Privacy Policy
Your question is personal. The boundary is clear.
Informational policy · effective October 2026
1. Scope & Notice at Collection (DPDP Section 5)
This Privacy Notice is provided by MANJU AP, India in compliance with the Digital Personal Data Protection Act 2023 (DPDP Act) and international data privacy frameworks (GDPR, UK GDPR, CCPA/CPRA). We collect only the minimum personal data necessary to evaluate your exploratory life questions in real-time.
2. Data Minimisation & In-Memory Processing
We operate under a strict default-anonymous model: no mandatory account creation, no government ID collection, and no sale of personal data. When you generate a report, questionnaire inputs (such as goal, age, financial runway, or weekly hours) are transmitted securely over encrypted HTTPS to our processing pipeline and held in an ephemeral, bounded server cache for up to 24 hours to facilitate your review, printing, and immediate follow-ups. After 24 hours, cached records expire and are permanently purged automatically. They are never sold or shared with commercial data brokers. You may also permanently erase your report records immediately at any time via the 'Clear report' interface control or via our deletion endpoints.
2.1 AI Sub-Processors & Data Processing (Google Gemini API)
To model complex constraints, structure milestone horizons, and synthesize personalized Possibility Reports, our secure backend utilizes the Google Gemini API, provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), as an authorized AI sub-processor. Anonymized prompt parameters (such as your exploratory goal, age band, discretionary weekly hours, and runway months) are transmitted to Google LLC via encrypted HTTPS strictly for real-time inference. In accordance with enterprise data protection terms, your assessment inputs are ephemeral, are never used to train or refine Google's foundation AI models, and are never shared with advertising brokers.
3. Data Principal Rights & Global Access (DPDP, GDPR)
As a Data Principal under the DPDP Act 2023 and GDPR, you have the right to: (a) obtain confirmation of data processing; (b) access and correct personal data; (c) demand erasure of your evaluation records; and (d) nominate a representative or lodge a grievance. You may exercise these rights immediately via our interactive interface (by clicking 'Clear report' on your workspace or report page), programmatically via our self-service erasure endpoints (DELETE /api/reports/:id or /api/report/delete?id=
4. Third-Party Advertising & Cookie Controls
We partner with Google AdSense for third-party advertising and cookie controls, serving contextual display advertisements solely on public, non-sensitive editorial guide routes. Ad scripts are default-denied and strictly fire only after affirmative consent under Consent Mode v2 in applicable jurisdictions. Advertising scripts are strictly prohibited from loading on personal assessment routes (/questionnaire, /find-my-situation, /report/*) or safety escalation screens.
5. Statutory Grievance Redressal Mechanism & Governing Law
In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, the Consumer Protection (E-Commerce) Rules 2020, and the DPDP Act 2023 Rules, our designated Grievance Officer and contact details are set forth below:
Resident Grievance Officer & Data Protection Officer: MANJU AP
Postal Address (India): Bangalore, Karnataka, India
Grievance Email: BLESSFORTUNEWORKS@GMAIL.COM
Statutory Redressal Timelines: In compliance with Rule 3(2) of the IT Rules 2021 and Consumer Protection Rules, every grievance received will be acknowledged within twenty-four (24) hours and resolved or redressed within fifteen (15) calendar days from the date of its receipt.
Disputes arising under these Terms or Privacy Policy are governed by the laws of India and subject to the exclusive jurisdiction of the competent courts in Bengaluru, Karnataka, India.