Public legal copy. Last updated: 22-June-2026
Last updated: 22-June-2026
This Privacy Policy explains how Xieta AI Private Limited ("Company", "Xieta", "we", "us", or "our") collects, uses, shares, stores, protects, and deletes personal data when you use www.asktranslator.com, the AskTranslator web application, and related services (collectively, the "Service" or "AskTranslator").
AskTranslator provides translation, optical character recognition (OCR), document processing, and AI-generated language outputs.
This Policy should be read together with our Terms and Conditions and Website Disclaimer.
Using the Service involves processing personal data that is necessary to provide, secure, administer, bill for, support, and improve the Service as described in this Policy. Where applicable law requires consent, or where processing is optional, we ask for a separate affirmative action such as a checkbox, account setting, coupon disclosure, upload choice, or similar consent flow.
If you do not agree to mandatory processing required for the Service, please do not use the Service. Optional choices, such as marketing communications and Auto-delete Mode, can be managed separately where available.
| Entity name | Xieta AI Private Limited |
| Service name | AskTranslator |
| Website | www.asktranslator.com |
| Registered address | Plot No. 25, 1st Floor, Industrial Area Phase-I, Chandigarh, India – 160002 |
| Support email | support@xieta.ai |
| Grievance email | grievance@xieta.ai |
For direct account, billing, security, support, service-administration, and legal-compliance purposes, Xieta determines the purposes and means of processing and acts as the relevant data fiduciary, controller, or equivalent responsible entity under applicable law.
For third-party personal data contained in documents uploaded by you, where you determine the purpose and means of processing, you are responsible for ensuring lawful authority to upload and process that data. Xieta processes such content to provide the Service, while remaining responsible for its own security, processor-management, consumer-protection, and other legal obligations.
This Policy is designed for compliance with applicable Indian law, including the Information Technology Act, 2000, the Information Technology rules currently in force, the Consumer Protection Act, 2019, the Consumer Protection (E-Commerce) Rules, 2020 where applicable, and the Digital Personal Data Protection Act, 2023 ("DPDP Act") and Digital Personal Data Protection Rules, 2025 ("DPDP Rules") from their respective commencement dates.
Certain rights and obligations under the DPDP Act and DPDP Rules apply only from their respective commencement dates. Where a provision has not yet commenced, we may describe how we intend to comply once it becomes applicable.
This Policy applies to:
(a) website visitors;
(b) users who create an account;
(c) users who upload documents, images, scans, text, or other files;
(d) users who receive translation, OCR, or AI-generated outputs;
(e) users who contact support or grievance channels;
(f) users who receive transactional or marketing communications; and
(g) users who make purchases or use paid features.
This Policy does not apply to third-party websites or services that are not controlled by us, even if they are linked from the Service.
We may collect:
(a) name;
(b) email address;
(c) mobile number;
(d) account login credentials or authentication information;
(e) user preferences;
(f) communication preferences; and
(g) account status and activity records.
(h) IP address, device identifiers, browser type, operating system, and other technical data.
(i) billing and payment information, including transaction records, where you make purchases.
When you use the Service, you may upload documents, images, scanned files, text, or other content for translation, OCR, or language processing.
Uploaded content may contain personal data about you or third parties, including names, addresses, phone numbers, emails, dates of birth, signatures, IDs, contracts, academic records, employment details, financial details, medical information, or other information.
You are responsible for ensuring that you have lawful authority to upload and process any personal data contained in documents.
We may generate and temporarily store:
(a) OCR text;
(b) translated text;
(c) translated files;
(d) summaries;
(e) intermediate conversion files;
(f) temporary processing files;
(g) job status and processing records.
Retention depends on whether the document is processed in standard mode, Auto-delete Mode, Private Mode, or System-Detected Private Mode.
When you make a payment, payment processing may be handled by third-party payment gateways such as PayU or other providers.
We may receive and store limited transaction information, such as:
(a) transaction ID;
(b) payment status;
(c) amount;
(d) date and time;
(e) invoice or receipt information;
(f) refund status; and
(g) partial payment details provided by the payment gateway.
We do not intentionally store full card numbers, CVV, UPI PINs, or other sensitive payment authentication credentials.
We may collect information from:
(a) support requests;
(b) grievance submissions;
(c) refund requests;
(d) emails;
(e) feedback forms;
(f) surveys;
(g) chat or helpdesk messages; and
(h) other communications with us.
