Privacy notice

1. Who we are

Pre-sent is provided by GSV One Sports Private Limited (CIN U93110UP2023PTC183819), registered office Address to be updated ("we", "us"). We decide why and how your personal data is used: under Indian law we are the Data Fiduciary, and elsewhere the data controller.

For anything about your data, write to privacy@pre-sent.ai. Our Grievance Officer is Vaibhav Singh (privacy@pre-sent.ai, +1-1234567890).

2. What we collect

Only what Pre-sent needs to work:

• Your account: email address, name, what your family calls you, language, time zone, and how you sign in (email code or Google). If you sign in with Google we receive your name and email from Google, never your Google password.
• The people you add: their names, relationships, and, if you choose to add them, birth dates and email addresses.
• Your messages: voice and video recordings, preview images, titles, notes, the people each message is for, and when it should open.
• Automatic transcripts of your recordings.
• Messages relatives record for a capsule you organise, with the name they give.
• Records of delivery: when a message was sent, opened, played or saved, and the emails we sent about it.
• Technical data: the sign-in session cookie, your phone's notification token (if you allow notifications), and server logs with IP addresses and request times, used for security.

3. What we do not do

We do not sell or rent personal data. We do not show advertising, track you across other websites or apps, or build marketing profiles. We do not use your recordings or transcripts to train artificial intelligence, and we have told Amazon Web Services not to use them to improve its services. Our staff do not browse your messages.

4. Why we use it, and on what basis

• To provide Pre-sent: keep your messages, deliver them to the people you chose at the time you chose, email them when a message is ready, and let them play and save it. Basis: your consent and our agreement with you (the Terms).
• To transcribe recordings so families can read along. Basis: your consent, given by using the feature.
• To keep the service and its users safe: sign-in limits, fraud and abuse prevention, security logs. Basis: legitimate uses permitted by law and our legitimate interest in protecting the service.
• To meet legal obligations and answer lawful requests from authorities.

5. Data about other people

When you add a family member, an email address, a birthday or a recording that includes someone else, you confirm that you are allowed to share it with us for this purpose and, where needed, that you have their permission or are their parent or lawful guardian. The people you add will receive emails from Pre-sent about messages left for them; every such email has a one-click unsubscribe link. Anyone can ask us to remove their details by writing to privacy@pre-sent.ai.

6. Children

Pre-sent accounts are only for adults aged 18 or over. Parents and guardians may record messages for children and add a child's name and birth date; a parent or guardian provides that data, and we use it only to deliver the parent's messages. We do not track children, show them advertising or profile them. If you believe a child under 18 has created an account, write to privacy@pre-sent.ai and we will delete it.

7. Who handles your data for us

We use a small number of service providers, under contracts that let them use the data only to provide their service to us:

• Amazon Web Services (Asia Pacific, Mumbai, India): hosting, databases, storage of recordings, sending email and automatic transcription (Amazon Transcribe).
• Google: only if you choose to sign in with Google.
• Expo: delivers notifications to the Pre-sent phone app (it receives the notification token and the notification text, never your recordings).

8. Where your data is kept

Your account, family data, recordings and transcripts are stored in India, in Amazon Web Services' Mumbai region. Google and Expo may process the limited data they handle in other countries; such transfers follow the law in force, including any restrictions notified by the Government of India.

9. How long we keep it

• A message is kept unchanged until it opens. After it opens, its recipients have 30 days to save it to their own devices. The recording is then moved out of everyone's reach, including ours in the app, and permanently deleted one year later.
• Your account and family data are kept while your account exists. When you delete your account, your family's data, recordings and transcripts are deleted. Safety copies (deleted recordings kept for 30 days, database recovery points kept for up to 35 days) expire automatically after that.
• Server logs are kept for 30 days. Raw email sent to our addresses is kept for 30 days.
• We may keep data longer only when the law requires it, for example to answer a legal claim.

10. How we protect it

Data is encrypted in transit and at rest. Recordings are kept in private storage and reached only through links that expire within hours. Sign-in uses one-time codes or Google, with limits on attempts. Access to our systems is restricted, logged and monitored. No system is perfectly secure; if a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.

11. Cookies and storage on your device

The website uses one essential cookie, which keeps you signed in. It cannot be read by scripts and is not used for tracking. The website and app also store your drafts, saved messages and settings on your device so they work offline; signing out removes them unless you choose to keep saved messages. We use no advertising or analytics cookies.

12. Your rights

You can, at any time:

• see and download the data we hold about you (Settings, Download my data, or ask us);
• correct or update it;
• delete your account and its data (Settings), or ask us to erase specific data;
• withdraw your consent (this means we stop providing the parts of Pre-sent that need it);
• nominate a person to exercise these rights for you if you die or become unable to;
• complain to our Grievance Officer, and, if you are not satisfied, to the Data Protection Board of India (or your local data protection authority if you live outside India).

Write to privacy@pre-sent.ai. We will acknowledge your request within 48 hours and answer within 30 days. We may ask you to confirm your identity first.

13. Changes

If we change this notice in a way that matters, we will tell you by email or in the app before the change takes effect. The date at the top shows the latest version.

14. Contact

GSV One Sports Private Limited, Address to be updated. Email privacy@pre-sent.ai. Grievance Officer: Vaibhav Singh, +1-1234567890.

15. If you live in the UAE or elsewhere in the Gulf

This section adds to the rest of this notice for people who live in the United Arab Emirates, Saudi Arabia, Qatar, Bahrain, Kuwait or Oman. It is written for the UAE's Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, Saudi Arabia's Personal Data Protection Law and the data protection laws of the other Gulf countries. If the law of your country gives you more protection than this notice, that law applies.

• Who is responsible: GSV One Sports Private Limited, in India, is the controller of your personal data. We have no office in the Gulf; write to privacy@pre-sent.ai about anything to do with your data.
• Transfer to India: your data is stored and processed in India (Amazon Web Services, Mumbai). We transfer it there because that is necessary to provide the service you asked for under the Terms and, where your law requires consent for the transfer, with the consent you give when you create an account and accept this notice. Our service providers are bound by contract to protect it.
• Legal basis: we use your data to perform our agreement with you, with your consent (for example, for transcription), to keep the service and its users safe, and to comply with the law. You can withdraw your consent at any time; this does not affect what was done before.
• Your rights: as well as the rights in section 12, you can ask how your data is used, receive a copy in a commonly used electronic format, ask us to restrict or stop using it, and object to uses based on our legitimate interests. We do not make decisions about you based only on automated processing, and we do not use your data for direct marketing without your consent.
• Recordings: voice and video can reveal sensitive matters, such as health, religion or family life. We use recordings only to store, transcribe and deliver them as you instruct. We never use them to identify people by their face or voice.
• Recording other people: in the UAE and several other Gulf countries, recording, photographing or sharing a person's voice, image or private life without their consent can be a criminal offence. Record and share only people who have agreed (see section 5).
• Breaches: if a breach puts your data at risk, we will tell you, and the authority your law requires, such as the UAE Data Office or the Saudi Data and Artificial Intelligence Authority (SDAIA), within the time the law sets.
• Complaints: please write to our Grievance Officer first. If you are not satisfied, you can complain to the data protection authority in your country, such as the UAE Data Office or SDAIA.
• Age: you must be 18 or older, or older if the age of legal capacity where you live is higher.