Privacy Policy

Last Modified: August 9, 2025

This Privacy Policy explains how GoMalayalam ("GoMalayalam," "we," "us," or "our") collects, uses, discloses, and protects your information when you use our website (www.gomalayalam.in), browser extensions, applications, and related services (collectively, the "Services").

Your privacy and the security of your data are core to our mission. By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Services.

Contact: [email protected]

Privacy at a Glance

This summary provides the key highlights of our privacy policy. It is not a substitute for reading the full policy.

Our Core Promises:

We DO NOT sell your data.
We DO NOT train our AI on Pro user content.
You control your data. You can request access, correction, or deletion of your personal information.
Human access to your content is strictly limited and logged for specific situations like support or security investigations.

What We Do & Don't Do:

We collect only the data needed to provide and improve our service.
We use de-identified data from free users to improve our models.
We only view your content with your permission or for critical security and legal reasons.

1. Scope of This Policy & Our Role

This policy applies to all Services operated by GoMalayalam. It does not extend to third-party websites or services that may link to or be integrated with our Services.

Data Controller. For most processing activities related to your account, billing, marketing, and general service operation, GoMalayalam acts as the data controller.
Data Processor. For the text, documents, and other content you submit for analysis ("User Content"), we act as a data processor on your behalf. Our processing is governed by your instructions and our Terms of Service.

2. Information We Collect

We collect information to provide and improve our Services. This information is obtained (i) directly from you, (ii) automatically through your use of the Services, and (iii) from third-party service providers.

2.1. Information You Provide Directly

Account & Contact Information. When you create an account, we collect your email address, display name, and an internal account ID.
Authentication Information. If you create an account with us, we store a secure, hashed version of your password. If you use a third-party login, we receive authentication tokens.
Billing Information. For our Pro service, we collect plan tier, billing country, and tax jurisdiction. Our payment processor securely handles your payment details. We only receive transaction IDs, card brand, and the last four digits of your card; we never store your full credit card number.
User Content. This includes the text and documents you submit for grammar and style analysis, along with any associated metadata like document titles.
Communications & Support. If you contact us for support, we collect your emails, support tickets, and any attachments you provide to help resolve your issue.

2.2. Information from Third-Party Logins

If you choose to create an account or log in using a third-party service (like Google), we will receive limited personal information from that service, such as your name, email address, and profile picture, as necessary to create and authenticate your account. We only request the information necessary for this purpose and will not receive or store your password for that third-party service.

2.3. Information We Collect Automatically

Usage & Log Data. We collect IP address, device and browser type, operating system, language preferences, timezone, pages viewed, feature interactions, and timestamps. This helps us operate, secure, and improve the Services.
Cookies & Similar Technologies. We use cookies and similar technologies to operate and analyse our Services. See Section 8 for more details.
Derived Data. We may generate non-sensitive inferences from your usage, such as your preferred editor settings or flags for potential service abuse. We do not infer sensitive characteristics (like health, religion, or ethnicity).

2.4. Aggregated and De-identified Data

We may use aggregated or de-identified information, which cannot reasonably be used to identify you, for analytics and service improvement.

3. How We Use Your Information & AI Processing

Our use of your information is guided by our commitment to providing a valuable and secure service.

3.1. General Uses

To Provide & Maintain the Services. We use your information to operate our platform, authenticate users, and provide the core grammar-checking functionality.
To Process Payments. For Pro users, we use billing information to process payments and prevent fraud.
To Communicate With You. We send transactional emails (e.g., password resets, billing receipts) and, with your consent, marketing communications about new features.
To Improve & Secure Our Services. Usage data helps us troubleshoot issues, prevent abuse, measure performance, and understand which features are most useful.
To Comply with Legal Obligations. We may use information to comply with legal requirements and enforce our Terms of Service.

3.2. AI Processing & Model Training (Our Commitment)

This is the most critical part of our privacy promise.

GoMalayalam Pro Users. We DO NOT use your User Content to train our AI models. Period. Your text is processed transiently to provide you with suggestions and is then discarded, unless you explicitly choose to save your document to your account.
Free Service Users. To support and improve our free service, we may use a portion of the User Content submitted through the free tier to train and refine our AI models. This data is always de-identified and aggregated, meaning it is stripped of personal identifiers and mixed with a large volume of other text data to ensure individual privacy is protected.
Human Access. Our team will never read your User Content unless:
- You give us explicit permission to view a specific piece of text to resolve a support issue.
- It is necessary to investigate a security incident or a clear violation of our Terms of Service (e.g., spam, abuse).
- We are compelled to do so by a valid legal order. Any such access is limited and logged.

We do not sell your personal information. We only share it with trusted partners who help us operate our Services.

Service Providers (Sub-processors). We use third-party providers for hosting, payment processing, email delivery, and analytics. These providers are bound by strict confidentiality and data protection agreements and are only permitted to use the data on our instructions. Contact [email protected] for details about our key service providers. We’ll provide notice of material changes where required by law.
Legal & Law Enforcement. We may disclose information if required by law or a valid legal process. We require a valid legal request, attempt to narrow overly broad demands, and—where lawful—notify affected users before disclosure.
Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred to a successor entity, which will be bound by this Privacy Policy.

5. Data Retention

We retain your data only for as long as necessary to fulfill the purposes outlined in this policy.

Account Data. Retained for as long as your account is active, and for a limited period afterward for legal or auditing purposes.
User Content (Pro). If you save a document, it is retained until you delete it. Transiently processed text is not retained.
Usage Logs. Raw logs are typically retained for up to 30 days for security and troubleshooting.
Backups. Deleted data may remain in our secure backup archives for a limited period (e.g., 30-90 days). Backup copies are used only for security and recovery and are removed through routine rotation.

6. Security

We implement robust technical and organisational measures to protect your information, including:

Encryption. We use industry-standard encryption to protect your data in transit (using TLS) and at rest.
Access Controls. Access to user data is strictly limited to authorized personnel on a need-to-know basis.
Regular Audits. We regularly review our security practices and infrastructure.

You are responsible for using a strong, unique password and keeping your login credentials confidential. If you discover a security vulnerability, please report it to us at [email protected].

7. Your Data Rights & Choices

You have rights and choices regarding your personal data. To exercise these rights, please contact us at [email protected].

You may have the right to:

Access. Request a copy of the personal data we hold about you.
Rectify. Correct any inaccurate information in your account.
Erase. Request that we delete your personal data.
Restrict Processing. Object to or ask us to limit certain types of data processing.
Data Portability. Request your data in a machine-readable format.

We will not discriminate against you for exercising your privacy rights. We may need to verify your identity before acting on a request. We aim to respond within 30 days where feasible or as required by law and provide exports in a commonly used format (e.g., CSV/JSON).

8. Cookies and Tracking Technologies

We use cookies to help our Services function correctly, understand how they are used, and for security purposes.

Essential Cookies. These are necessary for the Services to function and cannot be switched off. They are usually set in response to actions made by you, such as logging in or filling in forms.
Analytics & Performance Cookies. These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous.

You can control and manage cookies through your browser settings. We currently do not respond to Do Not Track (DNT) signals. Please note that removing or blocking cookies may impact your ability to use our Services.

9. International Data Transfers

Our Services are global, and your information may be processed in countries other than your own. When we transfer your information to other countries, we use standard contractual clauses and other established data transfer mechanisms to ensure your data receives the same level of protection it has in your home country.

10. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child under 16 has provided personal information to us, please contact [email protected] and we will take steps to delete it.

11. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or through a notice within the Services and will update the "Last Modified" date at the top of this page.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact our team at:

Email: [email protected]

For questions about this policy, please contact us.