Terms of Service & Privacy Policy

1 About Osged

Osged ("we", "our", "the Platform") is an AI-powered personal shopping assistant operated by Osged (a startup in the process of formal registration under Indian law). Osged helps users discover, compare, and receive personalised product recommendations from various Indian and global e-commerce platforms.

These Terms of Service and Privacy Policy ("Terms") govern your use of our website, mobile interface, and all associated services. By creating an account or using Osged in any form, you confirm that you have read, understood, and agree to these Terms.

2 Acceptance of Terms

You must be at least 13 years of age to use Osged. By checking the "I agree" checkbox during registration, you provide your free, informed, and unambiguous consent as required under: DPDP Act 2023 §6 IT Act 2000 §43A

• You confirm all information provided during signup is accurate and truthful
• You consent to the collection and processing of your personal data as described in these Terms
• You agree not to misuse the platform or circumvent its security measures
• You acknowledge that product recommendations are AI-generated suggestions, not professional advice

If you are registering on behalf of a minor under your guardianship, you accept these Terms on their behalf and take full responsibility for their use of the platform.

3 Data We Collect

We collect only what is necessary to deliver a personalised shopping experience. The following table outlines all categories of data we collect: SPDI Rules 2011 §4

What We Do NOT Collect

• Payment card details or bank account information — we never process payments directly
• Aadhaar number, PAN, or any government-issued identity documents
• Biometric data of any kind
• Location data beyond city-level (you provide your city; we do not track GPS)
• Medical or health records

4 How We Use Your Data

We process your data solely for the purposes for which you provide consent. DPDP Act 2023 §4

Primary Purposes

• Personalised recommendations — Your age, gender, budget, and category preferences are used to improve the relevance of AI-generated product suggestions
• Account management — Your email and name are used for login, OTP verification, and account-related communications
• Style & Care advice — Your inventory items, gender, and age inform outfit suggestions and product care guidance
• Gift Finder — Your profile data helps the AI provide contextually appropriate gift recommendations
• Product Comparison — Your inventory and preferences are used to rank and reason about products you compare

Secondary Purposes (Analytics)

• Improving our AI models' accuracy and relevance over time (aggregated, anonymised data only)
• Understanding how users interact with different features to improve the product
• Detecting and preventing fraudulent or abusive use of the platform

What We Will NEVER Do

• Sell your personal data to any third party
• Share your data with advertisers or allow paid product promotion via your data
• Use your data to send unsolicited marketing emails (we only send transactional emails like OTPs and account notices)
• Profile you for insurance, credit, employment, or government purposes

5 Data Storage & Security

Your data is stored on secure servers provided by Supabase (PostgreSQL) and hosted via Render.com, both of which comply with industry-standard security practices. IT Act 2000 §43A SPDI Rules 2011 §8

Security Measures We Implement

• Passwords — All passwords are hashed using bcrypt (industry standard). We never store plain-text passwords
• Transmission — All data is transmitted over HTTPS/TLS encrypted connections
• JWT Tokens — Authentication tokens are signed and expire automatically
• OTP Security — OTPs expire after 10 minutes, are limited to 3 attempts, and are deleted from our database immediately after use
• Image Processing — Uploaded images are stripped of EXIF metadata (including GPS data) before processing
• Input Sanitization — All user inputs are sanitized to prevent SQL injection and cross-site scripting (XSS) attacks

Data Retention

• Your account data is retained for as long as your account is active
• OTP records are deleted within minutes of use or expiry
• Conversation history is retained to provide continuity of service and can be deleted by you on request
• If you delete your account, all personal data is permanently deleted within 30 days

6 Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you have the following rights: DPDP Act 2023 §11-14

• Right to Access — You can request a copy of all personal data we hold about you at any time
• Right to Correction — You can update or correct your personal information through your account settings or by contacting us
• Right to Erasure — You can request deletion of your account and all associated data. We will comply within 30 days
• Right to Withdraw Consent — You can withdraw your consent to data processing at any time by deleting your account. Withdrawal does not affect processing done prior to withdrawal
• Right to Grievance Redressal — You can raise any data privacy concern with us directly (see Section 12 for contact details). If unresolved, you may approach the Data Protection Board of India once it is operational
• Right to Nominate — You may nominate another individual to exercise your rights in the event of your death or incapacitation

To exercise any of these rights, write to us at support.osged@gmail.com with the subject line "Data Rights Request". We will respond within 14 working days.

7 Third-Party Services

Osged integrates with the following third-party services to deliver its features. By using Osged, you acknowledge that your interactions may involve these services:

We do not share your name, phone number, age, gender, or any personally identifying information with these services beyond what is technically necessary. Search queries sent to Amazon and Serper contain no personal identifiers.

8 Affiliate Disclosure

Osged participates in affiliate marketing programmes. When you click on a product link and make a purchase, we may receive a small commission from the retailer at no additional cost to you. This is how we sustain and grow the platform.

Current affiliate programmes: Amazon Associates India (tag: sahajmishra-21). We may add more affiliate partnerships in the future and will update this section accordingly.

9 Prohibited Use

You agree not to use Osged for any of the following: IT Act 2000 §66

• Creating multiple accounts to circumvent usage limits or to harass other users
• Attempting to reverse-engineer, scrape, or extract data from our platform in an automated manner
• Submitting malicious files, scripts, or code through any input field or image upload feature
• Using the platform to make purchasing decisions for illegal goods or services
• Impersonating another person or entity
• Attempting to compromise the security of our platform, databases, or AI systems
• Using our AI outputs for commercial purposes without our written permission

Violation of these prohibitions may result in immediate account termination and, where applicable, reporting to relevant law enforcement authorities under the IT Act, 2000.

10 Limitation of Liability

Osged provides an AI-powered recommendation service. We are not liable for:

• The accuracy, availability, or quality of products listed on third-party e-commerce platforms
• Any purchases you make based on our AI recommendations — all purchasing decisions are made solely by you
• Price changes, out-of-stock situations, or delivery delays on third-party platforms
• Any loss or damage arising from your reliance on AI-generated product comparisons or style advice
• Temporary unavailability of the service due to maintenance, server issues, or third-party API outages

Our maximum liability to you for any claim arising from use of Osged shall not exceed the amount you have paid us in the 12 months preceding the claim. As Osged is currently free to use, this amount is zero.

11 Governing Law & Dispute Resolution

These Terms are governed by and construed in accordance with the laws of India. The following legislation applies:

• Information Technology Act, 2000 and its rules
• Digital Personal Data Protection Act, 2023
• Consumer Protection Act, 2019
• Indian Contract Act, 1872

Any dispute arising from these Terms shall first be attempted to be resolved through mutual discussion. If unresolved within 30 days, disputes shall be subject to the exclusive jurisdiction of competent courts in India.

For consumer grievances, you may also approach the National Consumer Helpline at 1800-11-4000 or file a complaint on the Consumer Disputes Redressal Commission portal.

12 Changes to These Terms

We may update these Terms from time to time to reflect changes in our practices, legal requirements, or new features. When we make significant changes:

• We will update the "Last Updated" date at the top of this page
• We will send an email notification to all registered users at least 7 days before changes take effect
• We will display a notice inside the app the first time you log in after changes
• Continued use of Osged after the effective date constitutes acceptance of the updated Terms

If you disagree with any changes, you may delete your account before the effective date and all your data will be removed as described in Section 6.