Privacy Policy

Last updated: 14 October 2026

This policy explains how we handle personal data, and is issued having regard to India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and rules made under it.

1. What this website collects

Less than most sites. firmgenie.in itself has no password login and no profile to manage. (If you build a website with FirmGenie Studio, its dashboard opens from a private link and one-time sign-in codes; see section 15.) What we do hold is what you type into one of our forms, described in sections 2 and 3. Beyond those, the only things leaving your browser are the analytics and advertising pixel described here.

The “Ask FirmGenie” chat

Every page carries a chat button. If you open it and type a message, what you type is sent to Google’s Gemini so it can write a reply, and the conversation is held in your browser only for as long as that page is open — close the tab and it is gone. We do not need your name or number to answer a question.

If you choose to leave your details in the chat so we can follow up, those details are stored in our database and emailed to us, and are then treated exactly like any other enquiry described in section 3. Please do not type card numbers, passwords or bank details into the chat — we never need them, and no part of this website is a place to enter them.

The AI calling agent tool

The AI calling agent page runs in your browser with your own Google Gemini key. Your key, the agents you build and your test calls stay in your browser only and are never sent to FirmGenie. During a test call, your microphone audio and the text of the conversation go straight from your browser to Google under your own key. On Google’s free tier Google may use them to improve its products, so please test with made-up details, not real customer data. A “Delete everything from this browser” button on that page removes what it saved.

Google Analytics

Our public pages on firmgenie.in (home, services, masterclass, cohort, the audit, pricing and tool pages, and the thank-you pages) use Google Analytics 4 to measure page visits, which buttons are pressed, and whether a form was sent or a payment completed (with the amount and our order number). Google sets cookies in your browser for this and receives your IP address and browser details. Private dashboard links, anything you type into a form, and the websites built for our customers are not tracked. The page address sent to Google leaves out order references and access keys. See Google’s privacy policy. A tracking blocker or your browser’s privacy settings will stop it, and nothing on this site stops working without it.

The Meta advertising pixel

Our public pages load the Meta (Facebook) pixel (the same pages as Google Analytics above; never your private dashboard links or customer websites). It sets a cookie in your browser and reports to Meta that a browser opened a page on this site, and whether it completed the audit form, or started or completed a payment. Meta uses this to measure our advertising and to let us show adverts to people who have visited the site.

These are counts of events, not of people we can name. The pixel in your browser does not send Meta your name, your email address or your phone number. When you complete a payment, our server also reports that purchase to Meta (Meta's Conversions API), so that Meta can match the purchase to an advert. With it we send your email address, phone number and name only in hashed form (a one-way scramble, not readable text), together with your IP address, browser type and Meta's own cookie value. We do not send them to Meta in readable form, and we do not send what you bought beyond the product name, amount and order number. What Meta can work out about you from the pixel is governed by Meta's own privacy policy, not by ours. If you would rather it did not run, a tracking blocker or your browser's privacy settings will stop it, and nothing on this site stops working without it.

Automatic technical data

Our hosting provider and content delivery network process standard server data — IP address, browser type, device type, referring page, and time of request — to serve pages and protect against abuse. This is ordinary infrastructure logging and we do not use it to identify individuals.

Web fonts

Typefaces are loaded from Google Fonts. Your browser therefore makes a request to Google's servers, which will receive your IP address. See Google's privacy policy for how they handle that data.

2. The business idea finder

The idea finder asks about your capital, the size of business you want, location, assets, experience and preferences. Nothing is saved while you are still answering — if you close the tab half way through, there is no record of you. The save happens at the end, when your shortlist is produced, and the next paragraph sets out exactly what that record contains.

The first question asks for your name. When the tool produces your shortlist, we save a record containing:

• the name you entered;
• the answers you gave in the tool;
• the business ideas that were generated for you.

This is stated on the first screen before you begin. We use it for one purpose: so that if you contact us by email, we can research your situation in advance and make the conversation more useful.

The idea finder asks only for your first name to show your shortlist. Your shortlist is shown to you on the page when it is ready. Afterwards you can choose to give an email address, either to have the shortlist emailed to you or to buy the full plan for one idea; that email is used only for that purpose, and we do not add you to any marketing list. If you buy a plan, the payment page also asks for your mobile number, because the payment provider requires it. If you then choose to email us about your ideas, that is you contacting us, and what you send is covered by section 4.

The record is stored in our own database on Cloudflare, accessible only to us.

If you would rather we did not keep it, email animesh@firmgenie.in with the name you used and roughly when you used the tool, and we will delete it.

AI processing

To generate suggestions, the answers you give in the tool are sent to a third-party AI provider (currently Google's Gemini API). Do not enter anything confidential or personally identifying in the free-text box. Suggestions are AI-generated estimates — see our Disclaimer.

