ATTENVAL
Sign in Get API Key
Data Governance & Trust

Privacy Policy & Retention

Notice: This is a working policy baseline and draft document of Nandaka Interactive Private Limited. It reflects the architecture and data governance rules codified in Attenval engineering specifications.
Version: 1.0 (Draft) • Last Updated: August 16, 2026

1. Core Privacy Philosophy

At Attenval (operated by Nandaka Interactive Private Limited), our fundamental operating principle is clear:

Collect only what is required to operate, meter, secure, and fulfill the service. We do not make the hidden sale or exploitation of personal user data part of our business model.

2. Data Classes & Collection Inventory

We classify all platform data into distinct categories with strict lifecycle boundaries:

Data Class Examples Processing Purpose Default Retention
A. Account Data Email address, auth subject ID, account status Authentication, account management, support Life of account + grace period
B. Security & Fraud Data Coarse IP, ASN, device integrity attestation, SSV nonce Abuse prevention, anti-fraud, rate limiting 30 to 90 days (short-lived)
C. Wallet & Ledger Credit balance, immutable transaction journal, payment IDs Metering compute, financial accounting, audit trail Long-term ledger audit record
D. AI Usage Metadata Model alias, routed target, token counts, latency, credits charged Token metering, routing health, provider reconciliation 13 months (pseudonymous)
E. AI Content & Payloads User prompts, system instructions, model completions Transient in-memory AI inference execution Zero storage by default
F. Financial & Tax Records GST invoices, billing address, statutory receipts Statutory legal and tax compliance 72 months (Indian GST carveout)

3. Transient AI Processing Guarantee

When you send requests to https://api.attenval.com/v1/chat/completions:

  • Zero Payload Logging: Our edge router explicitly disables prompt and response payload logging on upstream gateways (cf-aig-collect-log-payload: false).
  • No Model Training: Neither Nandaka nor our upstream enterprise contract providers use your API prompts or generated tokens to train foundation models.
  • User-Opted History: If you explicitly enable "Saved History" in the interactive Playground, your conversations are encrypted in your private account storage and can be deleted at any time with a single click.

4. Prohibition on Data Commercialization

We strictly prohibit the sale or licensing of user personal data. We will never sell, license, or broker:

  • Raw prompt inputs, completions, or conversation histories;
  • User email addresses, phone numbers, or account profiles;
  • API key identifiers or session tokens;
  • Individual payment histories or user-level sponsor engagement records;
  • Raw IP addresses, device identifiers, or precise geographic locations.

Any commercial insight produced by Attenval is strictly limited to high-level, mathematically aggregated macro trends (e.g., aggregate quarterly demand benchmarks across broad geographic zones) with mandatory minimum cohort thresholds (≥ 100 accounts) to ensure impossible re-identification.

5. Statutory Financial Carveout (72-Month GST Requirement)

Under applicable Indian tax and financial statutes, including the Goods and Services Tax (GST) framework, registered businesses are mandated to preserve transaction invoices, accounting journals, and tax records for a minimum of 72 months (6 years) from the due date of the annual return for the relevant fiscal year.

When an account deletion request is processed, Nandaka unlinks, deletes, and permanently purges all personal identifiers, conversation histories, and product analytics. However, statutory financial transaction records are securely retained in an isolated, access-restricted financial archive exclusively to fulfill statutory legal obligations.

6. User Controls & Deletion Rights

You have continuous, self-service control over your information via the Attenval console:

  • Download Data: Export your full account metadata, ledger history, and API key audit logs as JSON;
  • Delete History: Instantly wipe all opt-in conversation logs from our storage clusters;
  • Revoke API Keys: Immediately terminate active keys, invalidating cached authorizations within milliseconds;
  • Account Deletion Pipeline: Initiate total account erasure via Account → Data & Privacy.

7. Contact & Grievance Officer

If you have questions regarding data retention, privacy safeguards, or wish to exercise your data subject rights, contact our Privacy & Governance desk:

Grievance Officer
Nandaka Interactive Private Limited
Email: privacy@attenval.com
Bengaluru, Karnataka, India