Privacy Policy

Privacy Policy — SearchLLM.shop Operated by piBits AI Solutions Pvt Ltd, Noida, India Last updated: September 2026 1. WHO WE ARE SearchLLM.shop is operated by piBits AI Solutions Pvt Ltd, Noida, India. Contact us at deploy@pibitsai.com for any question about this policy, your data, or your account — this address also serves as our Grievance Officer contact under India's Digital Personal Data Protection Act, 2023 (see section 8). 2. WHAT THIS SITE DOES We research a shopping question, give you one clear pick with the reasoning behind it, and show the alternatives we did not pick and why. Some results include a brand we have an affiliate relationship with, tracked through a third-party network (Awin, Impact, or vCommission). We label every one of those clearly. Payment never changes which option we rank as the best pick — an affiliate relationship only determines whether a tracked link may appear beneath a recommendation that exists independently of it. 3. WHAT WE COLLECT Unregistered users: your query text is processed to answer your question. We also keep the text of search queries in a strictly anonymous log — never linked to you, your account, your session, or your device — so we can see which products people are looking for and add coverage for them. The only context stored with a logged query is your approximate country and whether we had a relevant product to show. Queries blocked by our content filter are never stored at all — see the Terms of Use, section 6, for the full list of what we refuse to research or recommend (including, among others, medicines, weapons, adult content, and contraband, terrorism-related, or unlawful propaganda material). Registered users: you register with your mobile number only — registration itself does not collect your name — plus a daily count of how many searches you have run. Authentication is handled by our identity provider, including sending an SMS verification code to confirm you own the mobile number you registered with; we never see or store your password (where one is used as part of that verification, it is set and checked entirely by our identity provider, never visible to us). Your mobile number is collected solely to administer your account and the rewards programme described in section 6A — most importantly, to have your mobile already on file before you ever try to redeem a gift voucher (section 6AC), which legally requires it. Your first and last name are collected separately, fresh at the moment of every redemption, for the same reason your email is (section 6AC) — not stored as an ordinary account profile field. None of this is shared with any advertiser, affiliate partner or brand, or used for any purpose outside this platform, with one narrow, opt-in exception: if you separately and explicitly turn on promotional messages (section 6D), we may text your registered mobile number with offers or updates. This never happens unless you switch it on yourself, and you can switch it back off at any time. Your mobile number is fixed to the one you signed in with and cannot be changed within the app. We do not collect an email address at registration. The one place we ask for one is at the moment you redeem a gift voucher (section 6AC) — because gift-voucher issuance needs it, not because your account needs it — and it is asked for fresh at every redemption, not stored as part of your everyday account profile. We do not build a profile of your shopping history, and we do not track you across other websites. 4. WE DO NOT SHARE YOUR DATA — WITH ANYONE We do not sell, rent, licence or trade your personal data. We do not share it with brands, advertisers, affiliate networks, data brokers, or any other third party for their own purposes. This includes our affiliate partners. A brand listed on this site never receives your identity, your email address, your query text, or any means of identifying you individually. When you click an affiliate link, the destination retailer and the affiliate network see that a click occurred from our site — they do not receive anything from us about who you are or what you searched for. The only parties who process data on our behalf are the infrastructure providers strictly required to run the service (hosting, database, authentication, payment processing, and the AI model that generates recommendations). They act on our instructions and may not use your data for their own purposes. 5. WHAT WE STORE ABOUT YOUR SEARCHES Two things, both designed so they cannot be traced back to you: An anonymised knowledge record of questions asked, to improve future answers. Your raw question is not stored against it — only a one-way hash, which cannot be reversed to recover what you typed or linked back to you. An anonymous log of search query text, used solely to understand which products to add to the site. No user, account, session or device identifier is ever attached to it — the log is built without one, so it cannot become a history of anyone's searches. Separately, and never sent to us at all: while you're actively researching, your own browser briefly remembers the picks from earlier in the same visit, so we can suggest genuinely complementary follow-up searches (a bag after a laptop, for instance). This lives only in your browser's memory for that visit — it disappears the moment you reload the page or navigate away, and it is never transmitted to our servers or saved against your account. 