3. The old business audit form (until 27 September 2026)

The free audit at firmgenie.in/audit is now FirmGenie Studio's instant audit, described in section 15. Until 27 September 2026 it was a written form handled by a person. Records from that form are kept and handled exactly as this section describes. If you asked for an audit through it, the form asked for the following, and it is saved as soon as you submit it — unlike the idea finder, there is no version of this that stores nothing.

About you, so we can send the report:

• your name;
• your phone number;
• your email address.

About your business, so the report is about you and not a generic checklist:

• business name, the city or area you operate in, what you sell and who buys it;
• your website, Google Business Profile, Instagram, Facebook, LinkedIn, YouTube and any marketplaces you sell on — all of these are optional, and all of them are pages you have already published publicly;
• competitors you named, or your request that we identify them;
• a broad band for your monthly turnover, what you have spent on marketing before, and what you feel is not working.

The turnover band is a range, not a figure, and "prefer not to say" is one of the choices. We ask it only so that what we suggest fits the money you actually have. We do not ask for, and you should not send us, bank details, account numbers, GST credentials or anything similar.

Your consent

The form has a tick box, and it is not pre-ticked. By ticking it you agree that we may send your audit report, and follow-up messages about that report, to your email address, and that we may call you on the phone number you gave for a personal follow-up. We record the fact that you ticked it and the date and time you did, because under the DPDP Act we have to be able to show that consent was given.

You can withdraw it at any time. Email animesh@firmgenie.in and we will stop contacting you. Withdrawing consent does not affect messages already sent.

What we do with it

We use it to research your business, write your audit, send it to you, and follow up about that audit. That follow-up is the point of the form and is covered by the tick box — it is not a newsletter, and you are not added to any marketing list. We do not sell, rent or trade it.

Writing the audit involves looking at the public pages you listed and at publicly available information about your market. A person does this and checks it. Your form answers are not fed to an AI system to generate the report, and are not used to train any AI system.

Where it is stored, and for how long

Audit submissions are stored in our own database hosted on Cloudflare, accessible only to us. If the same phone number submits the form more than once, the existing record is updated rather than a second one created.

We also record the IP address the form was submitted from, together with the date and time. This is kept purely to detect and block automated spam submissions, and is deleted with the rest of the record.

We keep an audit record for 24 months from your last contact with us about it, so that we can pick the conversation back up if you return, after which it is deleted. If you would like it removed sooner, email animesh@firmgenie.in from the address you gave, and we will delete it.

What the advertising pixel sees

When the form is successfully submitted, the Meta pixel and Google Analytics described in section 1 record that an audit request was completed on this site, so that we can measure which adverts bring real enquiries. None of your answers are sent to Meta or Google — not your name, your number, your email, your business name or your turnover. Meta receives the fact of a submission, nothing about who made it.

4. What we collect when you contact or engage us

• Contact details — name, email address, phone number.
• Business information — details of your business, idea, sector, location, budget and constraints, which you choose to share so we can advise you.
• Quote and callback forms — name, email, optional business name and mobile number, and what you need, when you ask for a quote or a callback about a service.
• Checkout and bookings — name, email, mobile number, your state and your GSTIN (if you give one), so we can issue a correct GST tax invoice for a plan, service, masterclass or cohort seat, blueprint or consultation.
• Payment details — collected by our payment provider when you pay us. We never see or store your card or bank details.
• Correspondence — records of our communication with you.

5. Why we process it

• To respond to your enquiry and schedule consultations.
• To research and write a free business audit you have asked us for, and to follow up with you about it.
• To deliver the services you have engaged us for, including research and project reports.
• To raise invoices and keep accounting records.
• To comply with legal and tax obligations.

We process this data on the basis of your consent, or because it is necessary to perform a service you have requested.

6. What we do not do

• We do not sell, rent or trade your personal data.
• We do not share your business information with other clients.
• We do not add you to marketing lists without your consent.
• We do not use your data to train any automated or AI system.

7. Third-party services

We use a small number of external providers who process data on our behalf, each under their own privacy policy:

• Our payment partners (RBI-authorised payment aggregators and checkout providers) — payments for consultations, blueprints, business plans, the masterclass and the cohort.
• Google Calendar and Google Meet — scheduling and hosting consultations.
• Website hosting and CDN — serving this website.
• Resend — sending you emails such as confirmations, reports and plans.
• Google Fonts — typeface delivery.
• Google Gemini API — generating suggestions in the business idea finder and answering the site chat.
• Anthropic (Claude API) — writing the paid business plan from your idea finder answers.
• Cloudflare — hosting this website, and the database that holds audit form submissions, idea finder records, chat enquiries and booking records.

Payments are handled by our payment partners, which are RBI-authorised payment aggregators and checkout providers. We never see or store your card, UPI or banking details.

8. Confidentiality of your business information

Information you share about your business, idea, finances or plans is treated as confidential. Where we publish or discuss work publicly, we do so only in anonymised form unless you have given us explicit permission to identify you.

