1. Information We Collect

1.1 Information You Provide

When you use our service, we may collect the following information:

• Google Account Information: When you sign in with Google, we collect your name, email address, profile picture, and Google user ID.
• Uploaded Content: Images, documents, and files you upload for OCR processing and text extraction.
• Generated Content: CSV files, compositions, and other data you create using our AI-powered tools.
• Library Content: Bhajan compositions, verses, and collections you save to the library.

1.2 Automatically Collected Information

• Usage Data: Information about how you interact with our service, including features used and actions taken.
• AI Processing Logs: Records of AI API usage, including tokens consumed, processing time, and success/failure status.
• Session Data: Login times, session duration, and authentication status.
• Technical Information: Browser type, device information, IP address, and access times.

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide OCR processing, AI-powered text classification, and CSV generation services.
• Authentication: To verify your identity and manage your access to the platform.
• Content Management: To store and manage your uploaded files, generated CSVs, and library compositions.
• Service Improvement: To analyze usage patterns and improve our AI models and features.
• Access Control: To manage AI access permissions and library access for different users.
• Communication: To send important updates about your account or service changes.
• Security: To detect and prevent unauthorized access, fraud, and abuse.

3. Third-Party Services

We use the following third-party services to provide our functionality:

3.1 Google Services

• Google OAuth 2.0: For secure authentication and login.
• Google Cloud Vision API: For optical character recognition (OCR) of uploaded images.
• Google Generative Language API (Gemini): For AI-powered text classification and processing.

3.2 Data Sharing

We do not sell, rent, or share your personal information with third parties except:

• With Google APIs as necessary to provide OCR and AI processing services
• When required by law or to protect our legal rights
• With your explicit consent

4. Data Storage and Security

4.1 Data Storage

• Database: User information, access permissions, and library content are stored in a secure MySQL database.
• Uploaded Files: Temporarily stored on our server during processing and may be retained for a limited time.
• Generated CSVs: Stored in your library and can be deleted by you at any time.
• Session Data: Stored securely using PHP sessions with httpOnly and secure cookie flags.

4.2 Security Measures

• Secure HTTPS encryption for all data transmission
• OAuth 2.0 authentication with Google
• Session management with secure cookies
• Access control based on user roles and permissions
• Regular security updates and monitoring

5. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can view your profile information and library content at any time.
• Deletion: You can delete your compositions, CSVs, and library content.
• Account Deletion: You can request deletion of your account by contacting us.
• Data Export: You can export your CSV files and library content.
• Opt-Out: You can stop using our service at any time by logging out and not returning.

6. Data Retention

We retain your information for the following periods:

• Account Information: Retained while your account is active and for a reasonable period after deletion.
• Uploaded Files: Temporarily stored during processing; may be deleted after processing is complete.
• Library Content: Retained until you delete it or close your account.
• AI Processing Logs: Retained for analytics and service improvement purposes.
• Session Data: Automatically expires after 24 hours of inactivity.

7. Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

8. International Users

Our service is hosted in Canada. If you access our service from outside Canada, please be aware that your information may be transferred to, stored, and processed in Canada where our servers are located. By using our service, you consent to this transfer.

9. Cookies and Tracking

We use the following types of cookies:

• Essential Cookies: Required for authentication and session management (PHP session cookies).
• Functional Cookies: Used to remember your preferences and settings.

We do not use third-party advertising or tracking cookies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Updating the "Last Updated" date at the top of this policy
• Displaying a notice on our website
• Sending an email notification (for significant changes)

Your continued use of our service after such changes constitutes your acceptance of the updated Privacy Policy.

11. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data and context:

• Consent: You have given us permission to process your data for specific purposes.
• Contract: Processing is necessary to provide the service you requested.
• Legal Obligation: Processing is required to comply with the law.
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided your rights do not override these interests.