← Back

Privacy Policy

Effective date: September 26, 2026

This Privacy Policy explains what Uddokta OS (“dekho.ai”) collects when you use the service, why, and the choices you have.

1. What we collect

  • Account data: email, name, password hash, plan, credit balance and usage counters, referral code.
  • Content you submit: tracked channel URLs, briefs, prompts, uploads, and the outputs generated for you.
  • Billing data: handled by our payment processor; we store a customer identifier and subscription status, not full card numbers.
  • Usage and device data: pages viewed, clicks and actions, referring site, approximate location derived from IP, browser and device type, timestamps, and error logs. Collected via PostHog and Google Analytics using cookies and similar technologies, and, where enabled, de-identified session replay with input fields masked.
  • Communications: messages you send us, bug reports and feedback.
  • Sign-in and connected-account data: if you sign in with Google, Facebook, Apple or another provider, we receive your name, email address, profile photo and account ID from that provider. If you connect a channel or social account for analytics, we receive the account details and statistics that platform shares with your permission (for example views, watch time, audience and engagement metrics), and we store the access tokens needed to keep that connection working.

2. Why we use it

  • to provide, secure, support and improve the service;
  • to process payments and manage subscriptions and credits;
  • to understand how the product is used and to develop new features;
  • to communicate with you about your account and the service;
  • to market dekho.ai to you (product updates, tips and offers by email or in-app) using your account and sign-in data. Where the law requires your consent for marketing we ask for it first, and you can opt out at any time using the unsubscribe link in any marketing email or by contacting us;
  • to improve the product and our marketing using sign-in, connected-account and usage data, usually in aggregated or de-identified form (for example, which kinds of creators use which features);
  • to detect, prevent and investigate abuse, fraud and security incidents;
  • to comply with legal obligations and enforce our Terms.

Our legal bases (where the GDPR or similar law applies) are performance of a contract, legitimate interests (product analytics, security, improvement, and marketing our own product to existing users), consent (non-essential cookies and analytics, and marketing where consent is required), and legal obligation.

Data from Google and other platforms. Information we receive from Google APIs (including YouTube API Services) is used in line with the Google API Services User Data Policy, including its Limited Use requirements. By connecting YouTube you also agree to the YouTube Terms of Service (youtube.com/t/terms) and Google’s Privacy Policy (policies.google.com/privacy). We never use data from connected platforms to serve third-party ads, and we never sell it. You can revoke our access at any time in the app or in your Google, Meta or Apple account security settings.

3. Cookies and analytics choices

We show a consent banner on first visit. Essential cookies needed to sign in and keep the app working are always on. Analytics and session-replay technologies load only after you accept, and you can withdraw consent at any time from the banner or your browser settings. Declining does not reduce the core functionality of the service.

4. Sharing

We share personal data only with:

  • Service providers (processors) that run the service on our behalf — hosting and database (Supabase), payment processing, email delivery, analytics (PostHog, Google), AI model providers (for example Groq and other model APIs), and data-retrieval vendors (for example Apify);
  • authorities when required by law or to protect rights and safety;
  • a successor in a merger, acquisition or asset sale, under equivalent protection.

We do not sell personal data, and we do not share it with third parties for their own marketing or advertising.

5. International transfers

Your data may be processed in countries other than yours, including the United States. Where required we use appropriate safeguards such as Standard Contractual Clauses.

6. Retention

We keep account and content data for as long as your account is active and for a reasonable period afterwards, then delete or de-identify it, unless a longer period is required for legal, tax, security or dispute-resolution purposes. Analytics data is retained according to the settings of the analytics providers.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us through email at noreply@dekhoai.live or the “Report a bug” option in the app. You may also complain to your local data-protection authority. California residents may exercise rights under the CCPA/CPRA, including the right to know and delete; we do not sell or “share” personal information as those terms are defined.

8. Security

We use technical and organizational measures to protect personal data, including encryption in transit (HTTPS), encryption at rest by our database provider, passwords stored only as salted hashes, access tokens kept server-side, and access to production data limited to people who need it. Card details are handled by our payment processor and never stored by us. No system is perfectly secure, and we cannot guarantee absolute security.

If a breach happens. If we learn of a security incident that affects your personal data, we will investigate, take reasonable steps to contain it and reduce harm, and notify affected users and the relevant authorities where the law requires (for example, within 72 hours of becoming aware of it where the GDPR applies).

9. Children

The service is not directed to children under 18 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us through email at noreply@dekhoai.live or the “Report a bug” option in the app.

10. Changes

We may update this Policy. Material changes will be notified in-app or by email and, where required, we will ask for renewed consent.

11. Contact

Uddokta OS, [REGISTERED ADDRESS — required on the Privacy Policy]. Privacy questions: contact us through email at noreply@dekhoai.live or the “Report a bug” option in the app.

See also our Terms of Service.