Privacy Policy

Privacy Policy — SearchLLM.shop Operated by piBits AI Solutions Pvt Ltd, Noida, India Last updated: August 2026 1. WHO WE ARE SearchLLM.shop is operated by piBits AI Solutions Pvt Ltd, Noida, India. Contact us at deploy@pibitsai.com for any question about this policy, your data, or your account. 2. WHAT THIS SITE DOES We research a shopping question, give you one clear pick with the reasoning behind it, and show the alternatives we did not pick and why. Some results include a brand we have an affiliate relationship with, tracked through a third-party network (Awin, Impact, or vCommission). We label every one of those clearly. Payment never changes which option we rank as the best pick — an affiliate relationship only determines whether a tracked link may appear beneath a recommendation that exists independently of it. 3. WHAT WE COLLECT Unregistered users: your query text is processed to answer your question. We also keep the text of search queries in a strictly anonymous log — never linked to you, your account, your session, or your device — so we can see which products people are looking for and add coverage for them. The only context stored with a logged query is your approximate country and whether we had a relevant product to show. Queries blocked by our content filter are never stored at all. Registered users: your email address and/or mobile number (whichever you sign up with), your plan tier, and a daily count of how many searches you have run. Authentication is handled by our identity provider, including sending any verification code to confirm you own the email or mobile number you registered with; we never see or store your password. We do not build a profile of your shopping history, and we do not track you across other websites. 4. WE DO NOT SHARE YOUR DATA — WITH ANYONE We do not sell, rent, licence or trade your personal data. We do not share it with brands, advertisers, affiliate networks, data brokers, or any other third party for their own purposes. This includes our affiliate partners. A brand listed on this site never receives your identity, your email address, your query text, or any means of identifying you individually. When you click an affiliate link, the destination retailer and the affiliate network see that a click occurred from our site — they do not receive anything from us about who you are or what you searched for. The only parties who process data on our behalf are the infrastructure providers strictly required to run the service (hosting, database, authentication, payment processing, and the AI model that generates recommendations). They act on our instructions and may not use your data for their own purposes. 5. WHAT WE STORE ABOUT YOUR SEARCHES Two things, both designed so they cannot be traced back to you: An anonymised knowledge record of questions asked, to improve future answers. Your raw question is not stored against it — only a one-way hash, which cannot be reversed to recover what you typed or linked back to you. An anonymous log of search query text, used solely to understand which products to add to the site. No user, account, session or device identifier is ever attached to it — the log is built without one, so it cannot become a history of anyone's searches. 6. PAYMENTS Subscription payments are processed by Razorpay. We never see or store your card, UPI or bank details at any point. Razorpay handles that under its own privacy policy. 6A. REWARDS PROGRAMME (OPT-IN ONLY) Everything above describes the default: no purchase history, ever. The rewards programme is the single, explicit exception, and it exists only for members who join it — and even then, purchases are not part of it. Points come from two things only: a research pick and a recommended-product link click, both computed from the same anonymous-at-rest usage counters described above, at a flat rate that is the same for every member. Guest points are never stored at all — they are calculated live from the day's activity and cease to exist at midnight. What we store for members is simply a points balance and history — nothing about what you bought, because purchases earn nothing and are not linked to your rewards account at all. When a voucher redemption is fulfilled through a gift-card provider, we share with that provider only what issuance requires (see 6AC). Non-members and guests are completely unaffected. You can stop at any time by contacting us: accrual stops immediately; the existing ledger is retained as accounting records. This section only applies if you have explicitly joined the programme from the Rewards page. 6AC. GIFT VOUCHER KYC (RBI MANDATE) Redeeming points for a gift voucher is a separate, further step members take, and it requires additional information: your first name, last name, mobile number, email address and postal address. This is not a choice we made — it follows Reserve Bank of India requirements for the issuance of prepaid instruments (gift vouchers) in India, and a voucher cannot legally be issued to you without it. These details are stored against your account so we don't ask twice from scratch, but they are always shown back to you and must be explicitly reconfirmed at the moment of every redemption, including when they haven't changed — a fresh, dated confirmation record is kept with each redemption for this reason. This information is used solely to fulfil your voucher order (and, where the issuing gift-card provider requires it, passed to them for that purpose) — never for marketing, never shared with any advertiser or affiliate partner, and never used outside the redemption it was collected for. You can review or correct what's on file, or ask what's been kept against past redemptions, the same way as any other data request in section 8. 6AA. LIVE WEB LOOKUPS To answer with current prices and current reviews rather than an AI model's stale recollection, we look your question up on the live web before answering. This means the text of your question — and sometimes a product name from our catalogue — is sent to a third-party search provider, which processes it under its own terms. We send nothing else: not your account, your email, your identity, or anything about your other queries. Nothing about you is retained by us as a result of this lookup beyond what is described elsewhere in this policy. 6AB. TRAFFIC AND ADVERTISING MEASUREMENT We use industry-standard tag tooling (Google Tag Manager) for two narrow purposes. First, traffic measurement via Google Analytics: aggregate counts of visits, pages viewed, and on-site actions such as "a search completed" or "a product link was clicked" — configured with Google's advertising features (Google Signals, ads personalisation, demographic reporting) disabled, and never including your query text or personal identifiers in events. Second, when we run advertising campaigns, measurement of whether our own ads led to visits — for example a Meta (Facebook/Instagram) pixel that tells Meta "this ad click resulted in a visit". Neither is used to build profiles of your browsing on other websites, and we do not load cross-site remarketing or third-party advertising audiences. These tools may set cookies from the respective provider; you can block them with standard browser controls without affecting the service. 6B. FAIR-USE ENFORCEMENT DATA To enforce the usage limits in our Terms and to prevent abuse through multiple accounts, we process your network (IP) address in one-way hashed form: the hash lets us count recent usage per network address, but the raw address is not stored with this data and the hash cannot be reversed into it. These counters are kept for the rolling enforcement window plus a short margin and are used for no other purpose — not for advertising, not for profiling, and never shared. Accounts with a completed purchase or Increase Usage payment are exempt from network-level limits. 7. DATA RETENTION Session data is deleted when your session ends. Account data is kept while your account is active and deleted within 30 days of a deletion request. Anonymously logged query text (section 5) is retained as aggregate product-demand data; because it carries no identifier, it is not linked to any person and cannot be selectively deleted per person — there is nothing connecting it to you to delete. 8. YOUR RIGHTS You can request a copy of your data, correction of it, or its deletion at any time by emailing deploy@pibitsai.com. We will respond within 30 days. 9. SECURITY Data is encrypted in transit and at rest. No system is perfectly secure, and we do not claim otherwise, but we do not retain the kinds of data that would make a breach materially damaging to you. 10. CHANGES Registered users receive 30 days' notice by email before any material change to this policy.