Privacy Policy for Merdot AI
Effective Date: July 5, 2026
Last Updated: July 5, 2026
1. Introduction and Scope
This Privacy Policy explains how Merdot Technologies collects, uses, stores, processes, discloses, protects, and manages personal information when you access or use Merdot AI, including our website at merdotai.com, our Android mobile application, our software interfaces, our tools, our subscription products, our ready-made AI agents, and our related services.
Merdot AI is an independent consumer artificial intelligence assistant. It helps people chat, write, study, research, work, understand documents and images, generate images, and get help with everyday tasks in English, Hindi, and Gujarati.
This Privacy Policy applies to all users of Merdot AI, whether you access the service through the website or the mobile application, and whether you use a free plan or a paid subscription plan.
Please read this Privacy Policy together with our Terms and Conditions. By creating an account, signing in, or otherwise using Merdot AI, you confirm that you have read and understood this Privacy Policy and that you agree that your information will be handled as described here.
If you do not agree with this Privacy Policy, please do not use Merdot AI.
2. Definitions
For the purpose of this Privacy Policy, the following terms have the meanings set out below.
"Merdot AI" means the consumer artificial intelligence product, application, platform, website, mobile app, AI assistant, AI agents, tools, features, and subscription offerings provided under the Merdot AI brand.
"Merdot," "Merdot Technologies," "we," "our," or "us" refers to Merdot Technologies, the company that builds and operates Merdot AI, based in Ahmedabad, Gujarat, India, and founded by Rajat Jangid.
"User," "you," or "your" means any person who accesses, registers for, subscribes to, interacts with, or otherwise uses Merdot AI.
"Personal data" or "personal information" means any data about an individual who is identifiable by or in relation to such data, as understood under India's Digital Personal Data Protection Act, 2023.
"Input" means the prompts, messages, instructions, questions, files, documents, PDFs, images, screenshots, voice inputs, text, feedback, and other content that you submit to Merdot AI.
"AI Output" means any answer, text, summary, explanation, translation, draft, plan, code, recommendation, generated image, document analysis, or other result generated through Merdot AI in response to your Input.
"Memory" means the personal facts, preferences, and context that Merdot AI may store to personalize your experience across conversations, as described in Section 8.
"Services" means, collectively, Merdot AI and all of its features, interfaces, agents, and subscription products.
3. Who We Are (Data Fiduciary and Controller)
Merdot AI is a consumer artificial intelligence product created and operated by Merdot Technologies.
Merdot Technologies is based in Ahmedabad, Gujarat, India, and was founded by Rajat Jangid.
For the purposes of India's Digital Personal Data Protection Act, 2023, Merdot Technologies is the "Data Fiduciary" that determines the purpose and means of processing your personal data. In jurisdictions that use the term, Merdot Technologies acts as the "data controller" for the personal information described in this Privacy Policy.
If you have any questions about how we handle your personal data, or if you wish to exercise any of your rights, you may contact us using the details in Section 19 and Section 20.
4. Information We Collect
We collect different categories of information depending on how you use Merdot AI. We aim to collect only what we reasonably need to provide, secure, personalize, and improve the Services.
4.1 Account information
When you create an account or sign in to Merdot AI, we may collect:
Your name or display name
Your email address
Your password or other authentication credentials
Your profile photo, if you upload one
Your language, country, and region preferences
Your account status, plan type, and subscription status
Your login history and basic support history
If you sign in using a third-party sign-in service, that service may share a limited profile with us, such as your name, your email address and whether it is verified, your profile picture, your language or locale preference, and an account identifier used only to link and secure your sign-in. We never receive your password for that third-party service, and we request only the minimum profile needed to create and protect your account. You can revoke access at any time from the settings of that third-party service.
4.2 Chat content and AI interactions
When you use Merdot AI, we may collect and process the content of your interactions, including:
Your prompts, questions, messages, and instructions
Your chat history and conversation metadata
Your selected mode, model label, or AI agent
Your search queries, where search features are used
The AI Outputs generated in response to your Input
Feedback you provide on responses, such as thumbs up or thumbs down
We process this information to generate responses, maintain your chat history, personalize your experience, enforce usage limits, prevent abuse, provide support, and keep the service reliable.
