Privacy Policy

Last updated: 8 July 2026

Adventure AI ("we", "us") operates www.adventure-ai.in, an autonomous AI platform that builds and operates online businesses. This policy explains what personal data we process, why, and the rights you have under India's Digital Personal Data Protection Act, 2023 (DPDP Act). Adventure AI is the Data Fiduciary for personal data processed on this platform.

Personal data we collect

Why we process it (purpose limitation)

We collect only what is needed for these purposes, and we ask for your consent at the point of collection (e.g. the optional phone number field states it will appear on your website). We do not sell personal data, and we do not use it for advertising to you.

Who processes data on our behalf

We use these processors, each bound to use data only to provide their service to us: Supabase (database & authentication), Vercel (hosting), Railway (background processing), Razorpay (payments), OpenAI (AI content generation — your business inputs are sent to generate content you request), and GitHub (code repositories created for your businesses). Some processors store data outside India; we transfer data only to jurisdictions permitted under the DPDP Act.

Retention

Active account data is retained while your account is active. When a company plan is cancelled or a trial ends, its data enters a 90-day retention window (so you can export or reactivate), after which it becomes eligible for deletion. You may request earlier erasure at any time (below).

Your rights under the DPDP Act

If you believe we have processed your data improperly, you may also complain to the Data Protection Board of India after exhausting our grievance process.

Children

The service is for users 18 and older. We do not knowingly process children's personal data.

Security

Data is encrypted in transit (TLS) and at rest, access is scoped per tenant with row-level security, activity logs are append-only, and payment webhooks are signature-verified. In the event of a personal data breach we will notify the Data Protection Board and affected users as required by the Act.

Grievance Officer / Contact

For any privacy request (access, correction, erasure, consent withdrawal, or complaint), contact: 008.mainak@gmail.com. Include the email address linked to your account. We aim to acknowledge within 72 hours and resolve within 30 days.

Changes to this policy

We will post updates here and revise the "Last updated" date. Material changes will be notified by email.