Privacy Policy

1) Introduction 🧭

This Privacy Policy explains how Marinode AI Solutions LLP (“Marinode-AI”, “we”, “us”) handles personal and technical information across the Engine Room Ninja platform (web, mobile, APIs). By using our services, you agree to the terms described here. We may update this Policy to reflect changes in practices, laws, or features.

• Applies to free and paid users worldwide.
• We comply with applicable data-protection laws and will keep this Policy current.
• If you do not agree, you should discontinue use of the Platform.

2) Information We Collect 📥

• Identification: name, email, username, profile info.
• Auth: hashed/salted passwords, auth tokens, third-party identity data where applicable.
• Device/Technical: IP, browser, OS, device IDs, language.
• Usage: session logs, access times, clickstream, feature interactions.
• User Content: posts, comments, uploads.
• Support: tickets, chats, feedback.
• Billing: subscription records and payment confirmations where relevant.
• AI Logs: AI interaction logs may be retained to improve quality and security (opt-out/deletion available).

We minimize collection to what is needed. We do not knowingly collect special categories of data unless explicitly required and disclosed.

3) How We Use Your Information ⚙️

• Operate the platform, authenticate accounts, and deliver features.
• Monitor performance, troubleshoot, and ensure integrity/security.
• Personalize UX and improve features via analytics and research.
• Prevent fraud, comply with legal obligations, and manage communications/support.
• Send occasional platform updates/announcements (you can opt out).

We may process de-identified or pseudonymized chat data to improve AI systems under legitimate interests, with safeguards and opt-out.

4) Legal Bases for Processing ⚖️

• Contract: account creation, service delivery, support.
• Legitimate Interests: security, fraud prevention, analytics, improvements.
• Consent: e.g., optional marketing/personalization (withdraw any time).
• Legal Obligation: tax, accounting, regulatory needs.

5) Data Retention & Deletion 🗄️

• Profile data: life of account + up to 12 months after closure.
• Login/activity logs: up to 12 months.
• AI chat logs: life of account + up to 12 months after closure, or until deleted on request.
• Billing/tax: 7 years (statutory).
• Support tickets: 3 years after closure.

Encrypted backups containing any of the above are securely deleted within 60 days of scheduled deletion.

6) Your Rights 🧑‍⚖️

• Access, rectification, erasure (“right to be forgotten”).
• Restriction, portability (where technically feasible), and objection.
• Withdraw consent at any time without affecting prior lawful processing.

To exercise rights, email privacy@marinode-ai.com. We aim to respond within one month (or as allowed by law for complex requests).

7) Data Security 🔐

• HTTPS/TLS in transit; industry-standard encryption at rest.
• Least-privilege access; periodic reviews and updates.
• Breach notifications in line with applicable law.

Your role: use strong passwords, enable MFA where offered, secure your devices, and report incidents promptly.

8) Data Sharing & Sub-Processors 🤝

We use vetted third-party providers bound by contracts and security obligations. Categories include:

• Infrastructure & hosting (e.g., AWS/Hostinger)
• Payments (e.g., Google Play Store)
• Analytics (e.g., Google Analytics)
• Backup & disaster recovery (e.g., AWS S3)

Cross-border transfers use recognized safeguards (e.g., SCCs/IDTA/adequacy). We maintain an online list of current sub-processors and will update it when changes occur.

9) International Data Transfers 🌍

Data may be processed in India, EEA, UK, US, Singapore, and other regions using appropriate legal mechanisms (e.g., SCCs, IDTA, adequacy). Where needed, we apply supplementary measures such as encryption and access controls.

10) Cookies & Tracking 🍪

We may use essential cookies and basic analytics. Where required, we provide consent tools. You can manage cookies in your browser/device settings (disabling some cookies may impact functionality).

11) Children’s Privacy 🧒

The Platform is for individuals aged 18+ (or legal digital-consent age in your region). We do not knowingly collect data from minors; if discovered, we will delete it and may suspend related accounts.

12) Changes to this Policy 🔄

We may amend this Policy as our services and legal obligations evolve. Material updates will be posted on the Platform and, where required, communicated to registered users. Continued use means acceptance of changes.