4.3 Uploaded files, documents, and images
If you use document understanding, PDF understanding, image understanding, homework or camera features, or other analysis features, we may process:
The file name, file type, and file size
The content of the file, document, PDF, or image
Text extracted from a file or image
Metadata attached to the file
The AI-generated summary or analysis of the file
Your instructions related to the file
You should not upload content that is sensitive, confidential, unlawful, or belonging to a third party, unless you have the right and the permission to do so.
4.4 Generated images
Merdot AI includes an AI image generation feature. When you generate images, we may process and store:
The text prompt you provided
Any reference input you provided
The generated image or images
Related metadata, such as time of generation and usage counts
Free users can generate a limited number of images per day, and we may record image-generation counts to enforce that limit and prevent abuse.
4.5 Memory and personalization data
Merdot AI can remember certain facts and preferences to personalize your experience across conversations. This Memory may include information you tell the assistant about yourself, your goals, your preferences, your writing style, or your ongoing projects.
Memory is described in more detail in Section 8. You can request deletion of your Memory, and Memory is deleted when you permanently delete your account.
4.6 Voice input data
If you use voice input or read-aloud features, we may process the audio or the transcribed text of your spoken input so that it can be converted into a prompt and answered. We use this only to provide the feature and to keep it reliable.
4.7 Usage and device data
To operate, secure, and improve the Services, we may automatically collect technical and usage information, including:
Your IP address
Your device type, operating system, and app version
Your browser type, where you use the website
Device identifiers
Approximate location derived from your IP address
Session logs, error logs, and crash reports
Feature usage, page views, clicks, and time spent
Message counts, model or mode usage, search usage, and file usage
Rate-limit and abuse-prevention data
4.8 Payment and subscription information
When you purchase a paid subscription, add-on, or credit pack, our payment partner processes your payment. In connection with a purchase, we may receive or store:
Your subscription plan and the amount paid
Payment status and transaction identifiers
Invoice details and tax details
Your billing name, billing email, and, where required, billing address
Applicable tax information
We do not intentionally store full card numbers, card verification values, UPI PINs, or banking passwords. Sensitive payment details are handled directly by our third-party payment partner under its own security standards. For Indian users, digital subscriptions may attract applicable taxes, and the price shown to you at checkout is inclusive of taxes.
4.9 Cookies and similar technologies
We use cookies, local storage, session storage, and similar technologies as described in Section 16. Your device may also keep a local copy of your chats on the device itself so that the app can load quickly and work smoothly.
4.10 Camera and photos
Some features let you use your device camera. For example, the "photo template" features let you take a selfie and place your picture into a ready-made scene, such as a portrait, a celebration or sports scene, or a stylised character. When you use them, you take a photo with your camera and we use that photo to create the image you asked for.
We use your photo only to make the images you request. We do not use it for facial recognition, to identify you, to train AI models, or for advertising, and we never sell it. Please use only your own photo.
Your photos and the images you create are deleted when you permanently delete your account, and you can delete images at any time.
5. How We Use Your Information
We use the information we collect for the purposes described below, and only where we have a valid basis to do so under applicable law.
5.1 To provide and operate the Services
We use your information to:
Generate AI responses to your prompts
Maintain your conversations and chat history
Process your documents, PDFs, and images
Generate images from your prompts
Provide voice input and read-aloud features
Run AI agents and search features
Personalize responses using your Memory and preferences
Deliver subscription benefits and enforce plan limits
Maintain access to your account
5.2 To personalize your experience
We use your Memory, preferences, and past interactions to make the assistant more helpful to you over time, to tailor responses to your language and context, and to reduce the need for you to repeat yourself.
5.3 To operate subscriptions and billing
We use your information to verify payment status, apply plan limits, manage upgrades and downgrades, generate invoices, handle renewals, detect payment failures, prevent misuse of paid features, and provide billing support.
