Privacy Policy
1. Definitions
- AI Inputs
- Text prompts, questions, commands, uploaded content and other information submitted by a user for processing by Robusta AI Labs' AI-powered Services.
- AI Conversation History
- Records of interactions between a user and Robusta AI Labs' AI systems, including prompts and responses.
- Business Information
- Information relating to a user's business, including business profile, operations, inventory and commercial details.
- Business & Financial Records
- Invoices, receipts, ledgers, GST information, purchase and sales records, statements and similar records processed through the Services.
- Consent
- A freely given, specific, informed, unconditional and unambiguous indication of the Data Principal's agreement to the processing of Personal Data, where required by applicable law.
- Data Fiduciary
- Robusta AI Labs, acting as the entity determining the purpose and means of processing Personal Data.
- Data Principal
- The individual to whom the Personal Data relates.
- Personal Data
- Any data about an individual who is identifiable by or in relation to such data, as defined under applicable law.
- Processing
- Any operation performed on Personal Data including collection, recording, storage, organisation, retrieval, use, disclosure, transfer, sharing, anonymisation or deletion.
- Services
- The Robusta AI Labs mobile application, website and AI-powered products, features and services.
- Uploaded Content
- Documents, images, audio, video and other files uploaded by users.
- User
- Any individual accessing or using the Services.
- AI model
- The machine learning or artificial intelligence systems used to generate AI Outputs or provide AI-powered functionality within the Services.
- Financial Information
- Information relating to a User’s income, bank accounts, transactions, credit history, financial obligations, assets or liabilities.
- Credit Information
- Information relating to a User’s creditworthiness, credit score, repayment behaviour or credit history obtained from the User or authorised third parties.
- Authentication Data
- Passwords, OTPs, PINs, biometric authentication data, security questions and other credentials used to verify a User’s identity.
- Applicable Law
-
“Applicable Law” means all applicable laws, statutes, ordinances, rules, regulations, notifications, circulars, directions, guidelines, orders and other legally binding governmental requirements in force from time to time in India that govern the Services or the collection, use, disclosure, storage, sharing, transfer, retention, protection or other Processing of Personal Data, including, without limitation:
(a) the Digital Personal Data Protection Act, 2023 and the rules framed thereunder (including the Digital Personal Data Protection Rules, 2025, as amended from time to time);
(b) the Information Technology Act, 2000 and applicable rules, regulations and notifications issued thereunder;
(c) any applicable directions, circulars or guidelines issued by governmental authorities, statutory regulators or competent regulatory bodies relating to privacy, data protection, cybersecurity, electronic records, electronic communications or information security; and
(d) any amendments, replacements or re-enactments of the foregoing.
2. Introduction
- This Privacy Policy (“Policy”) explains how Robusta AI Labs (“Robusta AI Labs”, the “Company”, “we”, “our”, or “us”) collects, uses, stores, processes, shares, retains and otherwise handles Personal Data in connection with your access to or use of “BharatBhagat”, the mobile application developed, owned and operated by Robusta AI Labs, together with our websites and all related products, features, technologies and services (collectively, the “Services”).
- This Policy applies to all individuals who access, browse, register for or otherwise use the Services (“Users”, “you”, or “your”). By accessing or using the Services, submitting information to us, or otherwise interacting with the Company, you acknowledge that your Personal Data may be processed in accordance with this Policy and Applicable Law.
- This Policy should be read together with our Terms of Service, which govern your use of the Services. Unless otherwise defined in this Policy, capitalised terms used herein shall have the meanings assigned to them in the Terms of Service. In the event of any inconsistency between this Policy and the Terms of Service with respect to the processing of Personal Data, this Policy shall prevail to the extent of such inconsistency.
- Robusta AI Labs is committed to protecting your privacy and processing your Personal Data responsibly, transparently and securely. This Policy describes the categories of Personal Data we collect, the purposes for which such data is processed, the circumstances in which it may be disclosed, the safeguards we implement to protect it, and the choices and rights available to you under Applicable Law.
