Privacy Policy
Last updated: May 2026. Effective immediately for all users.
1. Who We Are
This Privacy Policy describes how UNOMONO ADVERTISING LLP ("we", "us", "our") collects, uses, stores, and protects personal information in connection with the service operated at notshakespeare.com ("Service").
UNOMONO ADVERTISING LLP is the data controller for personal data processed in connection with the Service. For privacy-related queries, contact us at privacy@notshakespeare.com.
This Policy is governed by and construed in accordance with the Information Technology Act, 2000 ("IT Act") and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and any successor legislation including India's Digital Personal Data Protection Act.
2. Data We Collect
2.1 Account and Identity Data
When you sign in via Google OAuth, we receive and store:
- Email address (primary identifier for your account);
- Display name (as provided by Google);
- Profile image URL (as provided by Google).
We do not receive or store your Google account password.
2.2 Usage Data
We collect data about your use of the Service, including:
- Number of captions generated and credits consumed;
- Brand names and configuration you create within the Service;
- AI generation inputs (brand tone of voice documents, post ideas);
- Timestamps of key actions (generation, revision, login).
2.3 Payment Data
Payment processing is handled entirely by Razorpay (Razorpay Software Private Limited). We do not receive or store your full card number, CVV, or bank account credentials. We store only:
- Razorpay subscription ID and payment ID (references);
- Amount charged, billing period, and subscription status for invoice generation;
- Invoice data as required for accounting and dispute resolution.
Razorpay's Privacy Policy governs how they handle your payment data: razorpay.com/privacy.
2.4 Agreement and Legal Records
When you accept our Terms of Service and Privacy Policy, we record:
- Date and time of acceptance;
- IP address (derived from the
x-forwarded-forrequest header); - User agent string of your browser.
These records are kept permanently as a legal audit trail to demonstrate informed consent.
2.5 Billing Appeal Data
If you submit a billing appeal, we store the subject, description, correspondence, and resolution outcome linked to your account. This data is retained to manage the dispute and maintain records in case of future queries.
2.6 Technical and Log Data
Our infrastructure may automatically log standard technical data including server request logs, error reports, and performance metrics. This data is used solely for maintaining service reliability and security. It is not linked to individual user profiles beyond what is technically necessary.
3. How We Use Your Data
We use the personal data we collect for the following purposes:
- Providing the Service: to authenticate your account, process your AI generation requests, manage your subscription, and display your usage and history;
- Billing and invoicing: to process payments via Razorpay, generate and email invoices, and manage subscription lifecycle;
- Transactional communications: to send receipts, renewal reminders, appeal acknowledgements, and other service-related emails;
- Legal and compliance: to maintain agreement records, resolve billing disputes, and comply with applicable law;
- Security and fraud prevention: to detect and prevent unauthorised access, abuse, and fraudulent activity.
We do not use your data for advertising, profiling for third-party marketing purposes, or to train AI models.
4. Data Storage and Security
4.1 Where We Store Data
Your data is stored in the following systems:
- Neon PostgreSQL (Singapore region, ap-southeast-1) -- permanent records including user accounts, invoices, caption history, agreement records, and appeal logs;
- Upstash Redis (Tokyo / GCP asia-northeast1 region) -- hot cache for quota data, brand settings, and session-level data; cost logs auto-expire after 90 days.
Both services encrypt data at rest and in transit using industry-standard TLS/AES encryption.
4.2 Security Measures
We implement reasonable technical and organisational security measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted connections (HTTPS), access controls, and regular security reviews.
No method of internet transmission or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
5. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data to third parties. We share data only as necessary to provide the Service:
Authentication (OAuth). We receive your email, name, and profile image from Google when you sign in.
Razorpay
Payment processing. Handles your card/UPI details directly. We receive only transaction references.
Anthropic PBC
AI model inference. Your brand inputs and post ideas are sent to Anthropic's API to generate captions.
Resend
Transactional email delivery. Your email address and relevant email content are passed to Resend to deliver receipts and notifications.
Neon
PostgreSQL database hosting. Stores your account and billing data.
Upstash
Redis database hosting. Stores session and quota cache data.
We may also disclose your data if required by law, court order, or government authority, or if we believe disclosure is necessary to prevent fraud, protect our rights, or protect the safety of users or the public.
6. Cookies and Tracking
notshakespeare.com uses a single session cookie managed by NextAuth, our authentication library. This cookie:
- Is set when you sign in and cleared when you sign out;
- Contains only a session identifier (no personal data);
- Is marked HttpOnly and Secure.
We do not use advertising cookies, tracking pixels, analytics scripts (such as Google Analytics), or any cross-site tracking technologies.
7. Data Retention
7.1 Active Accounts
We retain personal data for as long as your account is active. Usage data, captions, invoices, and billing records are retained indefinitely to support your account history and dispute resolution needs.
7.2 Deleted Accounts
If you request deletion of your account, we will purge your personal data from our systems within 90 days of the request, except where retention is required by law (e.g., financial records) or for legitimate purposes (e.g., resolving an open dispute).
7.3 Legal Agreement Records
Agreement acceptance records (IP address, user agent, timestamp) are retained permanently as required for legal audit purposes.
8. Your Rights
Under the Information Technology Act, 2000 and applicable rules, and subject to India's Digital Personal Data Protection Act, you have the following rights in relation to your personal data:
- Access: You may request a copy of the personal data we hold about you;
- Correction: You may request correction of inaccurate or incomplete data;
- Deletion: You may request deletion of your account and associated personal data, subject to legal retention requirements.
To exercise any of these rights, email privacy@notshakespeare.com from the email address associated with your account. We will respond within 30 days.
9. Children's Privacy
The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us at privacy@notshakespeare.com and we will delete the account and associated data.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or an in-app notice. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes are published constitutes acceptance of the revised Policy.
11. Contact
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, contact:
UNOMONO ADVERTISING LLP
notshakespeare.com
Mumbai, Maharashtra, India
Email: privacy@notshakespeare.com