Privacy Policy

The Service is operated by:

Large Box Consulting Pvt Ltd
Registered office: 395/15, Vinayaka Layout, Immadihalli Main Road, Whitefield, Bangalore 560066, Karnataka, India
Alternate address: #198, CMH Road, 2nd Floor, Suite No. 3595, Indiranagar, Bangalore, Karnataka 560038, India
CIN: U74999KA2022PTC162194
GSTIN: 29AAFCL0551K1ZD

For the purposes of applicable data-protection law, including India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), Large Box is the data fiduciary / controller responsible for your personal data processed through the Service.

This Policy applies to personal data we process about creators, visitors, and other users of the Service. It does not apply to third-party websites, products, or services that we link to or that you access through the Service.

We collect the following categories of information:

• Account and authentication data. We use passwordless (magic-link) sign-in. When you sign up or sign in, we collect your email address and authentication metadata. We do not ask you to create or share a password.
• Profile data. Information you choose to add to your public profile, such as your handle, display name, bio, avatar, website, and location.
• Content you publish. Demos and the materials you upload or link (for example pitch decks, documents, images, links, and descriptions), along with any updates, answers, and settings you configure.
• Interaction data. Questions asked, follows, saves, access requests, and feedback you submit through the Service.
• Usage and device data. Log data, approximate location derived from IP, device/browser information, and lightweight analytics events (such as page views and feature interactions) used to operate and improve the Service.
• Cookies and similar technologies. Session identifiers and similar technologies used for authentication, security, and basic analytics.

We never ask you for passwords or credentials to third-party products. The “Try” experience is either a link the creator controls or an access request the creator fulfils manually; we do not collect or store third-party product logins.

• To provide, operate, maintain, and secure the Service;
• To create and manage your account and public profile;
• To host, display, and distribute the Demos and materials you publish;
• To generate AI-assisted features such as structured summaries, grounded answers to questions (“Ask this Demo”), and deck reviews (“Deck Check”);
• To enable discovery features such as search, topics, follows, and saves;
• To communicate with you about the Service, including transactional and administrative messages;
• To measure engagement and improve product experience;
• To detect, prevent, and address fraud, abuse, security, and technical issues;
• To comply with legal obligations and enforce our Terms of Service.

To power features such as summaries, “Ask this Demo”, and “Deck Check”, the materials you upload may be parsed, converted, chunked, embedded, and analysed using AI models operated by us and by trusted third-party AI providers (currently including Anthropic and OpenAI).

• AI-generated outputs are derived from the material you provide and may contain errors or omissions; they are provided for convenience and are not a substitute for professional advice.
• Payment for Featured or Sponsored placement does not influence AI-generated answers or reviews.
• We do not use your private, unpublished materials to publicly train foundation models; content is processed to deliver the features you request.

Where applicable law requires a legal basis, we rely on one or more of: your consent; performance of a contract with you; our legitimate interests in operating and improving the Service; and compliance with legal obligations. Under the DPDP Act, we process personal data on the basis of your consent or for legitimate uses permitted by law. You may withdraw consent at any time (see “Your rights”).

Demos and profiles you publish with public visibility are, by design, publicly accessible and may be indexed by search engines and viewed by anyone. Please do not include information in public Demos that you do not wish to make public. You can control visibility (public, unlisted, or private) for your Demos.

We do not sell your personal data. We share information only as described below:

• Service providers (data processors). We use trusted vendors to host and run the Service, including Supabase (database, authentication), Cloudflare R2 (file storage), Google Cloud (processing), and AI providers (Anthropic, OpenAI). These providers process data on our behalf under appropriate contractual safeguards.
• Other users and the public. Content you publish publicly is visible to others as described above.
• Legal and safety. We may disclose information where required by law, legal process, or to protect the rights, property, or safety of Large Box, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

We retain personal data for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete a Demo or your account, we delete or de-identify the associated personal data within a reasonable period, except where retention is required by law.

We implement reasonable technical and organisational measures — including access controls, encryption in transit, and row-level security — designed to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We are based in India and our service providers may process data in India and other countries. Where personal data is transferred across borders, we take steps to ensure it is protected in accordance with applicable law.

Subject to applicable law (including the DPDP Act and, where relevant, other data-protection laws), you may have the right to:

• Access the personal data we hold about you;
• Request correction or updating of inaccurate or incomplete data;
• Request erasure of your personal data;
• Withdraw consent where processing is based on consent;
• Grievance redressal in respect of our processing of your data;
• Nominate another individual to exercise your rights in the event of death or incapacity, as provided under the DPDP Act.

To exercise these rights, contact us using the details in the “Grievance Officer and contact” section below. We may need to verify your identity before acting on a request.

The Service is not directed to children below the age of 18. We do not knowingly collect personal data from children without verifiable parental or guardian consent as required by law. If you believe a child has provided us personal data, please contact us so we can take appropriate action.

We use cookies and similar technologies that are necessary for authentication and security, and to understand usage of the Service. You can control cookies through your browser settings, though disabling some cookies may affect functionality.

The Service may contain links to third-party websites and products. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

If you have questions, concerns, or complaints about this Policy or our handling of your personal data, you may contact our Grievance Officer:

Hemanth Chaganti, Founder — Grievance Officer
Large Box Consulting Pvt Ltd
395/15, Vinayaka Layout, Immadihalli Main Road, Whitefield, Bangalore 560066, Karnataka, India
Email: hemanth@visionlabs.in

We will acknowledge and endeavour to resolve grievances within the timelines prescribed under applicable law.