We may automatically collect:
(a) IP address;
(b) device identifiers;
(c) browser type and version;
(d) operating system;
(e) device type;
(f) approximate location derived from IP address;
(g) date and time of access;
(h) pages viewed;
(i) features used;
(j) click and usage patterns;
(k) session information;
(l) error metadata;
(m) security logs; and
(n) authentication and access logs.
We do not use precise GPS location unless a feature specifically requires it and you grant permission.
We use essential cookies, JSON Web Tokens, browser local storage, and similar technologies for authentication, session management, security, fraud prevention, account operation, and remembering user preferences.
Our current website notice is a transparency notice for local storage, privacy-friendly cookieless analytics where enabled, and trusted login-security services such as Firebase or Google reCAPTCHA. Non-essential analytics cookies, marketing cookies, or marketing pixels are used only if enabled for the Service and only where permitted by law and, where required, with your consent or another available lawful basis.
We use personal data for the following purposes:
We use data to:
(a) create and manage accounts;
(b) authenticate users;
(c) receive and process uploaded documents;
(d) perform OCR, translation, and language processing;
(e) generate outputs;
(f) display job history and results where applicable;
(g) apply Auto-delete Mode, Private Mode, or System-Detected Private Mode;
(h) allow downloading of outputs; and
(i) provide customer support.
To generate translations and other outputs, we may send relevant text or files to configured third-party AI, language, OCR, storage, or infrastructure providers where necessary to provide the requested Service.
Configured providers may include cloud, AI, OCR, language-processing, communication, payment, logging, monitoring, security, and support providers, as described in the provider-category section below.
We use payment and transaction information to process payments, issue receipts, manage refunds, prevent fraud, and comply with tax, accounting, and legal obligations.
We use data to detect, prevent, investigate, and respond to fraud, misuse, unauthorised access, cyber incidents, prohibited content, policy violations, and security risks.
We use data to respond to support requests, refund requests, complaints, data-rights requests, and grievances.
We may process and retain data to comply with applicable law, court orders, government requests, regulatory requirements, tax obligations, CERT-In reporting obligations, consumer-protection obligations, and data-protection requirements.
We may use non-identifying metadata, aggregated statistics, and anonymised data to improve reliability, usability, quality, performance, security, and user experience.
We do not use identifiable uploaded documents, identifiable OCR text, or identifiable translation outputs for model training or fine-tuning.
For standard-mode documents only, we may use identifiable content for internal review, audit, validation, testing, benchmarking, or quality improvement only where:
(a) the document is processed in standard mode;
(b) the document is not processed under Auto-delete Mode, Private Mode, or System-Detected Private Mode;
(c) the document is not a child/minor-related document, Aadhaar/government-ID document, health record, financial record, legal case file, intimate-content document, or other sensitive/high-risk document; and
(d) a coupon, promotional credit, offer, or similar benefit clearly discloses before use that applying it permits such internal use, and you affirmatively choose to apply that coupon, promotional credit, offer, or benefit.
Where such disclosure applies and you choose to use the coupon, promotional credit, offer, or benefit, the affected standard-mode document and related outputs may be used for the disclosed internal review, audit, validation, testing, benchmarking, or quality-improvement purposes.
This does not apply to documents processed under Auto-delete Mode, Private Mode, or System-Detected Private Mode, which are excluded from routine manual quality review, model-improvement datasets, external corpora, and commercial document-derived datasets.
We may send:
(a) OTPs;
(b) login alerts;
(c) job status updates;
(d) receipts;
(e) refund updates;
(f) service notices;
(g) security alerts;
(h) policy update notices;
(i) account updates, including changes to document-handling modes;
(j) support responses; and
(k) external promotional communications where you have opted in or where permitted by law.
You cannot opt out of essential transactional, account, service, legal, security, payment, support, or similar communications while your account is active.
We process personal data based on consent, performance of the requested service, legal compliance, security, fraud prevention, and other lawful grounds available under applicable law.
Where required, we obtain affirmative consent through clickwrap, checkboxes, account settings, upload flows, coupon disclosures, cookie notices or controls, or other affirmative actions.
Optional processing, such as external marketing communications and non-essential cookies or pixels, is handled through separate preferences or disclosures where applicable. Marketing preferences for external promotional channels are currently managed from your Profile page. We may still display logged-in website notices, banners, account messages, coupons, credits, product notices, and service updates within the Service interface. Auto-delete Mode is an account-level document-handling setting that can be activated or deactivated from your Profile page and applies only to future uploads.
You may withdraw optional consent at any time. Withdrawal of consent for core processing may prevent us from providing the Service and may require account closure or deletion of relevant data, subject to legal retention obligations.
