Privacy Policy

Last updated: September 9, 2026

1. Who we are

Saaniya Software LLC (“Company,” “we”) operates software and digital products. Privacy / data requests: saaniyasoftware@nasneeraj.com.

We are the data controller for personal information collected through our websites and Services, except where Services are provided to a school or other organization—in which case the institution is the controller and we act as a service provider / processor under a written agreement (see Terms §9 and the Education addendum).

2. Scope

This Master Policy covers Company websites and products generally. If a product has a Privacy addendum, that addendum controls for product-specific data categories and OAuth scopes. OAuth consent screens for education apps should point to the product Privacy URL.

3. Categories of personal information we collect

• Account data: name, email, organization, role, password hash or SSO identifiers.
• Billing data: billing name, email, address, payment metadata (full card data is handled by processors such as Stripe / Razorpay; we do not receive PAN).
• Usage data: logs (IP, user-agent, paths, timestamps), feature events, error reports.
• Cookies / similar: session, preference, and (where consented) analytics cookies.
• User Content: data you upload, edit, or generate within the Services.
• Student PII (education products): only when authorized by a school or institutional customer under a separate DPA or school agreement.

We do not sell personal information for advertising.

4. Cookies and tracking

We and our processors use cookies, local storage, and similar technologies for sign-in/session, security, basic product analytics, and payment processing. We do not use third-party advertising trackers today. Browser “Do Not Track” is not uniformly honored; Global Privacy Control (GPC) is honored as an opt-out-of-sale/share signal where applicable.

5. Sources

We receive personal information from you, from your organization if you use Services on its behalf, and from service providers (hosting, auth, payments, email, OAuth providers you elect to use).

6. How we use personal information

• provide, secure, and improve the Services;
• authenticate you and prevent fraud / abuse;
• process payments and issue invoices and refunds;
• communicate about product, security, billing, and (with consent) marketing;
• comply with legal obligations and respond to lawful requests.

We do not use Student PII for targeted advertising or to build advertising profiles. We do not train general-purpose AI models on your User Content; AI features process data you submit for that interaction, with vendor training disabled where the vendor offers that control.

7. Sharing

We share personal information with:

• Service providers (subprocessors) acting on our behalf—for example Vercel, database hosts (Neon / Supabase), Stripe / Razorpay, email providers, analytics, and AI model providers where a product uses AI features—under contracts requiring confidentiality and limited use.
• Authorities when required by law, court order, or to enforce our Terms.
• Successors in a merger, acquisition, or asset sale, subject to this Policy.

8. International transfers

Saaniya Software LLC is based in the United States. If you access the Services from outside the United States, personal information may be transferred to and processed in the United States or other countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses / UK IDTA).

9. Retention

We retain personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Institutional customers may have specific schedules in a DPA. Wisconsin public education-record rules may require longer retention where they apply.

10. Security

We use technical and organizational measures including TLS in transit, encryption for backups/database snapshots where configured, multi-tenant access controls (including RLS where used), scoped OAuth, and least-privilege access for personnel. We do not claim SOC 2 at launch.

11. Your privacy rights

Depending on your jurisdiction (U.S. state laws such as CCPA/CPRA, EU/UK GDPR, and similar), you may have rights to access, correct, delete, port, or restrict processing, and to object to certain processing or withdraw consent. Contact saaniyasoftware@nasneeraj.com. We will verify your identity before responding. For student records in education products, contact your school administrator first.

12. Automated decision-making / AI

Some features use automated or AI-assisted processing. These features are tools for human operators; they are not intended as sole automated decisions with legal or similarly significant effects without human review.

13. Children

Outside an institutional education context governed by a separate agreement, the Services are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child provided information outside such a context, contact us and we will delete it.

14. Product addenda

• Education SaaS (GuruVidyaZen / SISLMS)
• Astrology guide / digital product notes

15. Changes

We may update this Privacy Policy from time to time. Material changes will be posted here with an updated “Last updated” date.

16. Contact