6. PAYMENTS The platform fee is processed by Razorpay, one payment at a time, per points block (see 6A). We never see or store your card, UPI or bank details at any point. Razorpay handles that under its own privacy policy. 6A. REWARDS PROGRAMME (OPT-IN ONLY) Everything above describes the default: no purchase history, ever. The rewards programme is the single, explicit exception, and it exists only for members who join it — and even then, purchases are mostly not part of it (the one exception is section 6AD below). Points mostly come from two things: a research pick and a recommended-product link click, both computed from the same anonymous-at-rest usage counters described above, at a flat rate that is the same for every member. Guest points are never stored at all — they are calculated live from the day's activity and cease to exist at midnight. What we store for members is simply a points balance, a record of which points blocks have been paid for, and history — nothing about what you bought, because purchases mostly earn nothing and are mostly not linked to your rewards account (again, 6AD is the one exception). Points accrue freely up to each successive block boundary and pause there until that block's platform fee is paid — see the Terms of Use for how that works; the payment record we keep is just which blocks are paid, not anything about the card or bank account used. When a voucher redemption is fulfilled through a gift-card provider, we share with that provider only what issuance requires (see 6AC). Non-members and guests are completely unaffected. You can stop at any time by contacting us: accrual stops immediately; the existing ledger is retained as accounting records. This section only applies if you have explicitly joined the programme from the Rewards page. 6AD. PURCHASE CONFIRMATION (SHOPSY AND MYNTRA) For the two platforms named in the Terms of Use section 6AB, when our affiliate partner confirms a purchase you made through a link on this site, we store the purchase's commission value against your account (linked via the click that led to it) solely to calculate and credit reward points. This is the one exception to "purchases earn nothing and are not linked to your rewards account" above. Nothing about what you bought is stored — only that a confirmed purchase occurred and its commission value. This is never shared with anyone beyond the affiliate partner already involved in facilitating the purchase itself. 6AC. GIFT VOUCHER KYC (RBI MANDATE) Redeeming points for a gift voucher requires five details: your first name, last name, mobile number, email address and postal address. This is not a choice we made — it follows Reserve Bank of India requirements for the issuance of prepaid instruments (gift vouchers) in India, and a voucher cannot legally be issued to you without it. Your mobile is collected at registration (section 3) and shown at redemption exactly as it appears on your account — read-only on the redemption screen itself, since it's your verified sign-in identifier and can't be changed within the app. Your first name, last name, email address and postal address are not collected at registration — most visitors never redeem a voucher — so you provide all four, and reconfirm all four, at the moment of every redemption, even when they're the same as last time (prefilled from your last redemption for convenience, but always editable and always reconfirmed), because a fresh, dated confirmation record is kept with each redemption. Whichever mobile number was on your account at the moment of that redemption, and the name/email/address you gave then, are all stored as a permanent snapshot against that redemption, separately from your current account details, since RBI recordkeeping requires the details as they stood at the time, not as they may read later. This information is used solely to fulfil your voucher order (and, where the issuing gift-card provider requires it, passed to them for that purpose) — never shared with any advertiser or affiliate partner, and never used outside the redemption it was collected for, with one narrow, opt-in exception: the redemption screen offers a separate, unchecked-by-default box to also use this email for promotional messages (section 6D). Leaving it unchecked has no effect whatsoever on your redemption. You can review or correct what's on file, or ask what's been kept against past redemptions, the same way as any other data request in section 8. 6AA. LIVE WEB LOOKUPS To answer with current prices and current reviews rather than an AI model's stale recollection, we look your question up on the live web before answering. This means the text of your question — and sometimes a product name from our catalogue — is sent to a third-party search provider, which processes it under its own terms. We send nothing else: not your account, your email, your identity, or anything about your other queries. Nothing about you is retained by us as a result of this lookup beyond what is described elsewhere in this policy. 