Privacy Policy

NRIhub.ai is run by PairOx Pty Ltd ("we", "us"), a company incorporated in New South Wales, Australia. We decide how and why your personal data is used. Under India's Digital Personal Data Protection Act, 2023, we are the "data fiduciary". Under UK and EU data protection law, we are the "controller".

Contact for privacy questions: support@nrihub.ai. Grievance Officer: see section 12. Legal notices: legal@nrihub.ai. We give and receive legal notices by email.

We have not appointed a Data Protection Officer; please contact support@nrihub.ai.

• Our representative in the European Union: we have not appointed one yet. Until we do, contact us directly at support@nrihub.ai. You can also complain to the data protection authority in the EU country where you live.
• Our representative in the United Kingdom: we have not appointed one yet. Until we do, contact us directly at support@nrihub.ai. You can also complain to the Information Commissioner's Office (ico.org.uk).

Information you give us

• Account: your email address and your name.
• Profile and setup: whether you are using NRIhub.ai as an NRI, for family or for a business; the city and country you live in; your home city or other city ties in India; your language; your preferred currency; and topics you are interested in.
• Marketing choice: whether you want marketing emails. It is off unless you turn it on.
• Nivi chats: the messages you send to Nivi and Nivi's replies.
• Tax tools: if you use the tax tools while signed in, the details you enter so you can come back to them, such as your travel dates and days spent in India, income and deduction figures, and tax deducted at source.
• FX rate alerts: if you have Premium and ask Nivi to watch an exchange rate for you, the two currencies and the rate you want. You can see and cancel your alerts in Account > Billing and plan.
• Documents: files you upload to your documents area, and the details you add to them, such as a title, document type or expiry date.
• Local features: the events you save, the associations you join, the volunteer roles you sign up for and the votes you cast in association elections, the updates you choose to follow, and the shopping lists you make. (The city you pick is remembered in your browser; if you are signed in, it is also saved as your city on your account.)
• Newcomer checklist: if you use it, the country and city you moved to, when you arrived, which areas you want help with first, and which checklist items you have ticked off.
• Travel planner: your trips (destination, dates and purpose) and checklists and, if you add them, visa or OCI records: the document type, its expiry date and, only if you enter it, its number.
• Event planner: your event's name, type, date, city and budget; your timeline and the links to documents you add to it; and your guest list (see section 4).
• Support and complaints: what you send us by email, through the contact form or through the grievance form, including reports about posts or listings.

Information created when you use NRIhub.ai

• Sign-in and security: when you sign in, your IP address, browser and device type, and records of security actions such as confirming a purchase with a one-time code.
• Consent records: which version of our terms and policies you accepted, when, and your region (for some choices, also your IP address); and your cookie choices.
• Nivi usage: how many messages you have sent this month, so we can apply the free allowance. If a message to Nivi suggests that someone may be at risk, we keep a record that a safety signal was detected, with its type and time.
• Event suggestions: when you save an event, we count how many events of each type (for example cultural, music or food) you have saved in your region, to suggest events you may like. We do not count religious events.
• Newcomer checklist activity: how many days you have used the checklist, and which suggested features it showed you and whether you opened them, so it can show your progress.
• Error reports: if something breaks, technical details about the error. On the website this can include a short replay of the steps before the error, with all text masked and images blocked.
• Usage analytics, only if you accept analytics cookies: which pages you visit and which features you use. Analytics data is not linked to your account.

Information from others

• Payments: Stripe tells us whether a payment succeeded, your plan, its dates, the amount and currency, and your country. Stripe collects your card details directly; we never see or store your full card number.
• Listings: information about events, restaurants and other food businesses, places of worship and associations, from public sources (including OpenStreetMap) and from organisers. It can include the name and contact details of a person who is publicly named as an organiser or contact (see section 5).
• Planners: the details of other people that you add, such as your guests (see section 4).

What we do not collect

• No precise location. The website does not use your device's GPS or precise location. City pages and local suggestions use the city you choose or the city in your profile. In the app, your location is used only if you ask it to find your city (see section 15).
• No religion. We do not ask for or record your religion or beliefs. Looking at places of worship is not saved to your account, and you cannot follow a place of worship on NRIhub.ai yet. If you save an event that is held at a place of worship, it is saved like any other event.
• We do not ask for Aadhaar, PAN or bank account details to use NRIhub.ai. The travel planner lets you add a visa or OCI document number if you want to; it is optional.

Please do not upload documents about other people unless you are allowed to.

