Skip to content

Legal

Privacy Policy

What we collect, why, and what leaves the platform.

Last updated 4 September 2026

This is a template, not legal advice. It describes how the software actually behaves, which is the part we can state accurately. Before relying on it commercially, have a lawyer review it against your jurisdiction, your sub-processors and your real retention practice.

This describes what Anserra, operated by Onzira Labs Private Limited, collects and what happens to it. It covers both the data of people who use Anserra (you) and the data of people who talk to chatbots you publish (your visitors).

What we collect from you

To run your account we store:

  • Your name, email address and a hashed password — we never store the password itself.
  • Your workspace details, plan, and usage counters.
  • The content you upload or crawl, and the vector embeddings derived from it.
  • An audit log of privileged actions, including the IP address and browser that performed them.

What we collect from your visitors

When someone chats with a chatbot you have published, we store the conversation transcript, a random visitor identifier, and technical context: approximate country, referring page, browser user agent and IP address.

If you enable lead capture, we also store the contact details visitors choose to submit. Those details belong to you — we act as a processor for them, and you decide how long to keep them.

Visitors are not tracked across different customers' websites. The visitor identifier is scoped to a single chatbot.

Who we share it with

Your content is sent to the AI provider you select — OpenAI, Anthropic or Google — as context for answering a question. Those providers are contractually bound not to train their models on it.

We also use infrastructure sub-processors for hosting, storage, email delivery and payment processing. We do not sell personal data, and we do not share it for advertising.

Training

Your content is never used to train any AI model — not ours, not a provider's. It is used only to answer your visitors' questions.

How long we keep it

Account and content data is kept while your workspace is active. Deleting a knowledge source removes its documents and embeddings immediately.

Deleting a workspace schedules a full purge after 30 days. Invoices are retained separately for the period tax law requires, unlinked from the deleted workspace.

Audit logs are retained for 12 months.

Your rights

You can access, correct, export or delete your data from within the product, or by contacting us. Where the GDPR or a similar law applies, you also have the right to object to processing, to restrict it, and to complain to your supervisory authority.

Because we process your visitors' data on your behalf, requests from your visitors should be sent to you. We will help you fulfil them.

Security

Traffic uses TLS. Data at rest is encrypted. Integration credentials and two-factor secrets are additionally encrypted at the application layer, so a database dump alone does not expose them. See our Security page for detail.

Who we are and how to reach us

Anserra is operated by Onzira Labs Private Limited ("Onzira Labs", "we", "us"), a company incorporated in India (CIN U62011DL2025PTC447666, GSTIN 07AAECO7169F1Z8).

Registered office: 293, Lane-2, Westend Marg, Saket, New Delhi 110030, India.

Questions about this document: support@onzira.com or +91 7631 995 541.

Governing law

This document is governed by the laws of India. Any dispute is subject to the exclusive jurisdiction of the courts of New Delhi, India, without prejudice to any mandatory consumer or data-protection rights you hold where you live.