Privacy Policy

Me2Us4U ("we," "our," or "us") processes your personal data in compliance with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. This policy explains how we collect, use, and safeguard your data across me2us4u.com and me2us4u.in, and the products in the Me2Us4U family.

To create and operate your account, we collect:

• Profile data: your full name, email address, and phone number, provided when you create an account.
• Authentication data: we verify your mobile number and email address using one-time passcodes (OTP) sent at sign-up. If you choose to set a password, it is stored only as a salted cryptographic hash — we never store or have access to your plaintext password.
• Aura AI Studio content: the messages you write, Aura's replies, and the text of files you attach when you use Aura. See section 5 for who processes it.
• Launch interest: if you tap “Notify me” on a product that is not open yet, we record that you want to hear about it and use the email address and phone number on your account to contact you when it launches. We use it for nothing else, and you can withdraw at any time by tapping the button again.
• Technical metrics: IP address, browser type, operating system, session timestamps, and a signed session token stored securely in your browser to keep you signed in.

Your Me2Us4U account, identified by your unique M2UXXXXXXXX ID, is designed to be the single account you use across our full product family — including subdomains such as matrimony.me2us4u.com, chat.me2us4u.com, and tasks.me2us4u.com as each is brought online. Sessions use a short-lived (15-minute) signed token held in your browser and a sign-in cookie shared across *.me2us4u.com. Our connected products on their own sites — babuki.com and babuky.com, run by the same company — use "Sign in with Me2Us4U": when you continue to one, we send it a one-time code (never your password or session token), and it receives your account ID, name, verified phone number and email. Babuky also receives whether your Premium plan or a paid VaultGate community membership waives its platform fee, and your credit balance, and we record the credits it sets aside, uses or returns for your orders. Each product keeps its own sign-in cookie on its own site. We record which products you have connected (shown in Settings → Connected apps). Babuki and Babuky tell us which accounts still have a shop or an unfinished order there, only so that such an account isn't deleted while others rely on it.

We process your personal data strictly for legitimate operational purposes:

• Providing, maintaining, and improving our unified ecosystem.
• Authenticating your identity and managing account sessions.
• Sending transactional OTPs, security alerts, and system notifications.
• Detecting fraud, enforcing rate limits, and preventing unauthorized access.
• Where applicable, logging system usage metrics, API requests, and your credit ledger history — solely to track your credit balance, prevent abuse of our systems, and ensure billing accuracy. See Pricing and Digital Credits & Usage Terms for how credits work.

Your data is stored and processed on Amazon Web Services (AWS) infrastructure in the Asia Pacific (Mumbai) region. All traffic between your browser and our servers is encrypted in transit using TLS 1.3. Our databases run inside a private network (VPC) with access restricted to our application services — not exposed directly to the internet.

We do not sell, rent, or trade your personal data to third-party marketers or brokers.

When you chat with Aura AI Studio (ai.me2us4u.com), here is what happens to what you write:

• We save your chats so they appear in your history: your messages, Aura's replies, and the text of any files you attach (kept only for that chat). Pictures you attach are used for that one message and are not saved. Chats are stored in our database in Mumbai.
• Downloading a reply as a file. When you ask Aura for a reply as a PDF, Word, Markdown or text file, our own server builds the file from that reply and sends it straight to you. It uses no AI company and no other third party, and we do not keep a copy of the file.
• AI companies write the replies. To answer you, Aura sends your recent messages — and any file text or pictures you attached — to AI companies that run the models for us. Today that is Groq, Pollinations, OpenRouter (which passes Detailed-mode questions to a free model provider) and Hugging Face for text, and Cloudflare, SiliconFlow, Pollinations and Hugging Face for pictures — including when you ask Aura to change a picture it made or a photo you upload (fal.ai is the back-up for changes; Segmind is set up as a back-up and is not in use). All the models are open-weight. We use these companies only to produce your reply or picture.
• What we tell them about you: by default, only your first name, so Aura can greet you. If you choose Personalise in Aura, we also send the details you tick there — from your languages, city and state, age range, date of birth, place of birth, job title and education — along with your messages, so the answers fit you better. It is off until you turn it on, you pick each detail, and you can switch it off any time (it stops from your next message). We never send your Aadhaar or other ID numbers, email address, phone number, password, street address, family details or income — there is no option for those.
• Looking things up. When you ask about something that changes — today's news, the weather, prices, scores — Aura searches the web first so it can answer from real, current information. For that, the words of your question (with filler words removed) are sent to Google News, Microsoft Bing, Tavily (a web-search service) and Wikipedia, and, for weather, the name of the place to Open-Meteo. Nothing about you is sent with it: not your name, account or profile details. We keep the answers for a few minutes only, to avoid asking twice. If you type /image followed by a description, that description is placed in the web address of a picture on Pollinations; your own browser or phone then fetches it from there, so Pollinations receives the description and your network address. If you ask to see a real photo, Aura may show a picture from the website that hosts it; your browser or phone loads it directly from that website, which can see your network address (we ask for no referrer to be sent).
• Speaking instead of typing. If you tap the microphone in Aura (on the web or in the Android app), your phone's or browser's own speech service turns your voice into text — on most Android phones that is Google's speech service, and in Chrome the audio is sent to Google for the same purpose. Aura never receives or stores your voice: we only get the text, and it is treated like anything you type. The microphone is used only while you are speaking after you tap it, and you can refuse the permission and keep typing.
• Editing a photo you upload. If you pick a photo and ask Aura to change it (for example a cartoon look, or removing a mark or an object), we first ask for your permission, once. The photo — which may show your face — is then sent to our image-editing companies (Pollinations, and fal.ai as a back-up) to make the change. We do not keep your original photo: only the edited picture is saved, in that chat, until you delete it. You can withdraw the permission any time in Personalise. We refuse requests to undress or sexualise anyone, and you should only use photos you have the right to use.
• Outside India. These companies run their own systems, so what you write in a chat may be processed on servers outside India. We choose providers carefully, but we do not control their systems — each has its own privacy policy.
• Deleting a chat removes it from your history and deletes the file text we stored for it. We may keep the record of the conversation for security, billing and abuse prevention until you ask us to erase your data (see Your Rights below) or your account is deleted.
• Please don't share secrets in a chat — passwords, card numbers, Aadhaar or other ID numbers. Aura can also make mistakes, so double-check anything important.

• Right to access & rectification: view and update your profile information at any time from your dashboard.
• Right to erasure: delete your account yourself, in the Aura app or under Settings on the website (see how to delete your account). Your account and personal data are erased after a 14-day grace period in which you can cancel. We keep payment and invoice records, no longer linked to you, for as long as tax law requires. You can also ask us to do it by writing to us below.
• Right to withdraw consent: opt out of non-essential communications at any time.

Designated pursuant to Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection (DPDP) Act, 2023.

We may update this policy as our products and legal obligations evolve. Material changes will be reflected by an updated "Last Updated" date at the top of this page.