• To provide NRIhub.ai to you (performing our contract with you): your account, sign-in, Nivi, the tax tools, your documents, the city pages and directories, the planners, the newcomer checklist, your memberships, and the Premium subscription.
• To show you local listings for your city on city pages and on your home page, and to suggest events you may like.
• To run Nivi: to answer you, we send your message, the recent conversation and a short summary of your profile (for example your city, country, residency status, interests, and whether you have saved a tax return in our tax tools) to our AI provider, Anthropic. If you ask Nivi about things near you, it can look up listings for your city.
• To take payments and manage Premium, including receipts, renewals, cancellations and refunds.
• To keep NRIhub.ai safe (our legitimate interests and legal duties): preventing fraud and abuse, securing accounts, handling reports about posts and listings, and fixing errors.
• To send you emails you need, such as sign-in codes, receipts, renewal reminders and important account or policy notices.
• To deliver the updates you choose to follow, for example from an association, to your NRIhub.ai inbox and in the ways you set in Account > Notifications.
• To send marketing emails, only if you opt in. You can turn them off at any time in Account > Privacy choices or Account > Notifications.
• To understand how NRIhub.ai is used and improve it, only if you accept analytics cookies.
• To meet legal obligations, such as keeping payment records for tax and responding to lawful requests.
• To show you helpline details if a message suggests someone may be at risk.

If you are in India, we use your personal data on the basis of the consent you give when you sign up, which you can withdraw, or where the law allows without consent, for example to meet a legal obligation.

We do not sell your personal data, and we do not use it for advertising. We do not use your data to make decisions that have legal or similarly significant effects on you. Nivi's replies are generated automatically, which is why section 5 of our Terms asks you to check important information.

If you add other people's details to a planner, for example a guest list with names, email addresses, phone numbers, party size, replies and notes:

• we store and protect them only to provide the planner to you;
• we do not contact your guests, and we do not use their details for anything else, such as marketing or suggestions;
• you decide what to add, and you are responsible for having the right to share it with us (section 11 of our Terms);
• they are kept while the plan exists; you can remove a guest or delete the whole plan yourself at any time, or email support@nrihub.ai and we will do it within 30 days; they are also deleted with your account (see section 9).

If you are on someone's guest list and want your details removed, you can ask the person who added you, or email support@nrihub.ai and we will help.

Listings can include information about people, for example an organiser's name or a contact email address that an organisation publishes on its website. We collect this from public sources, or from the organisation, so that people can find and contact the organisation. We use it only for the listing, never for marketing. We may use our AI provider to help us tidy or summarise the text of a listing.

If you are named in a listing and want your details corrected or removed, email support@nrihub.ai with the link to the page. We aim to act within 15 days.

OpenStreetMap is a source of listing data. We do not send your personal data to OpenStreetMap.

Our main database is in Mumbai, India. Some providers process data in other countries (see section 8).

India does not have an "adequacy decision" from the European Union or the United Kingdom. When we transfer personal data of people in the UK or EU to India or to other countries, we rely on the standard contractual clauses (and, for the UK, the UK addendum) in our data processing agreement with each provider. For other countries, we rely on the protections in those same contracts.

We share personal data only with the following, and only as needed:

• Service providers who run parts of NRIhub.ai for us under contract (section 8). They may use your data only to provide their service to us.
• Stripe, which also acts on its own account for some purposes, such as preventing fraud and meeting financial regulations. See Stripe's privacy policy at stripe.com/privacy.
• Associations you join: NRIhub.ai staff and the people who run the association can see that you are a member. Your name is not shown in an association's member directory unless you choose to appear in it.
• Authorities, when the law requires it, or when it is needed to protect someone's life or safety.
• A buyer or successor, if NRIhub.ai or its business is transferred. They must protect your data as this policy says, and we will tell you.

Other websites. When you follow a link to another website, such as an organiser's website, a map, a flight search or a government website, that website receives what is in the link (for example an address, or the route and dates of a flight search) and its own privacy policy applies. Some listings show a picture that is stored on another website, such as the organiser's; your browser then loads it from that website, which receives your IP address and browser details, as with any web page.

• Supabase: our database. Mumbai, India.
• Fly.io: the servers that run our application. Singapore.
• Upstash: short-lived data for background jobs, caching and limits on repeated requests. Mumbai, India.
• Vercel: hosting for our website. Mumbai, India, with a worldwide network that delivers web pages.
• Cloudflare (R2): storage for the files you upload. Asia-Pacific region.
• Resend: sending our emails. Japan.
• Stripe: payments. United States and other countries.
• Anthropic: the AI model behind Nivi, which also helps us tidy listing text. United States. Anthropic processes your Nivi messages to produce replies and, under its commercial terms, does not use them to train its models.
• Sentry: error reports. United States.
• PostHog: usage analytics, only if you accept analytics cookies. United States.