Uploaded documents are central to the Service. We apply different retention and processing rules depending on the selected or detected mode.
Unless Auto-delete Mode, Private Mode, or System-Detected Private Mode applies, a document is processed in standard mode.
Standard-mode uploaded documents and outputs may be retained for up to 90 days from job completion, unless deleted earlier by you, required by law, or moved into Private Mode.
Standard-mode retention is intended to allow users to access recent jobs, download outputs, troubleshoot issues, receive support, and raise refund or quality concerns during the applicable retention period.
Auto-delete Mode is an account-level setting that can be activated or deactivated from your Profile page.
When Auto-delete Mode is active, all documents uploaded while the setting is active are scheduled for deletion within 72 hours from job completion, failed processing status, or termination of processing, as applicable.
Auto-delete Mode applies to:
(a) uploaded source files;
(b) OCR text;
(c) translated text;
(d) translated files;
(e) summaries generated from the document;
(f) previews and thumbnails;
(g) intermediate conversion files;
(h) temporary processing files;
(i) document-content caches; and
(j) other document-content copies held in Xieta-controlled active systems.
You may turn Auto-delete Mode off, but turning it off affects only future uploads. Documents already uploaded while Auto-delete Mode was active will remain scheduled for deletion and cannot be moved back to standard retention.
Turning Auto-delete Mode on applies only to future uploads and does not affect documents uploaded before Auto-delete Mode was turned on.
Private Mode is a per-document setting.
You may select Private Mode for a particular document. Once selected, the uploaded document and its processed copies are scheduled for deletion within 72 hours from job completion, failed processing status, or termination of processing, as applicable.
Private Mode cannot be downgraded or cancelled for that document after it is applied.
Our backend systems may automatically apply Private Mode where they detect that the nature of a document appears to require shorter retention or stronger safeguards.
Documents that may trigger AI-based or automated System-Detected Private Mode may include, without limitation:
If a document is placed in System-Detected Private Mode, the user cannot override, cancel, or downgrade that mode.
Documents placed in System-Detected Private Mode are scheduled for deletion within 72 hours from job completion, failed processing status, or termination of processing, as applicable.
After deletion, you will no longer be able to access the uploaded document, OCR text, translation output, translated file, or other processed copies through the Service.
You are responsible for downloading and saving any output you wish to keep before expiry. After deletion, we cannot restore the document or outputs nor can we offer support or investigation for deleted content.
AskTranslator is not a document storage, archiving, or backup service.
After document-content deletion, we may retain limited metadata, job summaries, transaction records, processing records, security logs, access logs, error metadata, audit records, and legal-compliance records where necessary for:
(a) security;
(b) fraud prevention;
(c) support;
(d) billing;
(e) refunds;
(f) tax and accounting;
(g) legal compliance;
(h) dispute resolution;
(i) abuse prevention;
(j) product administration; and
(k) regulatory or law-enforcement requirements.
Such retained records are not intended to contain full document contents. We do not intentionally write document contents into analytics, monitoring tools, or ordinary operational logs.
We do not routinely review documents manually.
Authorised personnel may access identifiable standard-mode documents or outputs only where reasonably necessary for:
(a) support requested by you;
(b) troubleshooting;
(c) refund or quality dispute resolution;
(d) security investigation;
(e) abuse prevention;
(f) legal compliance; or
(g) technical operations.
Documents processed under Auto-delete Mode, Private Mode, or System-Detected Private Mode are excluded from routine manual quality review.
You should not upload Aadhaar or other government identity documents unless strictly necessary and you have lawful authority to do so.
Where possible, mask or redact unnecessary identity numbers before uploading. Documents containing Aadhaar or other government identity documents may be automatically placed in Private Mode.
We do not provide Aadhaar authentication services and do not use Aadhaar numbers for identity verification unless separately and lawfully enabled.
The Service is intended only for users aged 18 or above.
The Service is not directed at children and is not intended for child-focused use cases.
You must not knowingly upload documents primarily concerning a child or minor unless you have lawful authority and such processing is not prohibited by applicable law.
If we detect that a document explicitly involves child or minor personal data, we may refuse processing, delete the document, restrict access, or automatically apply Private Mode.
From commencement of applicable DPDP provisions relating to children, processing of child personal data will be subject to the requirements of the DPDP Act and DPDP Rules, including verifiable parental consent where applicable.
We do not sell your personal data.
We may share personal data in the following circumstances.
