TwinkLabs

Privacy

This page says what TwinkLabs, a product of Entrifie Technologies LLP, stores about you, why, where, for how long, who else sees it, and how to have it given to you or deleted.

Last updated 7 October 2026.

What we store

Your email address, the name you give, and the password check Google keeps for sign-in. We never see your password.

What you tell us about yourself if you fill in the profile: whether the account is personal or a business, a company name, industry, GSTIN and billing address, your country, state and district, your profession and how you buy.

Every brief you submit, your answers to our questions, any file you upload, the panel and report we write, your follow-up questions, the decisions you record, and your survey answers.

Your credit balance and its history, and a record of each payment: the amount, the credits, Razorpay's reference numbers and the time. Your card details are entered on Razorpay's page and never reach us.

A record of each email we sent you, holding your account id and whether it went, never the address.

Counters that limit how often a request can be made. Most hold no name and expire; those keyed to your account are deleted with it.

If we decline a submission, a shortened copy with email addresses and phone numbers removed, deleted after 30 days.

If you tick "keep a copy of my submissions" in your account, a copy of each later submission without your account or email stored with it, found again only by a one-way code made from your account so it can be deleted. It is off unless you turn it on, nothing reads it today, and turning it off deletes every copy.

Why

We use what you submit for one purpose: to write the panel and report you asked for, and to let you come back to them. We use your email to sign you in and to send you the mails this page describes.

We do not use your briefs, answers, uploads or reports to train any AI model, and nothing in TwinkLabs trains one. Every request to a model is sent with the settings that refuse providers which train on what they are sent and that route only to endpoints listed as keeping nothing.

We do not sell your data, show advertising, or use analytics or tracking cookies.

Where it is held

Everything we store about you is held in Google Cloud's asia-south1 region, in Mumbai, India, and we do not copy it to another region. To write a report, the brief and your answers are sent to the AI model providers named on the privacy page, which are outside India.

Request logs, which hold the IP address and the page asked for, are kept by Google Cloud Logging in its global location for 30 days. Google's own audit logs of changes to our project are kept for 400 days.

Who else receives it

These companies receive personal data only to do the job named beside them.

• Google Cloud and Firebase: hosts the site, stores your account and everything listed here, signs you in, and keeps request logs (stored data in Mumbai, India; request logs in Google's global logging location).
• OpenRouter: passes your brief, your answers and any uploaded file to the AI model that writes the panel and the report (outside India).
• Google, Mistral AI and Anthropic: the AI models OpenRouter sends a request to; Anthropic writes the deepest report (outside India).
• Razorpay: takes your payment on its own page; we never see your card (India).
• Resend: delivers the emails we send you (outside India).
• Cloudflare: runs the check that a person, not a script, is filling in the sign-up and waitlist forms (outside India).

How long

A brief and its report are kept until you delete that session or your account. A credit does not expire, so its record stays while the account exists.

When you delete something, it is gone from the live database at once, but it stays in the backups until they age out: up to 7 days in the minute-by-minute history and up to 14 days in the daily backups. After that no copy remains.

Deleting your account

On your account page, under "Your data", you can delete the account. It happens at once, inside the one request, and we send a confirmation to your address.

Everything listed under "What we store" is deleted, except these, which hold none of your words:

• the cost of each model call: a run id, a model name and token counts, none of your words
• kept for tax and accounting records, with your account id replaced
• a daily count of our own testing, with no identifier
• a daily count of refused requests, with no identifier

A copy of your data

On your account page you can ask for one file holding every brief, report, answer and credit record the account holds. It is offered as a download at once and mailed as a link that works for 24 hours while you are signed in. It is built when it is opened and is not stored.

Your rights, and how to use them

India's Digital Personal Data Protection Act, 2023 gives you the right to a summary of the data we hold and who it was shared with (section 11), to have it corrected or erased (section 12), to have a grievance dealt with (section 13), to nominate someone to act for you (section 14), and to withdraw consent as easily as you gave it (section 6(4)).

If you are in the European Union, the GDPR gives you the right of access (Article 15), erasure (Article 17), portability (Article 20), objection (Article 21), and to complain to your data protection authority (Article 77).

The export and deletion on your account page carry out access, portability and erasure yourself. For anything else, or a grievance, write to support@entrifie.com.

If something goes wrong

If personal data we hold about you is breached, the DPDP Act requires us to tell India's Data Protection Board and each person affected (section 8(6)), and where the GDPR applies, to tell the supervisory authority within 72 hours (Article 33). We would tell you by email at the address on your account. What we do, step by step, is on the security page under "What we do if something goes wrong".

Cookies and storage

We set one cookie, named __session. When you are signed in it holds your sign-in for up to 5 days; before you sign in it holds the run you started for up to 1 day. Scripts on the page cannot read it.

In your browser's storage the site keeps your sign-in for the account pages, and whether you folded the side panel. Razorpay's checkout keeps its own entries during a payment, and we clear them when you sign out.

All of this is needed for the site to work. There are no analytics, advertising or tracking cookies, so there is no consent banner.