Privacy Policy
Last updated 23 October 2026
This policy explains what personal data Herantes collects when you use Nilav, what we do with it, and the choices you have. We collect only what we need to run the service, we don’t sell personal data, and we don’t use your content to train AI models.
What we collect
- Account details: your name, email address, password (stored only as a one-way hash), and your profile picture if you sign in with Google.
- Onboarding answers: optional details you give us such as your niche, website and goals, used to tailor the product.
- Your content: the prompts, notes and source material you enter, and what Nilav generates for you (scripts, captions, blogs, images, voiceovers, videos).
- Billing records: your plan, payments, invoices and credit history. Card, UPI and bank details are entered with and stored by Razorpay; we never see or store them.
- Technical data: IP address (for security and abuse limits), basic device and browser information, and anonymous page-view analytics.
Why we use it
- To provide the service: generate and store your content and keep your account working.
- To bill you, and to keep the records tax law requires.
- To send service emails: email confirmation, password resets, receipts, and important account notices. We only send marketing email if you opt in, and every marketing email has an unsubscribe link.
- To keep Nilav secure, prevent abuse (for example, repeated free sign-ups), and fix problems.
- To understand, in aggregate, how the product is used so we can improve it.
Who processes it for us
We share data only with service providers that process it on our instructions:
- OpenAI: generates text, images, voice and video plans from your prompts. Data sent through OpenAI’s API is not used to train its models by default.
- Razorpay: payment processing, subscriptions and invoices.
- Vercel: hosting, file storage and privacy-friendly analytics.
- Neon: our database.
- Resend: sending account emails.
- Google: sign-in, only if you choose “Continue with Google”.
Some of these providers store data outside India, including in the United States. We may also disclose data where the law requires it.
How long we keep it
We keep your account and content until you delete them or your account. When you delete your account, your content and files are removed from our systems, and from backups within 30 days. Billing records are kept for as long as tax and accounting law requires (generally up to 8 years in India).
Your rights
Under India’s Digital Personal Data Protection Act, 2023 and, where they apply to you, laws such as the GDPR, you can access, correct, export and delete your personal data, withdraw consent, and complain.
- Edit your profile in Settings.
- Download all your data from Settings → Your data → Export.
- Delete your account from Settings → Danger Zone.
- For anything else, or to complain, write to our grievance officer at support@herantes.com. We respond within 30 days.
Cookies
We use one essential cookie to keep you signed in, a short-lived cookie during Google sign-in, and cookieless analytics. We don’t use advertising or cross-site tracking cookies.
Security and children
Data is encrypted in transit, passwords are hashed, and access to production systems is restricted. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires. Nilav is not intended for anyone under 18 and we do not knowingly collect their data.
Changes
We will post changes here and update the date above; for significant changes we will also email you.
Contact
Nilav is operated by Herantes.
Email: support@herantes.com