5.4 To keep the Services safe and secure
We use your information to detect and prevent abuse, spam, fraud, automated scraping, and other harmful or unlawful activity, to enforce rate limits and fair-use rules, to investigate suspicious activity, and to protect accounts, users, and Merdot AI.
5.5 To improve product quality
We may use usage data, error data, feedback, and aggregate analytics to fix bugs, improve response quality, improve speed and reliability, strengthen security, and build new features. Where we use content to improve the Services, we seek to minimize and, where practical, aggregate or de-identify the data used.
5.6 To provide customer support
We use your account details, support history, and relevant interaction data to respond to your questions, resolve issues, and communicate with you about your account.
5.7 To communicate with you
We may send you service messages about your account, your subscription, payment issues, security alerts, and important changes to the Services or to our policies. Where permitted, we may also send you product updates, offers, and announcements, and you can opt out of promotional messages as described in Section 15.
5.8 To meet legal and compliance obligations
We may process your information to comply with applicable laws, respond to valid legal requests, maintain tax and accounting records, handle disputes, enforce agreements, and protect our legal rights and the rights of others.
6. Legal Bases and Your Consent
We process personal data in accordance with India's Digital Personal Data Protection Act, 2023 and other applicable laws.
Depending on the situation, we rely on one or more of the following bases to process your personal data:
Your consent, which you provide when you create an account, submit content, enable a feature, or otherwise agree to this Privacy Policy
The necessity of processing to provide the Services you have requested and to perform our contract with you
Certain legitimate uses recognized under applicable law, such as preventing fraud and abuse, ensuring security, and complying with legal obligations
Compliance with law, including tax, accounting, and lawful requests from authorized bodies
Where we rely on your consent, you may withdraw that consent at any time as described in Section 17. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal, and it may mean that some features of Merdot AI can no longer be provided to you.
7. How AI Processing Works
Merdot AI is a product experience built by Merdot Technologies. To generate responses, understand documents and images, generate images, and power certain features, Merdot AI uses trusted third-party artificial intelligence model providers to process your prompts and related content.
When you send a prompt, upload a file or image, or use a feature powered by an AI model, the relevant Input, and sometimes related context such as parts of your recent conversation or your Memory, may be transmitted to a third-party AI model provider so that a response can be generated and returned to you.
Merdot AI may route different requests to different AI model providers depending on factors such as the type of request, the feature or agent selected, performance, cost, reliability, availability, and safety requirements. For example, a simple chat request may be handled differently from a complex reasoning request, a document analysis request, an image understanding request, or an image generation request.
We select AI model providers that we consider reputable and that are expected to handle data responsibly and under appropriate contractual and security safeguards. We do not permit our AI model providers to use your content for their own independent advertising to you.
The internal names shown inside Merdot AI, such as the labels used to describe modes, speeds, or agents, are Merdot's own product labels chosen to make features easy to understand. They are not necessarily the names of any underlying model or provider, and their use does not imply any endorsement, sponsorship, or affiliation with any third-party provider.
8. Memory and Personalization
Merdot AI can remember certain information about you to make the assistant more useful across conversations. This feature is referred to as Memory.
8.1 What we remember
Memory may include facts, preferences, and context that you share with the assistant, such as your goals, interests, preferred tone or writing style, your language preferences, and details about ongoing tasks or projects. Merdot AI may create or update Memory automatically from your conversations, or you may ask it to remember or forget specific things.
8.2 Memory is not shown to you as a live feed
Memory is used in the background to personalize your responses. It is not always presented to you as a visible list within the chat. You can ask the assistant what it remembers, and you can request that specific items or all of your Memory be deleted.
8.3 Retention of Memory
Memory is kept while your account is active. It is not automatically expired over time. Memory is deleted when you permanently delete your account, subject to the retention rules in Section 11.
8.4 Your control over Memory
You can request correction or deletion of your Memory at any time by asking the assistant or by contacting us using the details in Section 20. You remain responsible for the accuracy of the information you choose to share with the assistant.
