browser's local storage lets us apply the device limit on downloads.
• Cloudflare's analytics script measures page performance without setting cookies.

We do not use advertising cookies or third-party tracking pixels. You can clear cookies and local storage in your browser at any time; doing so signs you out and may count a later download as a new device.

7. How long we keep data

• Account data: for as long as your account exists, then deleted or anonymised within 90 days of closure, except where we must keep it.
• Orders, invoices, credit notes and payout records: 8 years from the end of the financial year concerned, as required by Indian tax and accounting law.
• Download and security logs: 24 months.
• Support and grievance correspondence: 3 years after the ticket is closed.
• Newsletter data: until you unsubscribe, plus a record of your unsubscribe request.

8. Security

Connections are encrypted with TLS. Passwords are hashed, bank details are encrypted, product files are stored privately and delivered only through signed links tied to the buyer's account, and administrative access is limited to named staff with two-factor authentication. Financial records are append-only. No system is perfectly secure; if we learn of a breach affecting your data we will notify you and the Data Protection Board of India as the law requires.

9. Your rights

You can:

• see and update most account data from your account settings;
• ask for a copy of the personal data we hold about you;
• ask us to correct inaccurate data or to delete data we no longer need to keep;
• withdraw consent for the newsletter at any time using the unsubscribe link;
• nominate a person to exercise your rights if you are unable to;
• raise a grievance with our grievance officer (section 12) and, if you are not satisfied, with the Data Protection Board of India.

Requests go to [email protected]. We verify that the request comes from the account holder and respond within 30 days. Deleting an account does not delete invoices or other records we must keep by law; those are kept in a restricted archive and used for nothing else.

10. Visitors from the EEA and the UK

If the GDPR or UK GDPR applies to you, the legal bases above correspond to contract, legal obligation, legitimate interests and consent; you have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your local supervisory authority. Transfers to India rely on your consent to the contract and standard contractual clauses with our providers.

11. Third-party sites and AI tools

Products in the AI Tools and Deals sections are operated by third parties under their own privacy policies; check them before creating an account with the provider. Links to other websites are provided for convenience and we are not responsible for their practices.

12. Grievance officer and contact

• Grievance Officer: ANKY.AI (write "Grievance" in the subject line)
• Email: [email protected]
• Address: ANKY.AI, Unit No. 324, 3rd Floor, Centura Square Building, Plot No. B-44 & B-44A, S.G. Barve Road, Wagle Estate, Thane, Maharashtra 400604, India

Privacy grievances are acknowledged within 24 hours and resolved within 15 days.

13. Changes

We update this policy when our practices or the law change. The date at the top identifies the current version; significant changes are announced on the site or by email.