- This Policy applies to Personal Data that you provide directly to us, that is collected automatically when you use the Services, or that we lawfully receive from third parties, including financial institutions, business partners, service providers, identity verification providers, publicly available sources, or other entities authorised by you or permitted under Applicable Law.
- If you do not agree with the terms of this Policy or do not wish for your Personal Data to be processed in the manner described herein, you should refrain from accessing or using the Services or submitting Personal Data through the Services. Where processing is based on your consent, you may withdraw such consent in accordance with Applicable Law and this Policy, subject to any legal or contractual limitations.
3. Information We Collect
Robusta AI Labs (“Robusta AI Labs”, the “Company”, “we”, “our”, or “us”) collects and processes Personal Data only to the extent reasonably necessary to provide, secure, maintain and improve the Services, comply with applicable law and fulfil the purposes described in this Privacy Policy.
The categories of Personal Data we collect depend upon how you interact with the Services and the features you choose to use. Some information is provided directly by you, some is generated through your use of the Services and some may be received from authorised third parties.
3.1 Categories of Personal Data Collected
| Category | Examples |
|---|---|
| Personal Profile Information | Name, mobile number, email address, date of birth, gender, profile photo, preferred language and profile information. |
| Business Information | Business name, business type, GST details, PAN, address, Udyam Registration Number, industry, inventory and operational information. |
| Business & Financial Records | Invoices, receipts, ledgers, sales and purchase records, expenses, cash books and accounting records. |
| Banking & Payment Information | Bank account details, UPI identifiers, payment references and subscription/payment information. |
| Identity Verification Information | Government-issued identity documents and KYC information where required. |
| Customer & Supplier Information | Information relating to customers, suppliers, employees or business contacts uploaded by you. |
| AI Inputs | Prompts, questions, commands and instructions submitted to AI-powered Services. |
| AI Conversation History | Conversation history, AI responses and contextual interaction history. |
| Uploaded Documents | Invoices, PDFs, spreadsheets, GST returns, contracts, bank statements and similar files. |
| Uploaded Images | Invoices, receipts, handwritten notes, products, inventory and other images uploaded for AI analysis. |
| Uploaded Audio | Voice notes and spoken instructions. |
| Uploaded Video | Videos voluntarily uploaded for AI-assisted analysis. |
| Communication Information | Emails, support requests, surveys and customer service interactions. |
| Device & Technical Information | IP address, device identifiers, operating system, browser, diagnostics and crash logs. |
| Usage Information | Feature usage, activity logs, preferences and session information. |
| Location Information | Approximate or precise location where permission is granted. |
| Cookies & Similar Technologies | Cookies, SDKs and similar technologies where applicable. |
3.2 Information Generated Through Your Use of the Services
- AI-generated summaries and reports.
- Bookkeeping insights and financial analysis.
- Business performance insights and recommendations.
- Text extracted from uploaded documents/images/videos and if required using OCR.
- Metadata relating to AI interactions.
- Security, audit and operational logs.
3.3 Information Received from Third Parties
Where permitted by applicable law or authorised by you, Robusta AI Labs may receive Personal Data from third parties to provide, enhance or verify the Services.
- Financial institutions and banking partners.
- Payment service providers.
- Identity verification and KYC providers.
- Government databases and publicly available records where permitted by law.
- Business partners and integrations authorised by you.
- Analytics, communication and customer support providers.
3.4 Automatically Collected Information
Certain technical information is collected automatically when you access or use the Services.
- Application version and configuration.
- Operating system and device model.
- Network information and IP address.
- Session identifiers.
- Crash reports and diagnostic logs.
- Security and fraud prevention logs.
- Performance and reliability metrics.
3.5 Derived and Inferred Information
Robusta AI Labs may derive or infer information from the Personal Data you provide or through your interaction with the Services to improve functionality and personalise your experience.
- Business trends and accounting insights.