We may share data with providers that help us operate the Service, including:
(a) cloud hosting providers;
(b) storage providers;
(c) AI and language-processing providers;
(d) OCR providers;
(e) email, SMS, WhatsApp, and communication providers;
(f) analytics and logging providers;
(g) payment gateways;
(h) fraud-prevention and security tools;
(i) customer-support tools; and
(j) professional advisers.
At the date of this Policy, providers used or made available through the Service may include configured providers in these categories:
| Provider category | Purpose |
|---|---|
| Cloud hosting, storage, and infrastructure | Hosting, storage, networking, and infrastructure |
| AI, OCR, and language-processing providers | Translation, OCR, summarisation, and AI outputs |
| Authentication and login-security providers | Login, OTP, anti-abuse, and account security |
| Communication providers | Email, SMS, WhatsApp, and transactional messages |
| Payment gateways | Payments, refunds, and transaction processing |
| Analytics, logging, and monitoring providers | Security, reliability, performance, and diagnostics |
| Customer-support and professional advisers | Support, legal, accounting, and advisory functions |
Specific providers may be added, removed, replaced, disabled, or limited depending on configuration, availability, legal requirements, security needs, and product features.
We select provider plans, API configurations, and contractual settings intended to provide appropriate privacy, security, and business/API protections for the Service.
For configured paid API providers, we seek to use settings under which customer content submitted through the Service is not used to train provider foundation models unless separately enabled, disclosed, or permitted under applicable provider terms.
Because provider terms and configurations may change, we review provider arrangements periodically.
We may disclose data where required or permitted by law, including to courts, regulators, law enforcement, government authorities, tax authorities, CERT-In, or other competent bodies.
If we are involved in a merger, acquisition, financing, restructuring, sale of assets, or transfer of business, personal data may be transferred as part of that transaction, subject to appropriate safeguards and legal requirements.
We may share data with third parties where you have specifically consented.
Our primary application databases and storage infrastructure are intended to be hosted in India where reasonably practicable.
However, third-party service providers, AI providers, communication providers, support tools, logging tools, or payment processors may process personal data outside India.
We use contractual, technical, and organisational safeguards for such transfers where applicable.
From commencement of relevant DPDP provisions, cross-border transfers will be handled subject to restrictions, conditions, or requirements notified by the Central Government or applicable sectoral law.
If a provider, country, or transfer mechanism becomes restricted or unsuitable, we may suspend, replace, or reroute processing where reasonably possible.
We use essential cookies, tokens, and browser local storage for login, authentication, session management, security, fraud prevention, account operation, and remembering preferences. These are necessary for the Service and cannot be disabled through the Service without affecting core functionality.
Where enabled, we may use privacy-friendly cookieless analytics to understand aggregate usage and improve reliability. We do not use the current cookie notice as a full consent-preference manager.
Non-essential analytics cookies, performance cookies, marketing cookies, or marketing pixels are used only where enabled for the Service and where permitted by law. If we introduce non-essential cookie or pixel choices that require consent, we will provide an appropriate consent or preference mechanism.
We retain personal data only for as long as necessary for the purposes described in this Policy or as required by law.
Indicative retention periods are:
| Data type | Retention |
|---|---|
| Account data | During account activity and for a reasonable period thereafter for legal, security, tax, support, and dispute purposes |
| Standard-mode uploaded documents and outputs | May be retained for up to 90 days from job completion |
| Auto-delete Mode documents and processed copies | Scheduled for deletion within 72 hours |
| Private Mode documents and processed copies | Scheduled for deletion within 72 hours |
| System-Detected Private Mode documents and processed copies | Scheduled for deletion within 72 hours |
| Payment and transaction records | Retained as required for tax, accounting, refund, fraud-prevention, and legal purposes |
| Security logs and access logs | Retained as required for security, CERT-In compliance, investigation, and legal purposes |
| Support and grievance records | Retained as necessary for support, grievance handling, legal defence, and compliance |
| Anonymised or aggregated data | May be retained for longer where no individual or document can reasonably be identified |
For Auto-delete Mode, Private Mode, and System-Detected Private Mode, deletion applies to uploaded files and processed copies held in Xieta-controlled active systems.
Processed copies include OCR text, translated text, translated files, summaries generated from the document, previews, thumbnails, intermediate files, temporary processing files, document-content caches, and other document-content copies.
Unless a shorter period applies, deletion under Auto-delete Mode, Private Mode, and System-Detected Private Mode is scheduled within 72 hours from job completion, failed processing status, or termination of processing, as applicable.
After deletion, we may retain metadata, job summaries, transaction records, security logs, access logs, processing metadata, and legal-compliance records where required or reasonably necessary.
