GauciGauci › Privacy
Gauci Privacy Policy
What personal data Gauci collects, why, how long it is kept, who it is shared with, and your rights under the Digital Personal Data Protection Act, 2023 and other laws that apply.
1. Data fiduciary
INDO CHATS PRIVATE LIMITED, 168, GT Rd, near Aloka Cinema, Shibpur, Howrah, West Bengal 711102, India, decides how personal data in Gauci is used and is the data fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act). Gauci accounts and their data are kept separately from other services of the company.
2. What we collect
| Data | Why |
|---|---|
| Name, Gauci ID, password (stored only as a hash), mobile number, country and time zone | To create and protect your account and show dates correctly |
| Social channel connections: channel name, network, encrypted token or app password | To publish the posts you write or schedule |
| Posts, schedules and publishing results | To publish posts and show you what happened |
| Domains you audit and audit results | To run Site Audit and show your score history |
| Forms you create, responses and uploaded files | To run your forms; you are the data fiduciary for the people who answer your forms |
| Sign-in records: time, IP address, device type | Security, fraud prevention and legal obligations (CERT-In Directions, 2022) |
| Support cases and messages to Lily | To answer your questions |
3. What we do not do
- We do not sell personal data.
- We do not use third-party advertising or tracking code in Gauci.
- We do not read your connected social accounts beyond what is needed to post and check the connection.
- GauciBot reads only public web pages and does not collect personal data from audited websites.
4. Sharing
Your posts go to the networks you choose when you publish. Our service providers are Amazon Web Services (servers and storage in the Mumbai region) and the networks you connect. We share data with authorities only when Indian law requires it, and tell you when we are allowed to.
5. Storage and security
Gauci data is stored in India (AWS Mumbai). Connection tokens are encrypted, connections use HTTPS, passwords are hashed and backups are encrypted. Access by our staff is limited to what is needed to run and support Gauci and is recorded.
6. How long we keep data
- Account data: while your account is open.
- Posts and audit results: until you delete them or close your account.
- Form responses and files: until you or the form owner delete them.
- Sign-in and security records: 180 days, as required by the CERT-In Directions, 2022.
- After you close your account: deleted within 30 days, except records the law requires us to keep.
7. Your rights
Under the DPDP Act and other laws that apply to you (including the GDPR for people in the European Union and the UK GDPR), you can ask to access, correct, update or erase your personal data, withdraw consent, and nominate someone to exercise your rights. Most of this you can do yourself in Settings; for anything else open Help & support in Gauci. You may also complain to the Data Protection Board of India.
8. Children
Gauci is for people aged 18 and over. We do not knowingly create accounts for children; if we learn of one, we close it and delete its data.
9. Grievance Officer
Salena, Grievance Officer, INDO CHATS PRIVATE LIMITED, 168, GT Rd, near Aloka Cinema, Shibpur, Howrah, West Bengal 711102, India. Raise privacy grievances in Gauci under Help & support → Grievance. We acknowledge within 24 hours and resolve within 7 days.
10. Changes
We will tell you in Gauci before any important change to this policy takes effect.