This applies to audits. If we ever want to use your business as an example, we will ask you first.

9. Retention

We keep correspondence and project records for as long as needed to deliver the service and to meet legal, tax and accounting obligations, after which they are deleted or anonymised.

Audit form submissions are kept for 24 months from your last contact with us about the audit, as set out in section 3, and are then deleted.

10. Your rights

Subject to applicable law, you may ask us to:

• confirm what personal data of yours we hold, and obtain a copy;
• correct data that is inaccurate, incomplete or out of date;
• erase your personal data where we have no continuing legal reason to keep it;
• withdraw consent you previously gave;
• nominate another person to exercise these rights on your behalf in the event of death or incapacity, as provided under the DPDP Act.

To exercise any of these, email animesh@firmgenie.in. We will respond within a reasonable period.

11. Security

This website is served over HTTPS. We apply reasonable safeguards to the data we hold. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children

Our services are intended for adults operating or planning a business. We do not knowingly collect personal data of children. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this policy

If we add analytics or any further tracking to this website beyond Google Analytics and the Meta pixel described in section 1, we will update this policy before it runs.

14. Grievance contact

For any privacy question, complaint or request, write to our Grievance Officer. We reply within one working day.

• Grievance Officer: Animesh Kumar, Proprietor
• Business: FirmGenie, B9/6, 301, AC-119/1, BlueOffice Workspace, Third Floor, Prafulla Kanan (East), Kestopur, Kolkata 700101, West Bengal, India
• Email: animesh@firmgenie.in

To withdraw consent for processing your personal data, write to the same address with the subject line "Withdrawal of consent for processing personal data". Withdrawal is not retrospective, and we may not be able to provide a service that needs the data.

15. FirmGenie Studio: self-serve plans

FirmGenie Studio is the self-serve part of FirmGenie: the instant audit at firmgenie.in/audit, the website builder at firmgenie.in/start and the monthly plans at firmgenie.in/pricing, with the dashboards, payments and emails behind them. It runs on its own systems and is served to you through firmgenie.in. Its full privacy policy is at firmgenie.in/legal/privacy; this section summarises it, and for Studio that policy applies where the two differ.

What Studio processes

• Audit data: your business name, city, area, category, website, Instagram handle and any competitors you name, plus public information about your business and nearby businesses from Google Maps (name, address, rating, review count, listing link) and checks run on your website. Your name, mobile number and email, so we can send the report. You tick a consent box before an audit runs.
• Website content: what you type into the builder (services, timings, prices), your logo and photos, and the website written from them.
• Billing and domains: order numbers, amounts, payment status and the details on your GST invoice; and the owner details a registry requires if you buy a domain through us. We never see your card number, UPI PIN or bank login.
• Email automations: on paid plans your website can send automatic emails to your customers (enquiry replies, booking and order confirmations, reminders and review requests). We keep a record of which emails were sent and of unsubscribe requests. For your customers' data, your business is the Data Fiduciary and FirmGenie only processes it on your behalf (as your Data Processor).
• Chatbot messages: if your website has the AI chatbot on, the questions visitors type and the answers. Phone numbers and email addresses typed into a chat are masked before the message is stored.
• Security records: a hashed version of your internet address, the date and time of consents you give, sign-in records and a log of changes made in your website's admin panel.

Why

To run your audit and show the report; to build, host and change your website; to take payments and issue GST invoices and credit notes; to send your report, receipts, renewal notices and service emails; and to prevent fraud and misuse. We do not sell personal data, we do not send marketing without your consent, and we do not use your data to train AI models.

Sub-processors

• Cloudflare: hosting, database, security and bot checks.
• Google: the Gemini API, the AI provider Studio uses to write website text and chatbot answers (on Google's paid terms, under which prompts are not used to improve Google's products); Google Maps Places and PageSpeed for audit data.
• Resend: sending emails.
• Payment partners: payments and refunds (RBI-authorised payment aggregators and checkout providers).
• GitHub, only when you order an Android app (app name, icon and website address), and the domain registrar and registry, only when you buy a domain through us.

Some of these store or process data outside India (for example in the United States), as the DPDP Act allows.

How long Studio keeps it

Account, audit and website data: while your account or website exists; ask us and we delete it within 30 days, except what the law makes us keep. Chatbot messages: 180 days. Admin-panel activity log: 365 days. Cached Google Maps data: refreshed after 30 days. Payment, invoice and GST records: 8 years, as tax law requires.

Cookies

Studio sets only cookies the service needs: a sign-in cookie for your website's admin panel (and, on your own website, customer accounts if you turn them on). No advertising cookies on your own website or its visitors: customer websites carry no Google or Meta tracking from us. The public FirmGenie pages that promote Studio (audit, pricing, templates, tools) do carry Google Analytics and the Meta pixel, as described in section 1.

Your rights in section 10 and the grievance contact in section 14 apply to Studio too. Requests about your data are answered within 30 days.