These retained records are access-controlled and are not used for model training, external corpora, or manual quality review.
External providers may retain limited data under their own service terms, security requirements, abuse-prevention rules, or legal obligations. We select providers with appropriate safeguards and seek to minimise such retention where reasonably possible.
We use reasonable technical and organisational safeguards to protect personal data against unauthorised access, disclosure, alteration, or destruction.
However, no system is completely secure. We cannot guarantee absolute security.
If we become aware of a personal data breach or cybersecurity incident affecting your personal data, we will assess the incident and notify affected users, and authorities where required by law, as soon as reasonably practicable.
If you believe your account or data has been compromised, contact us immediately at grievance@xieta.ai.
Subject to applicable law and commencement of relevant DPDP provisions, you may have rights to:
(a) access information about your personal data;
(b) request correction or updating;
(c) request deletion;
(d) withdraw consent;
(e) obtain grievance redressal;
(f) nominate another person to exercise rights in the event of death or incapacity, where applicable; and
You may exercise available rights through account settings where available or by contacting grievance@xieta.ai.
We may verify your identity before responding. We may refuse or limit requests where permitted or required by law.
Deletion under Auto-delete Mode, Private Mode, or System-Detected Private Mode occurs automatically and does not require a separate deletion request.
Once deletion occurs, the document and outputs cannot be restored.
You may opt out of external marketing communications through your Profile page. External marketing communications include promotional email, SMS, WhatsApp, phone, browser push, mobile push, or similar off-Service channels where used.
Marketing opt-out does not prevent us from showing logged-in website notices, banners, account messages, coupons, credits, product notices, or service updates inside the Service interface. These in-app website notices are part of the logged-in Service experience and are not browser push or mobile push notifications.
If you cannot access your account, you may contact support@xieta.ai for help with account access or preference changes.
You cannot opt out of essential transactional, security, legal, account, or service-related communications while your account remains active.
By creating an account or using the Service, you agree to receive necessary transactional communications, including:
(a) OTPs;
(b) login alerts;
(c) job status updates;
(d) download or completion notices;
(e) receipts and invoices;
(f) refund updates;
(g) account notices;
(h) policy notices;
(i) security alerts; and
(j) support responses.
We send external marketing communications only where permitted by law and your communication preferences.
You may opt out of external marketing communications at any time through your Profile page.
We may still display in-app website notices, banners, account messages, coupons, credits, product notices, and service updates within the logged-in Service interface. These notices are part of the website experience and do not involve email, SMS, WhatsApp, phone, browser push, or mobile push unless separately stated and permitted.
We have designated a Grievance Officer for privacy, data-protection, consumer, and applicable platform grievances.
| Name | G.S. Nagra |
| Designation | Grievance Officer – AskTranslator |
| grievance@xieta.ai | |
| Postal Address | Xieta AI Private Limited, Plot No. 25, 1st Floor, Industrial Area Phase-I, Chandigarh, India – 160002 |
| Availability | Monday–Friday, 10:00 AM–6:00 PM IST, excluding public holidays |
We will endeavour to respond within the following timelines, subject to applicable law:
| Category | Acknowledgement | Resolution / Action |
|---|---|---|
| General consumer complaint | Within 48 hours | Within one month |
| General privacy grievance | Within 48 hours | Within one month, unless a shorter legal period applies |
| IT Rules intermediary grievance, where applicable | Within 24 hours | Within 7 days, or shorter where required |
| Content takedown complaint requiring shorter action under applicable law | As soon as reasonably practicable | Within the legally required period, where applicable |
We may update this Policy from time to time.
For non-material changes, such as clarifications, formatting, updated contact details, or corrections, continued use after the effective date constitutes acknowledgement of the updated Policy.
For material changes that affect processing purposes, categories of personal data, recipients, retention, cross-border transfers, user rights, or legal bases, we will provide advance notice where required and obtain fresh consent where required by applicable law.
If you do not agree to material changes, you may stop using the Service and request account closure, subject to legal retention obligations.
For questions about this Policy or our data practices:
| Company | Xieta AI Private Limited |
| Address | Plot No. 25, 1st Floor, Industrial Area Phase-I, Chandigarh, India – 160002 |
| Support Email | support@xieta.ai |
| Grievance Email | grievance@xieta.ai |
We use browser local storage to keep you signed in and remember your preferences, privacy-friendly cookieless analytics, and trusted third-party services (Google reCAPTCHA / Firebase) to secure sign-in. See our Privacy Policy for details.