Privacy

Alma Mater Biz Solutions Private Limited is the data controller, at D-5/2, Parth Indraprasth, Gurukul Road, Vastrapur, Ahmedabad, Gujarat 380052, India (CIN U74140GJ2010PTC062953). This page covers the Digital Personal Data Protection Act 2023 in India and the GDPR where it applies.

Who to write to

Sameer Aasht answers questions and complaints about your personal data: privacy@yetazeta.com. If you are not satisfied with the answer, you may complain to the Data Protection Board of India; under the GDPR you may complain to your own supervisory authority.

What we hold

Your email address. It is how you sign in. There is no password — you get a link by email — so there is no password of yours for anyone to steal from us.

Your requests and the answers to them, along with the record of which model contributed what. This is your run history, and it is the thing you are paying for.

Your workspace and billing status — which plan you are on and how many runs you have used this period.

Counters for rate limiting. Keyed on your user id, and on a salted one-way hash of your IP address. We do not store IP addresses. The hash uses a secret key held only on our servers, so the hash cannot be turned back into an address.

What we do not hold

Card numbers. Those go to Razorpay directly and never touch our servers.

Raw IP addresses, as above.

Error reports

When something breaks, an error report goes to Sentry in Germany. It carries the error type and the line of code. It does not carry your request text, your email, or anything about your account balance — the report is stripped to a fixed list of allowed fields before it is sent, and anything not on that list is dropped rather than reviewed.

Who else sees your data

The companies on the sub-processors page, and no one else. That page says what each one receives and which country it processes it in. Your requests are processed in the United States by the model providers, and stored in Singapore.

We make no claim about whether model providers train on your text. Their terms differ per model and change, so we will not promise something we cannot keep true.

How long — and the one thing we cannot delete

Your runs stay until you close your account. Close it and they are removed, not flagged: the rows go, along with the answers, the traces, and the record of what each model contributed. Rate-limit counters expire within thirty days. Backups age out on their own schedule, so a copy can survive in a backup until that backup does.

What we keep is what you were charged. The amount, the date, the tax, the payment reference and the id of the workspace it belonged to. Nothing you wrote, nothing a model produced, and no part of any run — the table those records live in has no column that could hold them.

Why we keep it. An Indian company is required to preserve its books of account, and the vouchers behind every entry, for not less than eight financial years — Companies Act 2013, section 128(5). GST adds its own seventy-two months under section 36 of the CGST Act 2017, which the eight years already covers. A closed account cannot erase an invoice any more than it can erase a bank statement.

The right to erasure yields to this explicitly rather than being quietly ignored: section 8(7) of the DPDP Act requires us to erase your personal data when you withdraw consent unless retention is necessary for compliance with any law. This is that exception, and it is the only one we use.

Eight financial years is a ceiling, not just a floor. A charge is deleted on 1 April after the eighth financial year that follows the one it falls in — a payment made in September 2026 is deleted on 1 April 2035. That deletion is automatic. We do not keep financial records because we are allowed to.

Your card number is not in any of this. It goes to Razorpay and never touches our servers.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it — by email to privacy@yetazeta.com. Closing your account deletes your work properly; there is no soft-delete flag anywhere in the database. Runs cannot be removed one at a time — the database revokes that operation for everyone, including us, because each run carries the record of what it cost. The other exception is the financial record described above, which we are required to keep and which contains nothing you wrote.

Under DPDP you may also nominate someone to exercise these rights if you cannot.

Children

Yeta Zeta is a paid product for adults. You must be 18 or older to use it, as the terms say, and we do not knowingly collect personal data from anyone under 18. If we learn that an account belongs to someone under 18, we close it, and its data is deleted the same way as any closed account's, apart from the record of what was charged.