Privacy Policy

1. Who we are and what this policy covers

Consciousnx is operated by TealSquare Technologies Private Limited, a company incorporated in India. For the cloud account service and this website, TealSquare is the data controller (or "data fiduciary" under the Indian Digital Personal Data Protection Act, 2023).

This policy covers: (a) your use of this website; (b) the Consciousnx desktop application installed on your own device; and (c) the cloud account used to register, verify your email, sign in, and manage your subscription. Enterprise on-premise deployments are addressed separately in section 12.

2. Our privacy-first approach

Consciousnx is designed so that your prompts, documents, and AI outputs are processed locally - on your device or within your own infrastructure. We do not send your prompts or documents to external large-language-model providers, and we do not use your content to train models.

The application does not include third-party analytics, advertising, behavioural tracking, or crash-reporting software. We collect only the limited operational and account information described below, and we aim to minimise it.

3. Information we collect

3.1 Account information

When you create a Consciousnx account we collect and store your name, email address, an optional phone number, and a securely hashed version of your password (we never store your password in plain text). We also store your email-verification status, the time of your last sign-in, and your subscription tier, status, and dates. Where a subscription has been arranged, we may store related billing status information (such as method, status, amount, and currency) as a record.

3.2 Content you process

Your prompts, conversations, uploaded documents, and AI outputs are processed locally on your device or, for features you choose to enable, within the backend you or your organisation operate. This content is not transmitted to TealSquare for the consumer desktop application, is not shared with external AI providers, and is not used to train models.

3.3 Web search (optional)

If you choose to use the optional web-search feature, the search query you enter is sent to a third-party search provider so that results can be returned. Depending on the configuration of your deployment, that provider may be Google, Serper.dev, SerpAPI, or DuckDuckGo. Only the query you submit is sent for this purpose; your wider conversation and documents are not. If you do not use web search, the application does not contact a search provider.

3.4 Application operational data

To keep the desktop application working, it exchanges limited operational data with the backend it connects to: a randomly generated device identifier, a device name (typically your computer's host name), and capability flags used to route work to your device. To deliver updates, the application periodically checks for a newer version, sending only your operating-system platform (for example, "windows", "linux", or "macos"). If you enable folder synchronisation, file metadata and extracted text are sent to your configured backend so that the feature can function.

3.5 Information you submit through forms

When you submit the contact form, we collect the name, email address, phone number, plan interest, organisation (optional), and message you provide, and deliver it to our team by email so we can respond.

3.6 Website usage data

This website loads Google Tag Manager and Google Fonts. As a result, Google may receive your IP address and may set cookies as described in section 5. Our servers may also keep limited technical logs needed to operate and secure the site.

4. How we use information

• To create and administer your account and authenticate you when you sign in.
• To send transactional emails such as email-verification codes, password-reset codes, and account or security notifications.
• To provide, maintain, and secure the service, and to manage subscriptions and respond to your enquiries.
• To detect, prevent, and address fraud, abuse, and security incidents.
• To comply with legal obligations and enforce our terms.

We rely on the following bases for processing, as applicable: performance of our contract with you, our legitimate interests in operating and securing the service, your consent (which you may withdraw), and compliance with legal obligations.

5. Cookies and similar technologies

We use a single essential first-party cookie, cnx_session, to keep you signed in. It is set as HttpOnly and (on secure deployments) Secure, with SameSite=Lax, and contains a signed session reference rather than your personal details. This cookie is necessary for the authenticated parts of the service to function.

This website also loads Google Tag Manager and Google Fonts, which may set cookies or receive your IP address. The web application stores certain preferences and, where applicable, access keys locally in your browser's storage so the application can operate; this data stays in your browser. We do not use cross-site advertising cookies.

6. How we share information

We do not sell your personal data. We share information only with service providers that help us run the service, and only as needed:

• Cloud database hosting - account records for the cloud service are stored with our managed database provider.
• Email delivery - transactional emails are sent through our email/SMTP provider.
• Search providers - only when you use web search, and only the query you submit (see section 3.3).
• Google - through Google Tag Manager and Google Fonts loaded on this website.
• Hosting and infrastructure - providers that host the cloud service, and, if you enable it, an optional cloud inference provider you configure.

We may also disclose information where required by law, to protect our rights, users, or the public, or in connection with a corporate transaction such as a merger or acquisition.

7. International data transfers

Some of our service providers may process information in countries outside India. Where that happens, we take steps to ensure your information continues to be protected in a manner consistent with this policy and applicable law.

8. Data retention

We keep your account information for as long as your account is active and as needed to provide the service. Email-verification and password-reset codes are short-lived and expire within minutes. Contact-form messages are retained for as long as needed to handle your enquiry. We retain limited technical logs for a limited period for security and operational purposes. When you ask us to delete your account, we remove your account record as described in section 10.

9. Security

We use reasonable technical and organisational measures to protect personal data. Passwords are stored only as salted hashes using a modern algorithm (Argon2id), and traffic to the cloud service is protected with transport encryption. No system is perfectly secure, and we cannot guarantee absolute security.

Because Consciousnx is local-first, some data - including any access keys or credentials saved by the application - is stored on your own device or in your browser. You are responsible for safeguarding your devices, accounts, and credentials.

10. Your rights and choices

Subject to applicable law, you may request to access, correct, update, or delete your personal data, or to withdraw consent where we rely on it. To exercise these rights, please use our contact form. We may need to verify your identity before acting on a request, and we will respond within the timeframes required by applicable law.

11. Children's privacy

Consciousnx is not directed to children, and we do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us so we can remove it.

12. Enterprise and on-premise deployments

For enterprise customers who deploy Consciousnx on their own servers or in an air-gapped environment, the customer operates the system and is the data controller for the data processed within it. In those deployments, TealSquare does not access the customer's data, and the customer's own privacy notices and our written agreement govern that processing.

13. Third-party links and services

Our website and service may link to or rely on third-party services (for example, search providers used by the web-search feature). Those services are governed by their own privacy policies, and we are not responsible for their practices. We encourage you to review their policies.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the service after an update constitutes acceptance of the revised policy.

15. How to contact us

If you have questions about this Privacy Policy or how we handle your information, or if you wish to exercise your rights, please reach us through our contact form. TealSquare Technologies Private Limited is the entity responsible for your information under this policy.