- AI-generated summaries and recommendations.
- User preferences and interaction patterns.
- Operational and bookkeeping insights.
- Risk indicators for fraud prevention and security.
3.6 Future Lending and Financial Services
If Robusta AI Labs introduces lending or regulated financial products in the future, we may collect additional Personal Data such as credit-related information, KYC records, income details, repayment information and other information required under applicable law. Where required, users will be provided with additional notice and consent mechanisms.
3.7 Information You Choose Not to Provide
Certain categories of Personal Data are necessary for Robusta AI Labs to provide specific features and Services. If you choose not to provide such information, some features may be unavailable, operate with limited functionality or be incapable of providing accurate AI responses.
3.8 Accuracy of Information
You are responsible for ensuring that the Personal Data and other information you provide to Robusta AI Labs is accurate, complete and kept reasonably up to date.
3.9 AI-Specific Collection Notice
Where you upload documents, images, audio, video or submit AI Inputs, Robusta AI Labs will process such content for the purpose of providing AI-powered Services, maintaining conversation continuity, improving user experience, enhancing safety and, where permitted by applicable law, improving and evaluating AI systems using appropriately anonymised information.
4. How We Use Your Personal Data
Robusta AI Labs processes Personal Data only for lawful purposes and in accordance with the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025 and other applicable laws. The categories of Personal Data collected by Robusta AI Labs are processed solely for the purposes described below.
The table below provides an overview of the principal purposes for which Personal Data may be processed.
| Category of Personal Data | Purpose of Processing | Services to be provided |
|---|---|---|
| Personal Profile Information | Create and manage your account, verify identity, personalise your experience, communicate with you and provide customer support. | User registration, account management, authentication, login security, profile management, customer support, personalised dashboard, AI assistant interactions. |
| Business Information | Provide bookkeeping, business management and AI-powered business assistance. | Business onboarding, company profile management, bookkeeping, invoice management, inventory management, GST management, business analytics, AI business assistant, financial reporting. |
| Business & Financial Records | Maintain financial records, generate insights, analyse transactions, prepare reports and provide AI-assisted bookkeeping. | AI bookkeeping, ledger management, transaction recording, expense tracking, income tracking, financial statement generation, cash flow analysis, profitability insights, budgeting and forecasting, tax preparation assistance. |
| Banking & Payment Information | Process payments, subscriptions, refunds and payment verification where applicable. | Subscription payments, payment verification, refunds, bank account linking (where enabled), payment reconciliation, automated payment processing. |
| Identity Verification Information | Identity verification, fraud prevention, KYC and regulatory compliance where applicable. | Account verification, KYC verification (where legally required), fraud prevention, secure account recovery, regulatory compliance. |
| Customer & Supplier Information | Enable management of business relationships and generate AI-assisted business insights. | Customer management, supplier management, CRM, invoice generation, quotation generation, payment tracking, receivables and payables management, communication records. |
| AI Inputs | Generate AI-powered responses, answer queries and provide personalised assistance. | AI chatbot assistance, question answering, business guidance, bookkeeping assistance, financial analysis, report generation, workflow automation and personalised AI recommendations. |
| AI Conversation History | Maintain continuity of conversations, improve user experience and provide contextual AI responses. | Conversation history, chat continuity, contextual AI assistance, saved chats, follow-up queries, personalised AI interactions and user support. |
| Uploaded Documents | Analyse documents, extract information using OCR and generate AI-assisted insights. | Document upload and storage, OCR-based data extraction, invoice and receipt processing, bookkeeping automation, financial analysis, report generation and AI document assistance. |
| Uploaded Images | Analyse images, recognise relevant content and tailor AI responses. | Image upload and analysis, OCR from images, invoice and receipt scanning, visual content recognition, AI-assisted image analysis and personalised responses. |
| Uploaded Audio | Transcribe and analyse audio content where applicable. | Audio upload, speech-to-text transcription, audio analysis, voice-based AI assistance and business insights derived from audio content. |
