1. Introduction
GuruDojo ("we", "us", or "our") operates the website gurudojo.ai (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using GuruDojo, you agree to the practices described in this policy.
GuruDojo is an AI-powered social knowledge platform that allows users to create AI avatars (called "Gurus"), interact with AI-powered chat services, and access expert knowledge through conversational AI.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, and password when you create an account.
- Profile Information: Profile picture, bio, and display name you set on your account.
- Guru Content: Documents, files (PDF, DOCX, TXT), and text you upload to create and train AI Gurus.
- Chat Data: Messages and conversations you have with Gurus on the platform.
- Payment Information: Payment transactions processed through Stripe, Inc. We do not store your full credit card number — Stripe handles payment processing securely.
2.2 Information Collected Automatically
- Device & Usage Data: IP address, browser type, operating system, device type, pages visited, time spent on pages, and interaction patterns.
- Cookies & Local Storage: Authentication session tokens (HTTP-only cookies), user preferences (language, theme), and analytics cookies.
2.3 Information from Third Parties
- Google OAuth: When you sign in with Google, we receive your name, email address, and Google profile picture. We do not access any other data from your Google account.
3. How We Use Your Information
We use your information to:
- Provide, operate, and maintain the GuruDojo Service
- Create, train, and personalize AI Guru avatars based on your uploaded content
- Process your chat interactions with AI Gurus
- Process payments and manage your token-based account balance
- Send service-related notifications (account verification, security alerts, updates)
- Respond to your inquiries and provide customer support
- Analyze usage patterns to improve the Service
- Detect, prevent, and address fraud, abuse, and security issues
- Comply with legal obligations
We do not sell your personal data to third parties.
4. Data Sharing & Disclosure
We may share your information only in the following circumstances:
- Service Providers: Stripe (payment processing), Google (authentication), OpenRouter (AI chat API). These providers process data on our behalf and are bound by their own privacy policies.
- Legal Requirements: When required by law, regulation, legal process, or governmental request.
- Safety: To protect the rights, property, or safety of GuruDojo, our users, or the public.
- Business Transfers: In connection with any merger, acquisition, or sale of assets.
5. Cookies & Tracking Technologies
We use the following cookies:
- Essential Cookies:
next-auth.session-token — Required for authentication and session management (HTTP-only, secure). - Preference Cookies: Language selection, theme preferences stored in local storage.
- Analytics: We may use privacy-friendly analytics to understand usage patterns. No third-party advertising cookies are used.
You can control cookies through your browser settings. Disabling essential cookies may affect your ability to use the Service.
6. Data Storage & Security
- Hosting: Your data is hosted on secure servers (Hostinger VPS) with TLS/SSL encryption in transit.
- Passwords: Passwords are hashed using bcrypt and are never stored in plain text.
- Database: Data is stored in a PostgreSQL database with access restricted to authorized services.
- Payments: All payment data is handled by Stripe, which is PCI DSS Level 1 certified.
While we implement reasonable security measures, no system is completely secure. We cannot guarantee the absolute security of your data.
7. Data Retention
We retain your account data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law. Chat logs and Guru content associated with your account will also be deleted upon account deletion.
8. Your Rights (GDPR / CCPA)
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data.
- Correction: Update or correct inaccurate information.
- Deletion: Request deletion of your account and personal data.
- Data Portability: Export your data in a machine-readable format.
- Opt-Out: Opt out of non-essential communications.
To exercise any of these rights, contact us at the email below.
9. Children's Privacy
GuruDojo is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 16, we will delete it promptly.
10. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Effective" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.
12. Contact Us
For privacy-related inquiries or to exercise your data rights, contact us at:
Last updated: April 20, 2026