Data Protection & Privacy

PRIVACY
COMPLIANCE.

Local-First Architecture, governed under Indian Judiciary Laws. Your system remains your own.

Indian Legislative & Statutory Compliance

This policy is drafted, administered, and maintained in strict compliance with the laws of the **Republic of India**, including the **Information Technology Act, 2000 (Section 43A)** and the **Digital Personal Data Protection Act, 2023 (DPDP Act)**.

IRIS adheres to the statutory provisions of reasonable security practices, data minimization, and purpose-limitation. By utilizing the software, users consent to the local-first processing of metadata as outlined herein.

Google OAuth Authentication Data

IRIS utilizes Google Login protocols to securely verify identities. When logging in, we collect and store:

User's NameTo personalize your workspace interface logs.
Email AddressUsed for Google Authentication & direct PRO account upgrade (we do NOT issue license keys for maximum safety & security).
Profile PictureUsed strictly for visual layout indicators.
Dynamic TimestampsCollected upon registration and updated dynamically during each active use session.

Payment Processing & Direct Email Binding

We do not store your credit card or payment data on our servers or databases. All financial transactions are encrypted and processed directly by our PCI-compliant payment gateway (Razorpay). Tier licenses include Desktop PRO (₹999), Mobile PRO (₹899 + ₹101 platform fee = ₹1000), and Ultimate Bundle PRO (₹1599 + ₹86 platform fee = ₹1685). Users are responsible for the base license amount plus applicable Razorpay Platform Fees.

Keyless Direct Upgrade: When payment is initiated, your logged-in Google email is the exact account upgraded to PRO. We do not use license keys for safety, user convenience, and enhanced security.

Payment Confirmation & Spam Folder: An automated Payment Successful receipt is dispatched to your registered email immediately. If not visible in your primary inbox, please check your Spam / Junk folder.

Fraud Prevention & Fine Penalty: For legal chargeback defense and transaction integrity, our systems log your exact physical Geolocation coordinates, precise UNIX timestamps, client IP addresses, and Razorpay Cryptographic Order/Payment IDs at the exact moment of license generation. Banned accounts require fines of ₹500 (1st time), ₹1500 (2nd time), or ₹5000 (3rd time), plus settling any ₹1000 Gateway Dispute Fine.

Mandatory Platform Migration & Mobile ↔ Desktop Swap Fee

If a registered user requests to switch their active license from Mobile (IRIS-MX) to Desktop (IRIS-AI) or Desktop to Mobile, an administrative platform swap fee applies to cover re-authorization telemetry:

🔄 Platform Swap Policy Fee: ₹499 — Any user requesting to switch between mobile and desktop entitlement must pay a flat fee of ₹499 to the owner/admin/maintainers of IRIS X AI for the swap.

1️⃣ Device Activation Reset Fee (Anti-Sharing Protection)

Users often try to share accounts by logging in on multiple devices or changing their hardware signatures (HWID) frequently. Each license is strictly tied to a baseline hardware footprint configuration. If a user formats their PC/phone, upgrades hardware, or switches devices, their device slot locks.

💾 Mandatory Device Migration & HWID Reset Fee: ₹199 — Each user license is tied to a baseline hardware footprint configuration (HWID/Device ID). If a user requests a manual device reset, hardware migration, or HWID slot clearance to link a new machine or secondary smartphone, an administrative processing fee of ₹199 per reset request will be enforced to prevent account sharing and token distribution.

90-Day Hardware Device Binding & Tiered Early Unbind Policy

Registered HWID signatures remain bound to your account for 90 Days. After 90 days, users can unbind devices FREE of charge. Requesting an immediate early unbind to bypass the 90-day lock before expiry carries a tiered bypass fee (1 Device: ₹49, 2 Devices: ₹70, 4 Devices Bundle: ₹149).

2️⃣ Inactive Account Re-Activation Fee (Inactive Dead-Weight Cleanup)

Paid accounts that remain completely inactive still consume directory space and require infrastructure maintenance overhead. If an account isn't used for a prolonged period, it gets archived. To get it back online, they have to pay.

⏳ Account Inactivity & Archival Re-activation Policy: ₹299

If a registered user account records zero server API queries, zero application logins, or zero utilization turns for a continuous period exceeding 60 days, the profile will be automatically moved to our cold storage archive to preserve infrastructure bandwidth. To unarchive the account and re-activate live API access endpoints, a processing fee of ₹299 will apply.

3️⃣ Administrative Dispute Overhead Penalty (Chargeback Deterrent)

Even if you win a chargeback, the bank or payment gateway often levies a non-refundable dispute handling fee on the merchant right away. You need to pass that direct cost onto the fraudulent user. If a user causes a payment dispute, they owe the absolute cost of the damage they caused to your merchant status, separate from the unban fine.

💳 Gateway Dispute Operational Damage Fine: ₹1000 — In the event that a user initiates an invalid or fraudulent payment dispute/chargeback through any bank or payment aggregator, an immediate operational penalty fine of ₹1000 will be appended to the user’s account billing profile. This covers the non-refundable dispute processing fees charged to us by the merchant gateway network and must be settled in full before any unban appeal under Section 8 is even reviewed.

