Privacy Policy
Last updated: June 1, 2025
Core privacy commitment
Laghav never stores your prompt content. Prompt text is processed in memory and discarded immediately. It is never written to our database, logs, or analytics. We store only metadata (token counts, model used, cost) for billing and analytics.
1. Who we are
Laghav AI ("Laghav," "we," "our") is a software service operated by Prashant Yadav, based in Pune, India. We provide an AI prompt optimization gateway that compresses prompts and routes them to the most cost-effective large language model.
Contact: privacy@laghav.ai
2. What we collect
Account data
Email address (for magic-link authentication). No passwords are stored. We use Resend to send authentication emails.
Usage metadata
Per-API-call: original token count, compressed token count, model selected, cost in USD, quality score, compression rules applied, cache hit status, latency. Prompt content is never stored.
Billing data
Plan type, subscription status, payment processor IDs (Razorpay for India, Stripe internationally). We never store raw card numbers — these are handled entirely by Razorpay and Stripe.
Analytics
We use Plausible Analytics — a privacy-first, cookieless analytics tool. No cookies are set. No cross-site tracking. No personal identifiers are collected from website visitors.
Playground data
The public playground at laghav.ai/playground does not require authentication. We log only the IP address hash (for rate limiting) and the count of requests. The text you enter in the playground is processed in memory and never stored.
3. How we use your data
- Authenticate your account (email only)
- Provide and improve the Laghav service
- Calculate billing (usage metadata)
- Send transactional emails: magic links, plan alerts, savings summaries (Resend)
- Detect abuse on the playground (IP hash rate limiting)
- Aggregate anonymous analytics to understand feature usage
We do not sell your data. We do not use your prompt content to train any AI model — ours or any third party's.
4. Third-party sub-processors
| Processor | Purpose | Location |
|---|---|---|
| AWS (ap-south-1) | Cloud infrastructure, databases, storage | India (Mumbai) |
| Anthropic | LLM inference (Claude models) — receives compressed prompt only | USA |
| OpenAI | LLM inference (GPT models) — receives compressed prompt only | USA |
| LLM inference (Gemini models) — receives compressed prompt only | USA | |
| Razorpay | Payment processing (India) | India |
| Stripe | Payment processing (International) | USA |
| Resend | Transactional email delivery | USA |
| Plausible Analytics | Cookieless website analytics | EU |
| Cloudflare | CDN, WAF, DDoS protection, Turnstile CAPTCHA | Global |
LLM providers (Anthropic, OpenAI, Google) only receive the compressed version of your prompt. Original prompt content is never transmitted once compressed — it is discarded in memory.
5. Data retention
- Usage metadata: 13 months (rolling) for analytics accuracy
- Billing records: 7 years (Indian accounting law requirement)
- Authentication emails: deleted from Resend logs after 30 days
- Prompt content: never stored — retention is 0 seconds
6. Your rights (DPDP & GDPR)
Under India's Digital Personal Data Protection Act (DPDP) and the EU General Data Protection Regulation (GDPR), you have the right to:
- Access — request a copy of all data we hold about you
- Erasure — delete your account and all associated metadata via
DELETE /api/account/dataor by emailing us - Portability — export your usage data via
GET /api/reports/export - Correction — update your email address via the dashboard
- Withdraw consent — close your account at any time
To exercise any right: privacy@laghav.ai. We respond within 30 days.
7. Security
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). API keys are stored as HMAC-SHA256 hashes — we cannot recover the original key. See our Security page for full details.
8. Cookies
We do not use tracking cookies. Our analytics tool (Plausible) is cookieless. We set one functional session token (JWT in HttpOnly cookie) for dashboard authentication. No cookie consent banner is required.
9. Changes to this policy
We will notify registered users by email at least 14 days before any material change. The "Last updated" date at the top of this page always reflects the current version.
10. Contact
Laghav AI · Pune, India · privacy@laghav.ai