Privacy Policy

Ailexity Technology Pvt. Ltd.  ·  Updated: 5 October 2026  ·  India  ·  DPDPA Compliant

Overview

AILexityTedo ("we", "our", or "us") is operated by Ailexity Technology Pvt. Ltd., India. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use AILexityTedo — our website (ailexitytedo.com) and our Android app — a professional tech networking platform for developers, designers, founders, builders, and the companies that hire them.

By using AILexityTedo, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform.

Information We Collect

We collect only what we need to run the platform:

• Account Information: Name, email address, username, account type (personal or company), and password (bcrypt-hashed, never plain text).
• Authentication Data: If you use Google Sign-In, we receive your Google profile information (name, email, profile picture) only as permitted by Google's OAuth scope.
• Profile Data (optional): Profile and cover photos, headline, bio, skills, tags, work experience, education, location (city), and website or social links. Company accounts may also add the company name, industry, size, contact name, contact email, contact phone number, and address.
• Content: Posts, blueprints, BrainWaves, comments, reposts, job posts, job applications (including any CV or resume you attach), Team+ ideas and requests, and the questions you ask Ask Tedo.
• Messages: Direct messages you send and receive, including the photos, videos, files, and links you share in them.
• Purchase Data: The plan or boost you bought, its price and dates, and the order or transaction ID from Google Play (Android app) or Razorpay (website). We never receive or store your card number, CVV, UPI, or bank details.
• Activity Data: Actions such as likes, BrainWaves, reposts, follows, profile views, the posts you open, time spent, and the searches you type. We use this to run your feed, suggestions, search, and the leaderboard.
• Device & Technical Data: Device type, operating system, app version, IP address, a push-notification token (only if you allow notifications), and error or crash reports sent automatically when something in the app breaks.
• Referral Data: If you were referred by another user, we record the referral relationship (referrer ID, date joined) to award referral points. We do not share your identity with the referrer beyond their referral count.
• Support Messages: Anything you send us by email or through in-app reports.

We do not access your contacts, call logs, SMS, or precise location, and the app does not record audio.

How We Use Your Information

Your information is used to:

• Create and manage your account and profile, and keep you signed in.
• Show your profile and content to other members according to your settings, and deliver your direct messages.
• Show your public profile on the web: anyone with its link (ailexitytedo.com/@yourname) can see it, and search engines such as Google can list it. Only what you keep public appears: your name, photo, headline, bio, skills, and the sections you leave visible. Your login email never appears there, and neither do a person's email and phone. You can stop search engines listing your profile any time: turn off Show in Search Engines in Settings › Visibility. A search engine may take some time to drop a page it already listed.
• Personalise your feed, people and job suggestions, search results, and the leaderboard, based on your profile and activity.
• Operate Ask Tedo, Verified Builds, and Team+ matching, and AI features such as feed topics and smart search.
• Share your application with a company when you apply to its job — your profile, your answers, and any CV you attach. Companies can use Ask Tedo to rank the applicants to their own jobs.
• Run Search by Image, only for members who turn it on (see "Search by Image & Face Data").
• Process purchases, activate plans and boosts, handle refunds, and keep payment records.
• Show boosted content: members can pay to show their posts, jobs, or profile to more people. We decide where boosted content appears using the same profile and activity signals as the rest of your feed. Members who pay for a boost only see overall numbers such as views — never your personal data.
• Send emails via Resend: sign-in codes, receipts, activity alerts, security and privacy notices, and product updates (every product-update email has an unsubscribe link).
• Send push notifications, which you can turn off in the app or in your phone's settings.
• Detect, investigate, and prevent prohibited content, spam, fake accounts, fraud, and platform abuse, and fix bugs using crash reports.
• Improve and develop platform features based on usage patterns.
• Fulfil legal obligations and respond to law enforcement requests where required.

We do not sell your personal data. We do not use third-party ad networks, advertising IDs, or cross-app tracking. We do not share your data with recruiters or companies unless you apply to their job or contact them yourself.

Search by Image & Face Data

Search by Image lets Pro+ members upload a photo to find a member's public profile. It only ever finds members who have chosen to be found this way.

• Off by default: You appear in Search by Image only if you turn on Allow find-by-photo in Settings.
• What we store: While it is on, we create a face template from your current profile photo — a list of numbers that describes the face, not the photo itself — and store it with your account. It is refreshed when you change your profile photo.
• Turning it off: Switching the setting off deletes your face template immediately. Deleting your account deletes it too.
• Photos used to search: A photo uploaded to run a search is processed in memory to find matches and is not saved.
• Never shared: Face matching runs on our own servers. Face templates are never sent to any third party and are not used for any other purpose.

Content Standards & Prohibited Content

AILexityTedo is a professional platform for the tech community. All content posted must be appropriate for a professional environment. We actively moderate content and use automated and manual review processes.

Violations result in immediate content removal. Repeated or severe violations result in permanent account ban. Criminal violations — particularly CSAM, threats, and fraud — are reported to law enforcement without exception.

To report prohibited content, use the in-platform "Report" button or email tedo@ailexitytedo.com.

Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specific retention periods:

• Account data: Retained for the lifetime of your account. Upon deletion, removed within 30 days from active systems.
• Posts and content: Deleted when you delete them or your account. Backups may retain data for up to 90 days.
• Direct messages: Retained as long as either participant's account is active. Deleted upon account deletion of both parties.
• Face template (Search by Image): Kept only while find-by-photo is on; deleted as soon as you turn it off or delete your account.
• Activity, search history, and crash reports: Kept while your account is active, or only as long as needed to run features, keep the platform secure, and fix problems.
• Payment records: Transaction records retained for 7 years as required by Indian financial regulations (IT Act / GST compliance).
• Moderation logs: Records of content violations and enforcement actions retained for up to 3 years for legal compliance.
• OTPs and session tokens: Automatically deleted within 5–30 minutes of generation (TTL-based).
• Usage analytics: Anonymised aggregate data may be retained indefinitely for product improvement.

Data Storage & Security

Your account data is stored on Google Cloud servers in India, with daily backups that are encrypted at rest. Photos, videos, and documents you upload are stored and delivered by Cloudinary, which may store them outside India. We implement multiple layers of security:

• Passwords stored using bcrypt hashing — never stored in plain text.
• JWT-based authentication with short expiry (30 minutes) and refresh token rotation.
• HTTPS/TLS encryption for all data in transit.
• OTP-verified flows for registration, password change, and sensitive actions.
• Rate limiting on all sensitive endpoints to prevent brute force attacks.
• Token blocklist for immediate session revocation on logout.
• Separation of services — each microservice accesses only the data it requires.

No method of internet transmission is 100% secure. We strive to protect your data but cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you within 72 hours as required by the DPDPA.

Cookies, Local Storage & App Permissions

On the website we use browser local storage (not cookies) to store your authentication token and basic session information. In the Android app, your login is kept in the phone's secure storage. This data is used solely for keeping you logged in and is never shared with third parties.

The Android app asks for only two permissions:

• Camera: only when you choose to take a photo or video to post, send, or use as your picture.
• Notifications: to alert you about messages, applications, and activity. You can turn them off at any time.

Photos and files are chosen through Android's own picker, so the app never gets access to your whole gallery or storage.

We do not use:

• Third-party advertising cookies, advertising IDs, or tracking pixels.
• Cross-site or cross-app tracking technologies.
• Third-party analytics SDKs.

You can clear your local storage at any time through your browser settings, which will log you out of the platform.

Service Providers

We use a small number of service providers to run AILexityTedo. They process data only on our instructions and only to provide their service to us:

• Google Cloud: Hosts our servers, database, and backups (in India).
• Google Gemini (Vertex AI): Generates Ask Tedo answers and powers AI features such as feed topics, smart search, and applicant ranking for companies. It receives only the text needed for the task — for example your question, or the posts or applications being ranked — and never your password. Google does not use this data to train its models.
• Google Sign-In: If you choose it, to sign you in. We receive your name, email, and profile picture. Governed by Google's Privacy Policy.
• Google Play Billing & RevenueCat: Purchases in the Android app are processed by Google Play; RevenueCat helps us confirm them. RevenueCat receives a random account ID and the details of the purchase — not your name or email.
• Razorpay: Processes payments on our website. We share your email and the plan you are buying. Razorpay receives payment information directly — we never see your card number. Governed by Razorpay's Privacy Policy.
• Cloudinary: Stores and delivers the photos, videos, and documents you upload. Governed by Cloudinary's Privacy Policy.
• Resend: Delivers our emails. It receives your email address and the email's content, for delivery purposes only.
• Firebase Cloud Messaging & Expo push service: Deliver push notifications to your phone. They receive your device's push token and the notification text.

Other members see what you make public on your profile and posts, and the people you message see your messages. Your public profile can also be seen by visitors and search engines, as described above, unless you turn that off. We do not share your data with any other third parties, except where the law requires it. These services operate under their own privacy policies and data processing agreements.

Your Rights (DPDPA)

Under the Digital Personal Data Protection Act, 2023 (India), and general privacy best practices, you have the following rights:

• Access: View your profile data at any time in the app or on the website.
• Correction: Update your personal information by editing your profile.
• Choices: Turn find-by-photo on or off in Settings; turn off push notifications in the app or your phone's settings; unsubscribe from product-update emails with the link in any such email. Security, privacy, and account emails (such as sign-in codes and receipts) are still sent.
• Erasure: Permanently delete your account and all associated data from Settings → Danger Zone (website) or Settings & privacy → Danger zone (Android app). If you can no longer sign in, request deletion at ailexitytedo.com/delete-account. Deletion is irreversible and processed within 30 days.
• Portability: Request an export of your data by emailing us. We will provide a machine-readable export within 14 business days.
• Objection: You may opt out of non-essential data processing (e.g., analytics) by contacting us.
• Grievance Redressal: If you believe your data has been mishandled, you may contact our grievance officer at the email below. We will respond within 30 days.

Children's Privacy

AILexityTedo is only for people aged 18 and above. We do not knowingly collect personal information from anyone under 18. By creating an account, you confirm that you are at least 18 years old, as required by our Terms of Service.

If we become aware that someone under 18 has created an account or provided personal data, we will delete the account and all associated data immediately. If you believe a minor has registered on our platform, please contact us immediately at tedo@ailexitytedo.com.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make significant changes, we will notify you via in-platform notification or email at least 14 days before the changes take effect.

Continued use of the platform after changes are published constitutes acceptance of the updated policy. You can always find the current version at ailexitytedo.com/privacy.

Contact & Grievance Officer

For privacy-related questions, data requests, content violation reports, or grievance redressal under the DPDPA:

Ailexity Technology Pvt. Ltd.
Grievance Officer: Aditya Suryawanshi
Email: tedo@ailexitytedo.com
Response time: Within 3 business days for general queries, within 72 hours for urgent content violations.