Privacy Policy

Aimstors Technology ("Aimstors", "we", "our", "us") is a digital services and software company founded by Md Modassir and operating from India, with a studio in Mumbai. We build websites, mobile apps, AI agents, WhatsApp automation and custom software.

This policy covers aimstors.com, aimstors.blog, our client portal and the products we run, including the AI Agents Store, Omni CRM, Doctor AI, Aerostic (aerostic.in) and TMailBox (tmailbox.xyz). It explains what personal data we collect, why, who we share it with, and the choices you have.

We collect only what we need to run the site and deliver our services:

• Information you give us: name, email, phone or WhatsApp number, business name or website, and the message or project brief you send through our contact form, call-booking dialog, cost estimator, newsletter or implementation requests.
• Account details: name, email and a password (stored by our authentication provider as a one-way hash, never in plain text). If you sign in with Google we receive your name, email and profile picture.
• Purchases: when you buy an AI agent kit we store your name, email, phone (if given), the agent bought, the amount, the order and payment IDs, and the download link we issued. We never see or store your card, UPI PIN or bank details.
• Conversations: messages you type into our AI guide (Aimi), AI agent demos and AI search, and messages you exchange with us on WhatsApp, email or in the client portal.
• Client project data: documents, files, meeting notes and feedback you share while we work together.
• Technical data: IP address, browser and device type, pages viewed, referring page and approximate location, collected through cookies and analytics.

• To reply to enquiries, schedule calls, prepare quotes and deliver projects (contract and pre-contract steps).
• To process payments, deliver downloads and send receipts and service messages.
• To run and secure the site, prevent spam and abuse, and fix problems.
• To understand how the site is used and improve it (analytics).
• To send updates or offers, only where you have agreed. You can opt out at any time.
• To meet legal, tax and accounting obligations.

We rely on your consent, on performing a contract with you (or taking steps you asked for before one), on our legitimate interest in running a secure, useful business, and on legal obligations.

Aimi, the AI agent demos and AI search generate replies by sending the text you type, along with the page context, to our backend and then to a third-party AI model provider. Please do not enter passwords, payment details, government ID numbers or other sensitive personal data into these tools.

AI replies can be wrong or incomplete. They are for guidance and are not professional, legal or financial advice. Prices and commitments are only binding when confirmed in a written quote from Aimstors.

Payments are handled by Razorpay on its own secure pages. Razorpay collects and processes your payment details under its own privacy policy. We receive confirmation of the payment and the order details listed above, so we can deliver your purchase.

We use Google Tag Manager to load analytics and measurement tags, which use cookies and similar technologies to count visits and understand which pages help visitors. Our site also stores a few items in your browser's local storage:

• your sign-in session, if you have an account;
• your light or dark theme choice;
• recent searches on our AI search page;
• private download links for AI agent kits you bought on this device.

You can block or delete cookies and local storage in your browser settings. Some features, such as staying signed in, will not work without them.

We do not sell or rent your personal information. We share it only with service providers who help us run the business, under confidentiality and data-protection commitments:

• Supabase: database, authentication, file storage and backend functions.
• Vercel: website hosting and delivery.
• Razorpay: payment processing.
• Google: Tag Manager and analytics, and Google sign-in if you choose it.
• Meta (WhatsApp): messaging, when you contact us or use WhatsApp-based services.
• AI model providers: to generate AI replies (see "AI features").
• Email delivery providers: to send receipts, confirmations and updates.

We may also disclose information when the law requires it, to enforce our terms, or to protect the rights, safety and property of Aimstors, our clients or others.

Our providers may store and process data on servers in India or in other countries. Where data leaves India we rely on the providers' contractual and technical safeguards and on applicable law.

We keep personal data only as long as needed for the purpose it was collected, then delete or anonymise it. In practice:

• enquiries and project data: while we are working with you or following up, and afterwards until you ask us to delete it;
• order, invoice and payment records: for as long as tax, accounting and other laws require;
• account data: until you close the account or ask for deletion.

Deletion requests follow the steps on our Data Deletion page: we acknowledge within 48 hours and complete deletion within 30 days, apart from records we are legally required to keep.

We use industry-standard safeguards: encrypted connections, access controls, row-level security on our database, server-side payment verification and limited staff access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your data we will notify you and the authorities as the law requires.

Under India's Digital Personal Data Protection Act, 2023 and other applicable laws, you can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct or update inaccurate data;
• delete your data, subject to legal retention requirements;
• withdraw consent you gave (for example for marketing) without affecting earlier processing;
• nominate someone to exercise these rights for you, and have your grievance addressed.

Email privacy@aimstors.com or contact@aimstors.com. We aim to respond within 30 days. If you are unhappy with our response you may complain to the Data Protection Board of India or the relevant authority in your country.

Our services are not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.

Our site links to other websites, such as the live products we have built and affiliate recommendations. They have their own privacy practices and we are not responsible for them.

We may update this policy as our services or the law change. We will post the new version here with a new "last updated" date, and tell you directly if the changes are significant.

For privacy questions, requests or complaints, contact Md Modassir at privacy@aimstors.com or md.modassir@aimstors.com, phone +91 85912 28898.

This policy describes our current practices in plain language. It is not a substitute for legal advice.