Account Verification, Contact Outreach & 48-Hour Ban Policy

We may reach out to users via Phone Calls, WhatsApp Messages, or Emails for mandatory Account Verification, identity validation, security checks, or account support/help.

📞 Unresponsive User 48-Hour Ban Rule & ₹99 Re-Opening Fee

If a user fails or refuses to respond to our official phone call, WhatsApp messages, or email outreach within 48 Hours, the user will be automatically Banned from IRIS AI. A mandatory administrative fee of ₹99 is required to re-open, unban, and restore account access.

Social Media Defamation, Chat Leaks & Team Misconduct Ban Policy

We strictly enforce brand integrity, communication privacy, and social media compliance.

🚫 Permanent Account & HWID Ban for Social Media Mockery, Chat Leaks & Team Misbehavior

An immediate permanent ban will be enforced on any user who:

  • Mocks, defames, or passes irrelevant disparaging comments about IRIS on any social platform (Twitter/X, YouTube, Reddit, Instagram, LinkedIn, Discord, Telegram, Facebook, WhatsApp, Threads, GitHub, etc.).
  • Shares private chat screenshots, support emails, or ticket details publicly without authorization.
  • Misbehaves or uses abusive language toward our support team or maintainers.

This results in immediate cancellation of all active licenses, permanent blacklisting of motherboard HWID signatures, data purge, and zero entitlement to refunds.

Administrative Visibility, Desktop Free Tier Removal & Manual Control

System Administrators retain overriding control and visibility over platform usage. This is strictly enforced to prevent abuse.

  • Full Visibility: Admins can view your Name, Email, Profile Picture, Device Details, and Payment Metadata.
  • Desktop Free Tier Removal: IRIS Desktop Free Tier has been completely removed (100% Paid Only). Free Tier functionality is shifting to IRIS-MX Mobile in upcoming releases.
  • Manual Account Control: Administrators maintain complete manual control over user limits and permissions at their sole discretion without prior notice.

Licensing Verification & HWID Telemetry

To enforce licensing boundaries and prevent bulk key sharing, the IRIS Pro Engine collects minimal device-specific parameters:

1. Motherboard Unique ID (HWID)A unique cryptographic hash generated by the motherboard of your computer to uniquely register the client machine.
2. Connected Device CountTracks how many devices are currently registered under your license (enforcing the strict limit of 2 devices per platform).
3. IP VerificationThe client machine's IP address is verified strictly at the time of installation and licensing upgrade to prevent bulk automated abuse.
4. Registered Gmail Binding (₹129 Swap)Bound to your Google email ID. Manual email transfer requests require a flat ₹129 fee for re-verification and database re-binding.

Local-First Architecture

Aside from license verification parameters, IRIS operates as a local binary client. Your workspace contents, files, and logs remain on your workstation.

Workspace isolation: Directories are scanned, read, and indexed locally on your own machine.
Zero keylogging: Global macros and phantom inputs are captured and injected strictly on-device.

Zero Server Telemetry

We do not maintain centralized telemetry or logging collection servers.

  • No Analytics: IRIS does not compile statistics regarding your terminal outputs, file creations, or script operations.
  • No Tracking: Voice prompts, system metrics, and keyboard overlays are never uploaded back to any centralized IRIS database.

The BYOK (Bring Your Own Key) Disclosure

IRIS runs strictly in a BYOK configuration. To facilitate reasoning, code generation, search crawls, and multimodal tasks, the client routes local data queries to third-party endpoints.

IMPORTANT: Because data is routed directly to third-party API providers: **Google Gemini**, **Tavily**, and **Hugging Face**, all prompt context parameters, searches, and files passed to AI tools are governed by the privacy guidelines and policies of those specific companies. The author of IRIS holds zero responsibility or liability for third-party company data-harvesting, rate adjustments, or telemetry behaviors.

User API Key Issues & Zero-Refund Rule: Under the BYOK model, each user is solely responsible for obtaining, funding, configuring, and maintaining valid API keys. If your API key fails to work, runs out of quota/credits, gets blocked by the provider, or experiences provider-side outages, this is strictly between you and the third-party provider. IRIS X AI bears zero responsibility, and no refunds or compensations will be issued.

AI Mistakes & Minor Software Bugs Disclaimer: IRIS is an AI-powered system. Artificial Intelligence models are probabilistic and capable of making mistakes, hallucinations, or generating unexpected outputs. Furthermore, minor software bugs, edge-case glitches, or tool anomalies may occasionally occur in any complex software. Such occurrences are inherent to modern AI software and do NOT constitute system failures or grounds for refunds or chargebacks.

Local Vector Storage & Key Encryption

All memory elements, index structures, notes, and keys are stored locally on your hard disk:

  • API Keys: Stored securely using the native OS keychain interface (Windows Credential Manager / macOS Keychain).
  • Vector Databases: Local LanceDB embeddings are written locally and sandboxed under the desktop app data path.
  • Local note cache: Markdown logs and macros remain exclusively inside the application sandbox structure.

Mobile Companion Bridge (IRIS-X)

The IRIS-X mobile companion application routes notification streams, system indicators, and push payloads directly over local network bridges (via native Android Debug Bridge [ADB] tunnels or local WebSocket connections).

The companion system has no analytics layer, does not hook into advertising scripts, and communicates exclusively with the local desktop environment.
Last Updated: August 2026Return to Dashboard