Privacy Policy

Last updated: 2026-10-05

This policy explains what we collect, why, and what we deliberately do not. We have tried to write it plainly rather than defensively.

1. The short version

We operate the services on ai.pharmalite.in and distribute theTabDriver browser extension. We collect the minimum needed to run an account, take payment, and provide support. We do not sell your personal information. We do not run advertising networks or third-party trackers on our sites.

TabDriver is designed so your browsing content never reaches us. Page content, prompts, and model responses are sent by your browser directly to whichever AI provider you configure. Your API key is stored in your browser profile. We are not in the request path.

2. Who we are

Pharmalite is operated from Jhansi, Uttar Pradesh, India. For any privacy question, correction, or deletion request, contact us atadmin@pharmalite.in. We respond to all requests.

3. What we collect

Information you give us

• Account details: email address, and if you sign in with Google, the basic profile Google returns (name, picture, verified email).
• Payment information: handled by Razorpay. We receive a transaction identifier and payment status. We never see or store your card number, UPI credentials, or banking details.
• Support messages: if you contact us, we keep the conversation so we have context when replying.
• Content you submit: a review or feature request you send us may be published with your name if we ask your permission first.

Information collected automatically

• Account and subscription records: plan, seat assignments, and billing history.
• Device records: for paid and team plans, we record which devices are authorised for your account. This exists to enforce seat limits, not to track you.
• Usage counters: the plan limits we meter, such as daily question counts. These are counts, not transcripts of what you asked.
• Server logs: IP address, timestamp, and requested URL, retained for security and diagnostics.

What we do not collect

• The content of pages you visit with TabDriver.
• Your prompts, or the model's answers.
• Your API keys.
• Your browsing history outside TabDriver's own feature set.

4. How TabDriver handles your data

TabDriver runs locally in your browser. The extension sends requests directly to the AI provider you selected. This means:

• Your API key is stored in your browser's local extension storage and is transmitted only to your chosen provider.
• Page content the agent reads is sent to that provider, under that provider's terms of service. Those terms apply, not ours.
• Conversation history, scheduled tasks, and skills are stored locally in your browser profile.

This is a deliberate design choice and it carries a trade-off. It means we cannot see or moderate what happens inside the extension, and it means our subscription is flat rather than usage-based. We cannot meter tokens we never receive. Review the privacy policy of whichever AI provider you connect; their terms, not these, govern that data.

5. How we use information

• To provide the service, process payment, and manage your subscription.
• To enforce plan limits and seat counts.
• To respond to support requests.
• To detect fraud and abuse.
• To send service announcements about changes that affect your account. Marketing email requires your consent and includes an unsubscribe link in every message.

6. Who we share it with

We share the minimum necessary with:

• Razorpay: payment processing.
• Google: if you choose "Continue with Google" for sign-in.
• Our email provider: transactional messages about your account.
• Professional advisers or authorities: where we are legally required to disclose.

We do not sell, rent, or trade personal information. We do not share your data with advertisers or data brokers.

7. Retention

• Account data: for as long as your account is active, then deleted or anonymised within 60 days of closure.
• Billing records: retained for the period required by Indian tax and accounting law, even after account closure.
• Server logs: up to 90 days.
• Support correspondence: up to 2 years, so we have context if you return.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 (India) and the GDPR where it applies, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request erasure, subject to legal retention obligations.
• Withdraw consent for optional processing.
• Nominate someone to exercise these rights on your behalf.

Email admin@pharmalite.in with the subject "Privacy request". We aim to respond within 30 days and usually much sooner. We do not discriminate against users who exercise these rights.

9. Cookies

We use a session cookie to keep you signed in and a small number of strictly necessary cookies for security and load balancing. We do not use advertising cookies, cross-site trackers, or third-party analytics that build profiles across other websites.

10. Children

Our services are not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

11. Security

We use HTTPS in transit, hashed passwords, and access controls on personal data. No system is perfectly secure. If a breach affects your personal information we will notify you and the relevant authority as required by law.

12. International transfers

Pharmalite is based in India. Some service providers we use process data in other countries. Where data is transferred outside India we rely on standard contractual clauses or equivalent safeguards, consistent with Indian law.

13. Medical disclaimer

Pharmalite also operates pharmacy education sites. Content there iseducational only and is not medical advice, diagnosis, or treatment. Never use it as a substitute for a qualified healthcare professional.

14. Changes to this policy

We will post material changes here and update the date above. For significant changes affecting your rights we will email account holders at least 14 days in advance.

15. Definitions

"Service": the Pharmalite websites on ai.pharmalite.in and the TabDriver extension. "Personal Data": any information that identifies or can identify a person. "You" / "User": the person using the Service.

16. Contact

Privacy questions: admin@pharmalite.in
Pharmalite, 101, Lord Buddha, Bundelkhand University, Jhansi, Uttar Pradesh284128, India