| Uploaded Video | Analyse uploaded video content where supported by the Services and generate AI assisted insights and responses. | Video upload, video analysis (where supported), content extraction, AI-generated insights, visual understanding and business-related assistance from uploaded videos. |
| Communication Information | Respond to enquiries, improve support quality and communicate important service information. | Customer support, helpdesk services, responding to enquiries, service notifications, account-related communications, feedback management and issue resolution. |
| Device & Technical Information | Maintain security, diagnose technical issues, monitor performance and prevent fraud. | Account security, fraud prevention, authentication, device management, performance monitoring, error detection, troubleshooting and service optimisation. |
| Usage Information | Improve features, understand user behaviour and enhance the Services. | Usage analytics, feature improvement, personalised user experience, AI service enhancement, product development and service optimisation. |
| Location Information | Provide location-dependent features where enabled by you. | Location-based services, regional settings, applicable tax and compliance features, fraud prevention and localisation of services (where enabled by you). |
| Cookies & Similar Technologies | Maintain sessions, improve performance, analyse usage and enhance user experience. | User authentication, session management, preference storage, security, analytics, performance monitoring and personalised user experience. |
4.1 General Purposes of Processing
- Provide and maintain the Services.
- Improve AI models and service quality using anonymised information where permitted by law.
- Ensure security, fraud prevention and system integrity.
- Comply with legal and regulatory obligations.
- Respond to user requests and grievances.
- Develop new features and improve existing functionality.
4.2 AI Processing Notice
Where AI-powered features are used, Robusta AI Labs may process AI Inputs, uploaded documents, images, audio, video and AI Conversation History to generate responses, provide contextual assistance, improve service quality and maintain the safety and reliability of the Services in accordance with this Privacy Policy and applicable law.
5. AI Processing and Improvement
Robusta AI Labs is an AI-powered platform that assists users with bookkeeping, business management, financial organisation and related services bundled as an AI CFO. To provide these features, Robusta AI Labs processes certain categories of Personal Data through AI-powered systems in accordance with the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025 and this Privacy Policy.
5.1 AI Inputs
When you submit prompts, questions, commands or instructions, Robusta AI Labs processes those AI Inputs to understand your request, generate responses and provide the requested services.
5.2 Processing of Uploaded Content
| Uploaded Content | Purpose of AI Processing |
|---|---|
| Documents | Extract information using OCR, analyse business records, generate summaries and provide bookkeeping assistance. |
| Images | Recognise relevant content, analyse invoices, receipts, handwritten notes and other uploaded images to tailor AI responses. |
| Audio | Transcribe and analyse voice recordings where supported by the Services. |
| Video | Analyse uploaded videos where supported to provide AI-assisted insights. |
| Business & Financial Records | Generate reports, categorise transactions, identify trends and provide financial insights. |
5.3 AI Conversation History
Robusta AI Labs may retain AI Conversation History to provide continuity across interactions, improve contextual understanding and enhance your overall experience, subject to the retention practices described in this Privacy Policy.
5.4 Tailoring AI Responses
AI-generated responses may be tailored using information you provide during your interactions, including uploaded documents, images, audio, video, business information and previous AI conversations, to deliver more relevant and useful responses.
5.5 AI Improvement
Where permitted under applicable law, Robusta AI Labs may use appropriately anonymised information to evaluate, test and improve AI models, enhance response quality, increase system reliability, develop new features and strengthen security.
5.6 Human Review
In limited circumstances, authorised personnel may review AI interactions or uploaded content where reasonably necessary for customer support, security investigations, debugging, quality assurance, legal compliance or fraud prevention, subject to appropriate access controls.
5.7 AI Safety and Security
- Protect the confidentiality of AI Inputs and uploaded content.
- Prevent unauthorised access to AI systems.
- Detect misuse, fraud and malicious activity.
- Improve the reliability and safety of AI-generated responses.
- Implement appropriate technical and organisational safeguards.
