01 Who we are
Gleon OS ("Gleon", "we", "us") is an India-first AI operating system operated from Rajkot, Gujarat, India. For the purposes of the DPDP Act, we act as a Data Fiduciary - we decide why and how your personal data is processed. You ("you", "the user") are the Data Principal.
You can reach us any time at hello@gleon.cloud.
02 Data we collect
We collect only what we need to run the service:
You give us directly
- Account data - your name, email address, and password (stored hashed, never in plain text).
- Profile data - anything you choose to add, such as a display name.
- Content - the prompts, messages, files, and projects you create while using Chat, Studio, Memory, and Agents.
- Support & contact - messages you send us via the contact form or email.
Collected automatically
- Usage data - credits used, features accessed, and basic activity needed to run your account and enforce plan limits.
- Technical data - IP address, browser type, and device information, used for security and to keep the service working.
From payment partners
- Payment data - when you buy a plan, payments are processed by Cashfree. We receive a transaction status and reference, but we never see or store your full card or bank details - those stay with Cashfree.
03 How we use your data
We use your data only for clear, stated purposes:
- To create and run your account, and to provide Chat, Studio, Memory, Agents, and related features.
- To process payments, allocate credits, and apply your plan's limits.
- To keep the service secure, prevent abuse and fraud, and fix problems.
- To respond to your support requests.
- To send essential service messages (for example, account or billing notices). Marketing email is sent only if you opt in, and you can opt out any time.
We do not sell your personal data. We do not use the private content you create to train external models without a separate, clear choice from you.
04 Consent & legal basis
Under the DPDP Act, we process your personal data based on the consent you give when you create an account and use the service, and for the legitimate uses permitted by law (such as keeping the service secure). Your consent is free, specific, and informed, and you can withdraw it at any time by writing to us - though some features may stop working if the data they need is withdrawn.
06 Data retention
We keep your personal data only as long as your account is active or as needed to provide the service. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must keep certain records (for example, tax or transaction records) to meet legal obligations.
07 Your rights
As a Data Principal under the DPDP Act, you have the right to:
- Access - ask for a summary of the personal data we hold about you.
- Correction - ask us to correct inaccurate or incomplete data.
- Erasure - ask us to delete your personal data.
- Withdraw consent - at any time, as described above.
- Grievance redressal - raise a complaint with our Grievance Officer (section 12).
- Nominate - name someone to exercise your rights in case of death or incapacity.
To exercise any of these, email hello@gleon.cloud. We aim to respond promptly and, for grievances, within the timelines required by law.
08 How we protect your data
We use reasonable technical and organisational security measures, including encryption in transit, hashed passwords, access controls, and rate limiting. No system is perfectly secure, but if a personal data breach occurs, we will act promptly and notify the Data Protection Board and affected users as required by law. See our Security page for more.
09 Cookies & local storage
We use essential cookies and browser storage to keep you signed in, remember your preferences (such as appearance), and keep the service secure. We do not use advertising trackers. You can clear this data in your browser settings, though signing in again will be required.
10 Children
Gleon OS is not intended for children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
11 International data transfers
Some of our service providers may process data outside India. Where this happens, we take steps to ensure your data is handled in line with this policy and applicable Indian law.
12 Grievance officer
In line with the IT Act, 2000 and the DPDP Act, 2023, you can contact our Grievance Officer for any privacy concern or complaint:
Grievance Officer - Gleon OS
Email: hello@gleon.cloud
Based in: Rajkot, Gujarat, India
We will acknowledge your complaint and work to resolve it within the timelines required by law.
13 Changes to this policy
We may update this Privacy Policy as our service or the law changes. We will post the new version here with an updated date, and for significant changes we will notify you by email or in the app.