6AB. TRAFFIC AND ADVERTISING MEASUREMENT We use industry-standard tag tooling (Google Tag Manager) for two narrow purposes. First, traffic measurement via Google Analytics: aggregate counts of visits, pages viewed, and on-site actions such as "a search completed" or "a product link was clicked" — configured with Google's advertising features (Google Signals, ads personalisation, demographic reporting) disabled, and never including your query text or personal identifiers in events. Second, when we run advertising campaigns, measurement of whether our own ads led to visits — for example a Meta (Facebook/Instagram) pixel that tells Meta "this ad click resulted in a visit". Neither is used to build profiles of your browsing on other websites, and we do not load cross-site remarketing or third-party advertising audiences. These tools may set cookies from the respective provider; you can block them with standard browser controls without affecting the service. 6B. FAIR-USE ENFORCEMENT DATA To enforce the usage limits in our Terms and to prevent abuse through multiple accounts, we process your network (IP) address in one-way hashed form: the hash lets us count recent usage per network address, but the raw address is not stored with this data and the hash cannot be reversed into it. These counters are kept for the rolling enforcement window plus a short margin and are used for no other purpose — not for advertising, not for profiling, and never shared. Accounts with a completed purchase or a paid points block are exempt from network-level limits. 6C. REFERRAL PROGRAMME If you share your personal referral link, visiting it sets a short-lived cookie on your friend's device (30 days) so that, if they go on to register, we can credit you — this cookie holds only your referral code, nothing that identifies your friend. We never see, store, or send anything to your friend's phone number or any other contact detail as part of this: sharing happens entirely through your own means (for example, your own WhatsApp), never ours. What we store is that a referral occurred — linking the two registered accounts involved and when — not any message content, and nothing about your friend beyond their own registration, which is covered by this policy the same as any other account. 6D. PROMOTIONAL MESSAGES (OPT-IN, OFF BY DEFAULT) Everything above describes the default: your registered mobile number and any email you give us are never used to contact you with offers or promotions unless you separately switch that on. Two independent, optional toggles, each off until you turn it on yourself: SMS: switched on from the "Privacy" section of your account. Uses the mobile number already on your account — nothing further to provide. Email: the redemption screen (section 6AC) offers a separate, unchecked box to also use that email for promotional messages; turning it on or off there, or from the Privacy section afterwards, never affects a redemption itself. Either can be switched off at any time from the Privacy section of your account, and doing so takes effect immediately. Turning SMS on registers your consent, but we may not be able to act on it immediately — Indian telecom regulations (TRAI) require promotional messages to go out under a separately registered sender category from the one used for account verification codes, and we will only begin sending once that registration is complete. We do not sell, share, or otherwise use your contact details for anyone else's promotional purposes — only our own. 7. DATA RETENTION Session data is deleted when your session ends. Account data is kept while your account is active and deleted within 30 days of a deletion request. Anonymously logged query text (section 5) is retained as aggregate product-demand data; because it carries no identifier, it is not linked to any person and cannot be selectively deleted per person — there is nothing connecting it to you to delete. 8. YOUR RIGHTS (DPDP ACT, 2023) Under India's Digital Personal Data Protection Act, 2023, you have the right to access, correct, or request erasure of your personal data at any time, and to have any grievance about how we handle it addressed. You can exercise this two ways: self-service, through the "Privacy" section of your account (request a copy of your data, or request deletion of your account and its data — each request is tracked so you can see its status), or by emailing our Grievance Officer at deploy@pibitsai.com. Either way, we will respond within 30 days. Deleting your account removes your account data as described in section 7; anonymous, non-identifying records (like the search-demand log in section 5) have nothing linking them to you and so are not something a deletion request can act on. 9. SECURITY Data is encrypted in transit and at rest. No system is perfectly secure, and we do not claim otherwise, but we do not retain the kinds of data that would make a breach materially damaging to you. 10. CHANGES Registered users receive 30 days' notice by email before any material change to this policy. 11. GOVERNING LAW AND DISPUTES This policy is governed by the laws of India. Courts at Noida, Uttar Pradesh have exclusive jurisdiction over any dispute arising from it. In case of any discrepancy or ambiguity in how this policy applies to a particular situation, our decision on interpretation is final, without prejudice to your statutory rights under Indian law.