5.8 AI Limitations
AI-generated responses are intended to assist users and should not be treated as a substitute for professional financial, accounting, tax or legal advice. Users remain responsible for reviewing and verifying AI-generated outputs before relying upon them.
6. Sharing of Your Personal Data
Robusta AI Labs may share your Personal Data only where such sharing is reasonably necessary to provide the Services, comply with applicable law, protect legitimate interests, fulfil contractual obligations or where you have authorised such sharing.
Robusta AI Labs does not sell your Personal Data.
6.1 Categories of Recipients
| Recipient Category | Purpose of Sharing |
|---|---|
| AI Service Providers | Processing AI Inputs, analysing uploaded content and generating AI-powered responses. |
| Cloud Infrastructure Providers | Hosting, storage, disaster recovery and infrastructure management. |
| Communication Service Providers | Sending OTPs, emails, notifications and customer support communications. |
| Payment Service Providers | Processing payments, subscriptions and refunds where applicable. |
| Identity Verification Providers | Identity verification, KYC and fraud prevention where applicable. |
| Analytics Providers | Product analytics, diagnostics, crash reporting and service improvement. |
| Professional Advisers | Legal, accounting, audit and consulting services. |
| Government Authorities | Compliance with lawful requests, court orders and regulatory obligations. |
| Business Partners and Service Providers | Providing integrated services and operational support. |
| Successors or Transferees | Corporate restructuring, merger, acquisition or sale of business assets. |
6.2 AI Service Providers
Where Robusta AI Labs engages third-party AI service providers, such providers may process AI Inputs, uploaded documents, images, audio, video and other Personal Data solely for providing AI-powered functionality on behalf of Robusta AI Labs.
6.3 Legal Disclosures
Robusta AI Labs may disclose Personal Data where required to:
- Comply with applicable law or regulatory requirements.
- Respond to lawful governmental or judicial requests.
- Protect the rights, property or safety of Robusta AI Labs or others.
- Investigate fraud, misuse or security incidents.
- Establish, exercise or defend legal claims.
6.4 Business Transfers
Where Robusta AI Labs undergoes a merger, acquisition, restructuring, financing or sale of assets, Personal Data may be transferred as part of that transaction, subject to applicable law.
6.5 Safeguards
Where Personal Data is shared with third parties, Robusta AI Labs will take reasonable steps to ensure that such parties process Personal Data in accordance with applicable law and appropriate contractual obligations.
7. Security of Your Personal Data
Robusta AI Labs implements reasonable technical, organisational and administrative safeguards to protect Personal Data against unauthorised access, disclosure, alteration, loss or destruction.
These safeguards may include:
- Encryption during transmission and, where appropriate, at rest.
- Role-based access controls and authentication mechanisms.
- Secure cloud infrastructure and network security controls.
- System logging, monitoring and security event management.
- Vendor due diligence and contractual safeguards.
- Employee confidentiality obligations and security awareness measures.
- Business continuity and disaster recovery processes.
7.1 Security of AI Processing
Additional safeguards are implemented for AI Inputs, AI Conversation History, uploaded documents, images, audio, video and Business & Financial Records processed through the Services.
8. Personal Data Breach Notification
Robusta AI Labs maintains procedures to detect, assess, contain, investigate and respond to Personal Data Breaches.
Where a Personal Data Breach occurs, Robusta AI Labs may:
- Contain and investigate the incident.
- Assess the scope and potential impact.
- Implement corrective and preventive measures.
- Restore affected systems where appropriate.
- Notify affected Data Principals where required under applicable law.
- Notify competent authorities where required under applicable law.
8.1 AI-Specific Incident Response
Where an incident involves AI Inputs, AI Conversation History or uploaded content, Robusta AI Labs will take reasonable steps to investigate, mitigate and remediate the incident.
9. Retention and Deletion of Personal Data
Robusta AI Labs retains Personal Data only for as long as reasonably necessary to provide the Services, fulfil the purposes described in this Privacy Policy, comply with applicable law, resolve disputes and protect legal rights.