9. How We Share Your Information
We do not sell your personal data.
We share your information only in the limited circumstances described below, and only to the extent needed for the relevant purpose.
9.1 With service providers and processors
We share information with trusted service providers that help us operate Merdot AI, subject to appropriate contractual and security obligations. These may include:
Third-party AI model providers, to generate responses and process your Input as described in Section 7
Cloud hosting and infrastructure providers
Database and storage providers
Our payment partner, to process subscriptions and payments
Analytics providers, to understand and improve usage
Email and communication providers
Customer support tools
Security and abuse-prevention providers
We require our service providers to process your information only for the purposes for which we engage them, and to protect it appropriately.
9.2 For legal and safety reasons
We may disclose information if we reasonably believe it is necessary to comply with applicable law, to respond to a valid legal request from an authorized body, to enforce our Terms and Conditions, to prevent fraud, abuse, or security threats, or to protect the rights, property, or safety of Merdot Technologies, our users, or the public.
9.3 In connection with a business transfer
If Merdot Technologies is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will require the recipient to honor the commitments in this Privacy Policy or will notify you where required by law.
9.4 With your direction
We may share information when you ask us to, or when you use a feature that inherently involves sharing, such as exporting or sending content that you create.
9.5 We do not sell personal data
We do not sell your personal data, and we do not share your conversations with advertisers for their own advertising purposes.
10. Data Retention
We retain your personal data only for as long as your account exists or as long as reasonably necessary for the purposes described in this Privacy Policy.
Your account content, including your conversations, uploaded files, generated images, and Memory, is retained while your account is active. We do not automatically expire your Memory over time.
Your data is deleted when you delete it. When you permanently delete your account, we delete your associated personal data within thirty (30) days, except for the limited records described below.
Your device keeps its own local copy of your chats on the device itself. Deleting your account removes your data from our systems, but you may separately clear the local copy from your device, for example by clearing the app's local data or uninstalling the app.
We may retain certain records for longer where required to comply with legal, tax, accounting, dispute-resolution, fraud-prevention, or security obligations. Such records, for example invoices, payment records, and compliance logs, are retained only for the period required and are then deleted or anonymized.
11. Data Deletion and Account Closure
You can delete your account at any time from within Merdot AI or by contacting us using the details in Section 20.
When you permanently delete your account:
Your account, conversations, uploaded files, generated images, and Memory are scheduled for deletion from our active systems and are removed within thirty (30) days.
Backups may take slightly longer to cycle out through our normal backup rotation, after which the data is no longer recoverable.
Certain records that we are legally required to keep, such as invoices and payment records, may be retained for the legally required period and are then deleted or anonymized.
You remain responsible for clearing any local copy of your chats stored on your own device.
12. Data Security
We use reasonable technical and organizational measures designed to protect your information against unauthorized access, disclosure, alteration, and loss. These measures may include:
Encrypted connections for data in transit
Authentication and access controls
Secure handling of passwords and credentials
Infrastructure monitoring and logging
Abuse detection and rate limiting
Restricted administrative access
Secure handling of service credentials and keys
We collect your IP address and device and browser information at sign-in for security and fraud prevention, which helps us detect suspicious sign-ins, protect accounts, and prevent abuse.
No method of transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us promptly of any unauthorized use of your account.
13. Your Rights Under the DPDP Act
Subject to India's Digital Personal Data Protection Act, 2023 and other applicable laws, and subject to reasonable verification of your identity, you have the following rights in relation to your personal data:
Right to access: You may request a summary of the personal data we process about you and the processing activities undertaken.
Right to correction and updating: You may request that we correct inaccurate or misleading personal data and complete or update incomplete personal data.
Right to erasure: You may request that we delete your personal data where it is no longer required for the purpose for which it was collected, subject to legal retention requirements.
Right of grievance redressal: You may raise a grievance with our Grievance Officer about our handling of your personal data, and we will respond within the timelines required by applicable law.
Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time, with the effect described in Section 6.