• Your account, profile, Nivi chats and documents: while your account is open. You can delete documents yourself at any time.
• Your trips, event plans (including guest lists), saved events, memberships, shopping lists and newcomer checklist: while your account is open. You can remove a saved event, delete a trip, an event plan, a guest or a shopping list, and leave an association yourself at any time; to have your newcomer checklist or a membership record deleted sooner, email support@nrihub.ai and we will delete it within 30 days.
• After you delete your account: you have 30 days to change your mind by signing in again. After that, we permanently delete or anonymise your personal data, including your Nivi chats, your uploaded files, your trips, your event plans and the guest lists in them, your saved events and your memberships (except tax-tool data, see the next line), and we close your record with Stripe.
• Figures and documents saved in the tax tools are kept for up to 7 years after the end of the tax year they relate to, and then deleted.
• Payment and invoice records: for 5 years, because tax and accounting law requires it.
• Sign-in and security logs: 1 year.
• Support and grievance emails, and reports about posts or listings: 2 years after the matter is closed.
• Listing information about people: while the listing is on NRIhub.ai, or until you ask us to remove it.
• Records of your consents and of important account actions: for as long as we may need them to show that we met our legal duties.
• Error reports: up to 90 days.
• Usage analytics: up to 1 year.
• Backups: our database backups are kept for 7 days, so deleted data can remain in a backup for up to 7 days before it is overwritten.

• All connections to NRIhub.ai are encrypted (HTTPS).
• Some especially sensitive fields get an extra layer of encryption in our database.
• Uploaded files are private to your account and are opened through short-lived links. Links to documents that you add to an event plan are shown only to you; the files stay wherever you keep them.
• Sensitive actions, such as buying, downloading your data or deleting your account, need a fresh one-time code.
• Only people who need access to run NRIhub.ai can see personal data.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities when the law requires it.

Depending on where you live, you can:

• see and get a copy of your data: download it yourself on the website in Account > Download your data;
• take your data elsewhere (portability): the download is a machine-readable JSON file;
• correct it: edit your profile, or ask us;
• delete it: delete your account yourself in Account > Delete account (in the app: Me > Settings > Delete account), or ask us. You can also remove a saved event, delete a trip, an event plan, a guest or a shopping list, or leave an association at any time (some of these only on the website for now, see section 15); to have your newcomer checklist deleted, email support@nrihub.ai and we will do it within 30 days;
• withdraw consent at any time, for example for marketing or analytics cookies, in Account > Privacy choices or with "Manage cookies" at the bottom of every page. This does not affect what we did before you withdrew;
• object to or restrict some uses of your data;
• nominate someone to exercise your rights if you die or become unable to (India);
• complain to us (section 12) and to your data protection authority.

To use a right that is not self-service, email support@nrihub.ai. We may need to confirm it is you. We reply within 30 days (45 days for some US state law requests), and we do not charge for this.

Data protection authorities include the Data Protection Board of India, the UK Information Commissioner's Office, your local authority in the EU, the Office of the Australian Information Commissioner, and the Office of the Privacy Commissioner of Canada.

If you have a concern about how we handle your personal data, contact our Grievance Officer:

• Name: Rishu Kalra, Director
• Email: grievance@nrihub.ai. We handle grievances by email.
• Legal notices: legal@nrihub.ai. We give and receive legal notices by email.

If you have an account, you can also use the grievance form at www.nrihub.ai/grievance, which gives you a reference number. We acknowledge every grievance within 24 hours and aim to resolve it within 15 days.

NRIhub.ai is not for anyone under 18. When you sign up, we ask you to confirm that you are 18 or older. We do not knowingly collect data from children, except a child's name if a parent or other user adds it to a guest list. If you think a child has given us personal data, email support@nrihub.ai and we will delete it.

We use essential cookies to run NRIhub.ai, and analytics cookies only if you accept them. See our Cookie Policy.

If you use the NRIhub.ai app:

• it sends crash and error reports to Sentry, with technical details about your device and the error, and timing data from a sample of sessions so we can find slow screens;
• it does not send push notifications at launch;
• if you tap "Use my location", or the location pin when you plan an event, it asks for your permission and uses your device's location once, through your phone's own location service (Apple or Google), to work out your city. We save the city, not your location. It never uses your location in the background;
• it does not track you across other companies' apps or websites;
• some tools are on the website only for now: downloading your data, deleting a document from your documents area, deleting a shopping list and leaving an association. To use them, sign in at www.nrihub.ai.

To delete your account without the app, sign in at www.nrihub.ai/account/delete or email support@nrihub.ai from your account's email address.

We may update this policy. If a change is important, we will email you at least 30 days before it applies. The date at the top of this page shows when it last changed.

PairOx Pty Ltd (ABN 82 154 477 728), a company incorporated in New South Wales, Australia.

Support and privacy questions: support@nrihub.ai

Complaints (Grievance Officer): grievance@nrihub.ai

Legal notices: legal@nrihub.ai. We give and receive legal notices by email.

We do not offer phone support. Please contact us by email.