Privacy Policy

This Privacy Policy applies to the Sarthi mobile application ("App", "Sarthi", "we", "us", "our"), developed and operated by Lexcore Enterprises Pvt. Ltd. By creating an account or using Sarthi, you agree to the collection and use of information as described in this policy.

Sarthi is an AI-assisted business, finance, and strategy engine for Indian SMBs. It uses two third-party AI providers (Google Gemini and Anthropic Claude) to generate its results — this policy explains exactly what that means for your data.

1. Information We Collect

Account Information: Name, email address, and password (hashed) when you register.
Query Content: The text and figures you enter into an engine — e.g. equity tickers, business scenarios, marketing briefs, HR questions, cash-flow numbers — in order to generate a result.
Generated Results: The AI-generated strategies, briefs, and reports Sarthi produces for you, stored so you can view your history.
Payment Information: Subscription and credit-purchase transaction records processed via Razorpay. We do not store your card number, UPI PIN, or CVV — Razorpay's secure gateway handles this directly.
Usage Data: Which engines you use, credit consumption, and app performance data, to operate the credit system and improve the product.
Device Information: Device model, OS version, and app version, for crash reporting and compatibility.

2. How We Use Your Information

To generate the AI strategies, briefs, and reports you request
To operate your account, credits, and subscription plan (Free / Pro / Premium)
To process payments and manage billing
To maintain your results history within the app
To send essential account and service notifications (not marketing, without your consent)
To detect abuse, prevent fraud, and enforce our Terms of Service
To comply with applicable law

3. Third-Party AI Processing — Google Gemini & Anthropic Claude

When you run an engine, the query content you enter (not your account credentials, not your payment details) is sent to:

Google Gemini API (Google LLC) — for market/research-context briefing
Anthropic Claude API (Anthropic PBC) — for strategic analysis and the final written output

These are independent data processors operating under their own privacy and data-use terms. Per their published enterprise/API policies (as opposed to their free consumer products), API-submitted content is not used to train their models by default. We do not control these providers' infrastructure and encourage you to review their policies directly: Google Privacy Policy and Anthropic Privacy Policy.

Both providers are based in the United States — using Sarthi means your query content may be transferred to and processed in the US for the sole purpose of generating your result, then returned to our servers.

4. Data Storage & Security

Your account data, query history, and generated results are stored on secured servers in a dedicated database. We implement industry-standard safeguards:

HTTPS/TLS encryption for all data in transit
Hashed passwords — we never store plain-text passwords
Token-based internal authentication between the app, our billing layer, and the AI-processing engine
Restricted, role-based database access

5. Payment Processing

Subscription and credit purchases are processed by Razorpay, a PCI-DSS compliant payment gateway licensed to operate in India. We do not store your full card or bank details. Razorpay's own privacy policy governs the payment transaction itself: razorpay.com/privacy.

6. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with:

Google (Gemini API) and Anthropic (Claude API) — query content only, to generate your results (Section 3)
Razorpay — for payment processing
Legal authorities — only if required by Indian law, a valid court order, or governmental request
In the event of a merger, acquisition, or business transfer — with prior notice to users

7. Your Rights

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), and in line with global data-protection standards (including GDPR principles for users outside India), you have the right to:

Access the personal data we hold about you
Request correction of inaccurate or outdated data
Request deletion (erasure) of your account and associated data
Withdraw consent for optional data processing at any time
Receive a copy of your data in a portable format, on request
Lodge a grievance with our Grievance Officer (Section 11), and, for Indian users, escalate to the Data Protection Board of India if unresolved

To exercise any of these rights, contact us at privacy@lexcoreenterprises.com.

8. Data Retention

We retain your account and query data for as long as your account remains active, so your results history stays available to you. If you delete your account, your personal data is permanently deleted within 30 days, except where a longer retention period is required by law (e.g. financial transaction records).

9. Children's Privacy

Sarthi is a business and financial tool and is not intended for individuals under 18 years of age. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us immediately for removal.

Important — Not Investment or Professional Advice. Sarthi's AI-generated outputs (including the Equities, Mutual Funds, and Trading engines) are informational and educational in nature. They are not financial, investment, tax, legal, or professional advice, and are not issued by a SEBI-registered Research Analyst or Investment Adviser.

Lexcore Enterprises Pvt. Ltd. is not a SEBI-registered intermediary, does not manage funds, execute trades, or guarantee any outcome. Always consult a qualified, licensed professional before making financial, business, or legal decisions. See our Terms of Service for the full disclaimer.

10. Changes to This Policy

We may update this Privacy Policy from time to time as the app evolves. Material changes will be notified via in-app notice or email. Continued use of Sarthi after a change constitutes acceptance of the updated policy.

11. Grievance Officer & Contact

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023:

Company	Lexcore Enterprises Pvt. Ltd.
Product	Sarthi (Powered by Cortina Core)
Grievance / Privacy Email	privacy@lexcoreenterprises.com
Registered address / jurisdiction	Gaya, Bihar, India
Website	cortinainfinity.com

We aim to acknowledge grievances within 48 hours and resolve them within 30 days, as required under Indian law.