9.1 General Retention Principles
- Nature and sensitivity of the Personal Data.
- Purpose for which the Personal Data was collected.
- Legal and regulatory retention obligations.
- Fraud prevention, dispute resolution and audit requirements.
- Operational and security requirements.
9.2 Category-wise Retention
| Category | General Retention Principle |
|---|---|
| Account & Profile Information | Retained while your account remains active unless earlier deletion is required or requested. |
| Business & Financial Records | Retained as necessary for service delivery and applicable legal or regulatory obligations. |
| AI Inputs & Conversation History | Retained to provide AI-powered services and continuity, subject to this Privacy Policy. |
| Uploaded Content | Retained until deleted by you or no longer required for the Services, unless retention is required by law. |
| Technical & Usage Information | Retained for security, analytics and operational purposes. |
9.3 Deletion and Anonymisation
Where Personal Data is no longer required, Robusta AI Labs will take reasonable steps to delete or anonymise such Personal Data as soon as reasonably practicable, unless continued retention is required under applicable law.
9.4 Account Deletion
If you request deletion of your account, Robusta AI Labs will process the request in accordance with applicable law. Certain information may continue to be retained where legally required.
9.5 Backup Systems
Personal Data may continue to exist in secure backup and disaster recovery systems for a limited period until overwritten or deleted in accordance with backup retention practices.
10. Privacy Contact and Grievance Redressal Mechanism
If you have questions or concerns regarding this Privacy Policy or the processing of your Personal Data, you may contact Robusta AI Labs using the details below.
| Designation | Contact Details |
|---|---|
| Grievance Officer | Email: hello@robustalabs.ai |
You may contact the Privacy Contact for:
- Privacy-related questions or concerns.
- Requests relating to your Personal Data.
- Withdrawal of consent.
- Correction or deletion requests.
- Privacy-related grievances.
- Questions relating to AI-powered processing.
11. Children's Privacy
Robusta AI Labs is intended only for individuals who are 18 years of age or older and who are legally competent to enter into a binding agreement under applicable law.
The Services are not directed at children. If Robusta AI Labs becomes aware that it has inadvertently collected the Personal Data of a child, reasonable steps will be taken to delete or anonymise such Personal Data unless retention is required under applicable law.
12. Exercising Your Privacy Rights
Subject to applicable law, you may exercise your privacy rights by contacting the Privacy Contact or through in-app functionality where available.
| Privacy Right / Request | How to Exercise |
|---|---|
| Request information regarding processing of Personal Data | Contact the Privacy Contact or use available in-app functionality. |
| Correction or updating of Personal Data | Update account information or contact the Privacy Contact. |
| Deletion of Personal Data | Submit a deletion request through the app or by email. |
| Withdrawal of consent | Contact the Privacy Contact or use available account settings. |
| Privacy-related grievance | Use the grievance mechanism described in this Privacy Policy. |
Robusta AI Labs may verify your identity before processing any request relating to your Personal Data.
13. International Transfer of Personal Data
To provide the Services, Robusta AI Labs may engage third-party service providers, cloud infrastructure providers and AI service providers operating in multiple jurisdictions. Personal Data may therefore be processed outside India where necessary to provide the Services.
Where Personal Data is transferred outside India, Robusta AI Labs will take reasonable steps to ensure such transfers comply with applicable law and appropriate safeguards.
14. Updates to this Privacy Policy
Robusta AI Labs may update this Privacy Policy from time to time to reflect changes in applicable law, technology, business operations or the Services.
The updated Privacy Policy will be published through the Services together with the revised effective date. Where required by applicable law, Robusta AI Labs will obtain consent or provide additional notice before implementing material changes.
15. Jurisdiction
This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising out of or in connection with this Privacy Policy, including any questions regarding its existence, validity, or termination, shall be subject to the exclusive jurisdiction of the courts at Gurgaon, Haryana, India - 122001.