Privacy policy

This policy covers two things: the enquiry form on docs-ai.trigunai.com, and the documents and questions we handle for customers of the Docs AI service. It is written to follow India's Digital Personal Data Protection Act, 2023, the DPDP Rules, 2025, and the IT Act, 2000.

Who we are

TrigunAI Innovations Private Limited, Patna, Bihar ("TrigunAI", "we").

Part 1: enquiries from this website

For enquiries, TrigunAI decides why and how the data is used, so we are the Data Fiduciary.

Please do not put confidential documents, patient details or passwords in the form. We share enquiry data only with service providers who help us respond: our cloud host Microsoft Azure (this website currently runs in an Azure data centre outside India) and WhatsApp Business by Meta for messages. We never sell it. If you do not become a customer, we delete it within 12 months. Product updates on WhatsApp are optional and separate from the enquiry; reply STOP to end them.

Part 2: customers' documents, and the questions their students and staff ask

• Roles. The organisation that buys Docs AI (an institute, hospital, firm or company) decides which documents to upload and who may ask questions, so it is the Data Fiduciary for any personal data involved, including the details and questions of its students, staff or clients. TrigunAI processes that data only on the customer's behalf and instructions, as its Data Processor, under a written agreement with a data processing schedule.
• Where processing happens. Documents, search indexes and question logs are stored and processed in India: on GPU and storage servers we manage in India (at an Indian cloud provider and/or in Microsoft Azure's India regions), or on the customer's own server if it chooses the Private Server plan. Answers are written by open-source AI models running on those servers. We do not send customer documents or questions to public AI chatbots or foreign AI services such as ChatGPT or Gemini, and we do not use any third-party AI service for reading scanned pages unless the customer agrees to it in writing.
• WhatsApp. If a customer chooses the WhatsApp channel, questions and answers sent on WhatsApp pass through Meta's WhatsApp Business Platform, which may process them outside India. The web app does not use Meta.
• Separation. Each customer's documents are kept in separate storage with a separate search index. On the Institute plan the AI model runs on a GPU server shared by several customers; it reads only the one customer's documents for each question and keeps nothing from one customer for another. Professional and Private Server plans run on a dedicated server.
• No training for anyone else. We never use a customer's documents, or its users' questions and answers, to train or improve AI models for any other customer or for ourselves. Fixes we make for a customer (for example, re-reading a badly scanned page) are used only in that customer's assistant.
• What we ask customers not to upload. Patient records, other people's personal files, identity documents, and documents the customer does not own or have permission to use. Docs AI is meant for notes, papers, SOPs, circulars, policies and manuals.
• Students and children. Many coaching and school users are under 18. The customer is responsible for informing students and, where the law requires, getting a parent's consent. By default, users log in with a registered mobile number or ID; the admin sees the most-asked and unanswered questions as totals, not a profile or score of any individual student.
• Retention. The text of questions and answers shown in the customer's admin panel is kept for 90 days by default, or for the period the customer chooses in writing. Access and processing logs (which account asked, when, and which document and page were cited) are kept for one year, as the DPDP Rules, 2025 require for security and processing logs, and then deleted. Documents are kept while the service runs. When a customer cancels, we give it an export if it asks, and delete its documents, indexes and question logs within 30 days; copies in backups are overwritten within a further 30 days.
• Access by our staff. Our team opens a customer's documents or question logs only to set up, test, fix or support the service, on the customer's instruction. Access is limited to named staff and is logged.
• Sub-processors. An Indian GPU cloud provider (India region), Microsoft Azure (India regions) for the customer service, and Meta's WhatsApp Business Platform only where WhatsApp is chosen. We name the exact providers in each customer's agreement and tell customers before adding a new one.

If you are a student, staff member or client of one of our customers and have a question or request about your data in Docs AI, please contact that organisation first. You may also write to us and we will pass it on and help them respond.

Your rights

You can ask to see your data, correct or update it, delete it, withdraw consent or nominate someone to act for you. For enquiries, quote your mobile number or enquiry number (DAI-xxxx).

Security

Data travels over encrypted connections and is stored in access-controlled, encrypted systems. Each customer has separate credentials, and admin access is limited to people the customer names. If a breach affects you, we will inform you, our customer and the authorities as the law requires; we tell an affected customer without delay so it can meet its own duties.

Contact and grievances

Grievance contact: Deepak, Founder, TrigunAI Innovations Private Limited, Patna, Bihar. Email deepak@trigunai.com or WhatsApp +91 91352 55107. We aim to reply within 15 days and always within 90 days. If you are not satisfied, you may complain to the Data Protection Board of India.

Changes

If we change this policy, we will update the version date above and tell customers in advance of any change that affects their documents.