Legal
Privacy Policy
Last updated: 17 June 2025
1. Who We Are
Digi Assist is operated by Question Reset (hereafter "we", "us", "our"). We are a Software-as-a-Service provider offering AI-powered document querying solutions for professional services firms in India. Our registered address and contact details are available at questionreset.com.
2. What Data We Collect
We collect: (a) Account data — name, email address, organisation name, and a hashed (irreversible) version of your password; (b) Document data — files you upload, their extracted text, and vector embeddings derived from that text; (c) Usage data — chat queries, conversation history, notes, and system logs for performance and security monitoring; (d) Billing data — subscription tier and payment references (actual payment details are handled by our payment processor and never stored on our servers).
3. How We Use Your Data
Your data is used exclusively to: (a) provide and improve the Platform services; (b) authenticate you and manage your account; (c) generate AI-powered answers from your documents; (d) send transactional emails (OTP verification, billing alerts); (e) comply with applicable legal obligations. We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Document & Vector Store Isolation
Each organisation (tenant) is assigned a dedicated namespace in the vector store (Qdrant). Your document embeddings are tagged with your tenant ID and cannot be accessed by queries from other organisations. Raw document bytes are stored in your organisation's isolated database partition.
5. Data Retention
Account and document data is retained for the duration of your active subscription plus 30 days after cancellation, during which you may export your data on request. After this window, all data — including documents, embeddings, and conversation history — is permanently deleted from our systems. Backup copies may persist for up to 60 additional days in encrypted cold storage before destruction.
6. Cookies & Tracking
We use essential cookies only (session management, CSRF protection). We do not use advertising or tracking cookies. We do not integrate third-party analytics trackers on the dashboard application. The public marketing site (questionreset.com) may use anonymous analytics (page views only) to understand traffic patterns.
7. Third-Party Processors
We use the following sub-processors: (a) Cloud hosting provider for compute and database infrastructure; (b) Payment gateway for subscription billing (your card data never touches our servers); (c) Email delivery service for transactional emails. All sub-processors are contractually bound to process data only on our instructions and to appropriate security standards.
8. Your Rights
Under applicable Indian data protection law, you have the right to: (a) access a copy of your personal data; (b) correct inaccurate data; (c) request deletion of your account and all associated data; (d) export your data in a machine-readable format. To exercise these rights, email privacy@questionreset.com from your registered email address.
9. Security
We implement industry-standard security controls including: TLS 1.2+ for all data in transit; bcrypt-hashed passwords; per-tenant vector store namespacing; role-based access control within organisations; and regular security reviews. Despite these measures, no system is perfectly secure; you should use a strong, unique password and enable multi-factor authentication where available.
10. Children's Privacy
The Platform is intended for professional use by adults aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has provided us data without parental consent, contact us and we will promptly delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to your organisation's registered administrator. Continued use of the Platform after the effective date constitutes acceptance of the revised policy.
12. Contact & Grievance Officer
For privacy queries or to exercise your data rights, contact: privacy@questionreset.com. We aim to respond within 7 business days.