Right to nominate: You may nominate another individual to exercise your rights in the event of your death or incapacity, as provided under the DPDP Act.
To exercise any of these rights, please contact us using the details in Section 20. We may need to verify your identity before acting on a request, and we may decline or limit a request where permitted or required by law.
14. Children's Privacy
Merdot AI is intended for a general audience, and certain features may be helpful for students.
If you are below the age of eighteen (18), you may use Merdot AI only under the supervision of, and with the consent of, a parent or legal guardian, and only where such use is permitted by applicable law. Where required by law, we process the personal data of a child only after obtaining verifiable consent from a parent or lawful guardian.
We do not knowingly use children's personal data in a way that is likely to cause harm, and we do not carry out tracking, behavioral monitoring, or targeted advertising directed at children. Parents and guardians are responsible for supervising a minor's use of Merdot AI. If you believe a child has provided us with personal data without appropriate consent, please contact us so that we can take appropriate action.
15. Marketing and Communications
We may send you service-related messages that are necessary to operate your account, such as messages about account activity, subscription status, payment issues, security alerts, and important policy changes. These messages are part of the Services and may not be opt-out.
Where permitted by law, we may also send you promotional messages about new features, offers, and announcements. You may opt out of promotional messages at any time using the unsubscribe mechanism in the message or by contacting us. Opting out of promotional messages does not stop transactional, security, or account-related messages.
16. Cookies and Similar Technologies
We and our service providers use cookies, local storage, session storage, and similar technologies to keep you signed in, remember your preferences and theme settings, support analytics, improve performance, detect fraud, and maintain security.
Your device may also store a local copy of your chats and certain settings so that the app loads quickly and works reliably offline or on slow connections.
You can control or disable cookies through your browser or device settings. If you disable certain cookies or local storage, some parts of Merdot AI may not work correctly, and you may need to sign in more often.
17. Withdrawing Consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time by adjusting the relevant setting, disabling the relevant feature, or contacting us using the details in Section 20.
Withdrawing consent does not affect the lawfulness of processing that took place before the withdrawal. After you withdraw consent, we will stop the relevant processing unless we have another lawful basis to continue, and some features may no longer be available to you.
18. International Data Transfers
Merdot Technologies is based in India. To provide the Services, we and our service providers, including AI model providers, cloud providers, and our payment partner, may process or store your information in India or in other countries.
Where your personal data is transferred outside India, we take steps to ensure that it remains protected and is handled in accordance with applicable law and appropriate contractual safeguards. By using Merdot AI, you understand that your data may be processed by service providers located in India or abroad, subject to those safeguards.
19. Third-Party Links and Services
Merdot AI may contain links to, or integrate with, third-party websites, tools, or services. This Privacy Policy does not apply to those third parties. We are not responsible for the privacy practices, content, or security of any third-party service. We encourage you to review the privacy policies of any third-party service before using it.
20. Grievance Officer and Data Protection Contact
In accordance with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and the rules made under it, we have designated a Grievance Officer who also serves as our point of contact for data protection matters.
Grievance Officer and Data Protection Contact
Merdot Technologies
Attention: Grievance Officer, Merdot AI
Email: contact@merdotai.com
Address: Ahmedabad, Gujarat, India
You may contact the Grievance Officer to raise a grievance, exercise your rights, or ask questions about how we handle your personal data. We will acknowledge and address your grievance within the timelines required by applicable law.
21. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, features, or legal obligations.
When we make material changes, we will update the "Last Updated" date at the top of this Privacy Policy and, where appropriate, notify you through a website notice, an in-app notice, email, or an account notification.
Your continued use of Merdot AI after an updated Privacy Policy takes effect means that you accept the updated Privacy Policy. If you do not agree with the changes, you should stop using the Services and may delete your account.
22. Contact Us
If you have any questions, requests, or complaints regarding this Privacy Policy or your personal data, please contact us:
Merdot Technologies
Founder: Rajat Jangid
Email: contact@merdotai.com
Address: Ahmedabad, Gujarat, India
Website: https://merdotai.com