Privacy Policy

This Privacy Policy explains how HSBR Apps ("we", "us"), operator of HSBR Tools at tools.hsbr.app, collects, uses and protects your information. We follow India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and its rules.

1. Your files stay on your device

Our tools are browser-based. When you use a tool (image compressor, invoice generator, QR code, cheque printing, converters, pickers, etc.), the files and text you provide are processed entirely on your device and are never uploaded to, stored on, or seen by our servers or anyone else. There are four exceptions: (a) the currency converter, which fetches public exchange rates from a third-party API and sends none of your data; (b) any files you choose to attach in a support conversation, which are uploaded to our servers so our team can help you; and (c) a payment screenshot you choose to upload when reporting a UPI payment, so we can verify it (see section 2); and (d) our AI-assisted tools, described immediately below.

Some tools are free to use up to an hourly limit. To keep that fair we count how many times such a tool was used — that counter records only the tool's name, a timestamp, and either your account or a random id for your browser. It never records the file, the text, or anything you typed. Your content still never leaves your device.

1a. AI-assisted tools — the one exception

A few tools use artificial intelligence to write their content for you. Every tool that does says so on screen, above the button, before you use it. These tools are the only part of this site that sends anything you provide off your device, and here is exactly what that means:

• What is sent: only the words you type into that tool's form — for example the subject, class and topic for a worksheet, or the description for a letter. That text is sent to our AI provider (see section 5) purely to generate your document, and is sent only at the moment you press the button. Before anything is sent, we ask you to agree — you can withdraw that agreement at any time from the tool itself, and nothing is sent until you do agree.
• Which tools use AI: only Worksheet Generator, Lesson Plan Generator, Resume Builder and Letter Writer. Every other tool works entirely inside your browser, and tools intended for children are deliberately not AI-powered.
• What is never sent: no files. AI tools do not accept uploads, and no file you use anywhere else on this site is ever sent to an AI provider. Your name, email, account details and payment information are never sent either.
• What we keep: nothing you typed, and nothing the AI wrote. We store only a count of how many words were processed, so we can monitor our own costs. Your text and the result are not written to our database.
• What our AI provider keeps is governed by their own privacy policy, linked in section 5. We do not permit them to use your text to train their models.
• AI can be wrong. Anything an AI tool produces is a draft for you to check, not professional, legal, educational or medical advice. Please read it before you rely on it, print it, or send it to anyone.
• You are always in control: if you would rather nothing left your device, simply do not use the AI tools. Every other tool on this site works exactly as described above.

Tools intended for children are deliberately not AI-powered — they run entirely on your device, so nothing a child types or draws is ever sent anywhere.

2. Information we collect

• Account data — your name and email, and a securely hashed (bcrypt) password. We never store your password in plain text.
• Subscription & purchase data — plan, status, period and any one-time tool purchases. Card payments are processed by Razorpay; we never store your card number, UPI PIN or bank credentials.
• UPI payment reports — if you pay by UPI and report it to us, we store the reference (UTR) number you enter and, if you choose to upload one, the payment screenshot, so we can match the payment against our bank records and activate your purchase. These details — including the screenshot — are sent by email to our support inbox for verification, so please avoid uploading an image showing anything beyond the payment itself. We keep them with the payment record as part of the accounting trail we are required to retain (see section 7).
• Targeted offers — we may associate a discount or offer with your account email so it is applied automatically at checkout. You can decline any such offer by not completing the purchase.
• Usage & technical data — limited logs (e.g. which tool was opened, IP address, browser type) for security and improving the service.
• Support conversations — when you contact us through in-app support chat, we store the messages you send and any files you attach (e.g. screenshots, PDFs) to answer your query and keep a record of it.
• Free usage counts — for tools with an hourly free limit, we store one small record per use: the tool's name, the time, and either your account id (if signed in) or the random browser id below. Anonymous records are deleted after 48 hours; records tied to an account after 30 days. We do not log your IP address against these counts.
• AI usage counts — when you use an AI-assisted tool, we store one record per generation: the tool's name, which AI model wrote it, the time, your account id, and how many words were processed, so we can track our own costs. We do not store the text you typed or the text the AI produced.
• Cookies — two essential cookies: one holds your sign-in session (JWT); one holds a random id for your browser, used only to apply the free usage limits above, and it expires after two hours. We do not use advertising or cross-site tracking cookies.

3. How we use your data

• To create and manage your account and provide the tools.
• To process Pro subscriptions and apply coupon discounts.
• To secure the service, prevent abuse and comply with law.
• To respond to your requests and send essential service notices.

4. Legal basis

We process personal data with your consent and where necessary to provide a service you have requested, as permitted under the DPDP Act. You may withdraw consent at any time (see Your Rights).

5. Sharing & third parties

We do not sell your personal data. We share the minimum necessary with:

• Razorpay — to process payments (their privacy policy applies to payment data).
• Our AI provider — if, and only if, you use one of the AI-assisted tools (Worksheet Generator, Lesson Plan Generator, Resume Builder and Letter Writer) and have agreed when asked, the text you typed into that tool's form is sent to our AI provider to generate your document, under their own privacy policy: Anthropic, OpenAI or Google. We do not permit them to use your text to train their models. Nothing is sent to them unless you use one of those tools.
• Google reCAPTCHA — we use Google reCAPTCHA to protect our forms and site against automated abuse and spam. When you use the site, Google collects and processes limited technical information (such as your IP address and interaction signals) under the Google Privacy Policy and Terms of Service.
• Hosting — our infrastructure provider stores the database on our behalf.
• Our email provider — we send service emails (verification, invoices, payment updates) and receive support and payment-verification emails through an email service, so the contents of those messages — including any UPI payment screenshot you upload — pass through and are stored by that provider.
• Authorities, where required by valid legal process.

6. Security

We apply reasonable security safeguards: HTTPS/TLS encryption in transit, bcrypt password hashing, role-based access controls, and secrets kept out of source code. No method of transmission or storage is perfectly secure, but we work to protect your data.

7. Data retention

We keep account data while your account is active and for as long as needed to meet legal, tax and accounting obligations, after which it is deleted or anonymised. Support conversations and their attachments are kept while your account is active and for a reasonable period afterwards for support, legal and accounting needs, then deleted or anonymised.

Free usage counts (section 2) are kept for 48 hours when anonymous and 30 days when tied to an account, then deleted.

8. Your rights (DPDP Act)

• Access a summary of the personal data we hold about you.
• Correct or update inaccurate data.
• Request erasure of your data and withdraw consent.
• Nominate another person to exercise your rights in specified cases.
• Raise a grievance (see Contact / Grievance Officer below).

To exercise any right, email us at support@hsbrapps.com.

9. Children

HSBR Tools is not intended for children under 18. We do not knowingly process a child's data without verifiable parental consent as required by the DPDP Act.

10. Changes

We may update this policy; the "Last updated" date above will change. Material changes will be notified in-app or by email.

11. Contact & Grievance Officer

For any privacy question or grievance, contact our Grievance Officer at support@hsbrapps.com. See our Contact page for full details. We aim to respond within the timelines prescribed under Indian law.