Privacy Policy

Last updated: May 6, 2026 · Effective from: April 1, 2026

RUSOM E-com International Private Limited ("RUSOM AI", "we", "us", or "our"), the company behind rusom-ai.com and its sub-domains including the IT Act 2025 platform, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

1. Information We Collect

1.1 Personal Information

When you subscribe to our services, create an account, or contact us, we may collect:

• Identity Data: Full name, professional designation (CA, CS, CMA, Advocate, etc.)
• Contact Data: Email address, phone number, city, state
• Business Data: Organization name, GSTIN (if provided voluntarily)
• Payment Data: Razorpay payment ID, subscription plan (payment card details are processed exclusively by Razorpay and never stored on our servers)
• Account Data: Hashed password (SHA-256, we never store plaintext passwords)

1.2 Automatically Collected Information

• Device Information: Browser type, operating system, device type
• Usage Data: Pages visited, time spent, features used, interaction patterns
• Push Notification Data: Push subscription endpoints (for delivering notifications you opted into)
• Cookies & Similar Technologies: We use cookies for session management, analytics, and advertising purposes (see Section 6)

1.3 AI Feature Data

When you use our AI-powered features (Tax Chatbot, Notice Reply Generator, Case Law Research, AIS Analyzer), the data you input is sent to our AI processing infrastructure (OpenAI) for generating responses. We do not store your input data or AI responses on our servers beyond the session. However, please avoid uploading documents containing sensitive personal information such as Aadhaar numbers, PAN numbers, or bank account details.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our services including IT Act 2025 tools
• Process payments and send GST-compliant invoices
• Send transactional emails (password resets, invoices, account updates)
• Send CBDT notification alerts and product updates (for subscribed users)
• Deliver push notifications you have opted into
• Improve our AI features and user experience
• Comply with legal obligations including GST and tax regulations
• Detect, prevent, and address technical issues and fraud

3. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share information with:

• Payment Processors: Razorpay (for processing payments — governed by Razorpay's Privacy Policy)
• Email Service: Resend (for transactional emails — governed by Resend's privacy policy)
• AI Processing: OpenAI (for AI features — data sent for processing only, not stored)
• Database: Supabase (for secure data storage — encrypted at rest)
• Analytics & Advertising: Google AdSense and Google Analytics (see Section 6)
• Legal Requirements: When required by law, regulation, or legal process

4. Data Security

We implement industry-standard security measures including:

• SHA-256 hashing for passwords
• HTTPS encryption for all data transmission
• Supabase Row Level Security (RLS) for database access control
• No storage of payment card details on our servers

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Subscription data and invoices are retained for a minimum of 8 years as required by Indian tax law (Income Tax Act, 2025 and GST Act). You may request deletion of your account by emailing us at hi@rusom-ai.com.

6. Cookies & Advertising

7. Your Rights

Under applicable data protection laws, you have the right to:

• Access, correct, or delete your personal data
• Withdraw consent for marketing communications
• Opt out of push notifications (via browser settings)
• Request a copy of your data
• Lodge a complaint with a data protection authority

To exercise these rights, contact us at hi@rusom-ai.com.

8. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

10. Contact Us