Privacy Policy
This policy explains how BoliLabs, a brand of Radheyshyam Enterprises, a proprietorship of Mayank Gupta (C-43, 1st Floor, Room No. 1, Nathu Colony, Mandoli Road, Shahdara, East Delhi, Delhi 110093, India), handles personal data when you use bolilabs.com and the BoliLabs Studio. We collect only what we need to run the Service, and we don't sell personal data or show ads.
What we collect, and why
| Data | Why |
|---|---|
| Your Google account's name, email address and profile picture link, and a user id | To sign you in, show your account, and contact you about it |
| Your plan, credits, the type and cost of each job, daily totals of credits used, and your payments (Razorpay payment id, amount, date, refunds) | To give and charge credits correctly, show your history, and keep accounts as the law requires |
| A random id stored in your browser, and a scrambled (hashed) form of your IP address | To stop misuse: limiting welcome credits to one per device and a few per network, and limiting requests per minute |
| Error and request logs: which function ran, when, whether it worked, and the IP address and browser that called it | To fix problems and keep the Service secure |
Your scripts and pictures
The text you voice, and the prompts behind the AI helpers, are sent to our servers and from there to Google's Gemini API, which makes the audio and text. We don't store your scripts in our database. Google processes them under its terms for paid Gemini API services, which don't allow Google to use them to improve its products; Google may keep them for a short time to detect abuse.
Your pictures stay on your device, unless you use “Arrange with AI” or “Fit to the story with AI”: then small previews of them are sent to Gemini to match them to your story.
Drafts, your last 20 results and your video projects are saved in your own browser (local storage and IndexedDB), not on our servers. Clearing your browser's data removes them.
Who processes data for us
- Google Firebase and Google Cloud — sign-in, website hosting, our database and our functions. Our database and functions run in Google's Mumbai region; sign-in data may be stored outside India.
- Google Gemini API — making voices and AI text, as described above. This may happen outside India.
- Razorpay — payments. Razorpay handles your card, UPI or bank details under its own privacy policy; we receive only the payment's id, amount and status.
- Google (gstatic.com) and Cloudflare (cdnjs) — our pages load Google's sign-in code from gstatic.com, and the Studio loads its MP3 encoder from cdnjs. These services see your IP address when your browser fetches the files.
We share personal data with anyone else only when the law requires it.
How long we keep it
- Account, credit and usage records: while your account is open, and deleted within 30 days of a deletion request.
- Payment records: as long as Indian tax and accounting laws require (up to 8 years), even after an account is deleted.
- Request counters: deleted automatically, usually within a day. Network counters for welcome credits: two to three days.
- Records that stop a voice request sent twice from being charged twice (a scrambled fingerprint of the request, never its text): one to two days. Daily counts of failed AI requests: two to three days.
- Razorpay's payment notifications to us: 90 days. Notes our system makes for support about a payment that needs a look: kept with the payment records.
- Logs: about 30 days.
- Device ids kept to stop repeat welcome credits: as long as needed for that purpose.
Cookies and browser storage
We use your browser's storage for signing in (Firebase), your drafts and results, your theme, and the random device id. We don't use advertising or tracking cookies.
Your rights
Under India's Digital Personal Data Protection Act, 2023 you can ask us for a summary of the personal data we hold about you, ask us to correct or delete it, withdraw your consent (which closes your account), and nominate someone to act for you. Write to support@bolilabs.com from your account's email address. We reply within 30 days. If you're not satisfied, you can complain to the Data Protection Board of India.
Children
BoliLabs is meant for people 18 and over. A younger person may use it only with a parent or guardian, who is responsible for that use. We don't knowingly collect data from children without such consent.
Security
Data travels over encrypted connections, our database can't be read from browsers at all, and only our own functions can change credits or payments. No system is perfectly secure; if a breach affects you, we'll tell you and the authorities as the law requires.
Changes
If we change this policy in a way that matters, we'll show a notice on the site or email you first.
Contact and Grievance Officer
Mayank Gupta, Grievance Officer, BoliLabs (Radheyshyam Enterprises), C-43, 1st Floor, Room No. 1, Nathu Colony, Mandoli Road, Shahdara, East Delhi, Delhi 110093, India — support@bolilabs.com, +91 95999 66660.