TwinkLabs

Security

How your data is protected, said plainly.

Last updated 7 October 2026.

Where

Everything we store about you is held in Google Cloud's asia-south1 region, in Mumbai, India, and we do not copy it to another region. To write a report, the brief and your answers are sent to the AI model providers named on the privacy page, which are outside India.

How

The site is served only over HTTPS. Browsers cannot read our database; only our server can, and it checks who you are on every request.

Sign-in uses a cookie scripts cannot read, and signing out ends every session of the account.

Payments are taken on Razorpay's page. We never receive card details.

To report a security problem, write to support@entrifie.com.

Backups

The whole database is backed up daily by Google, and each backup is kept for 14 days, in the same asia-south1 region. On top of that the database can be read as it was at any minute in the last 7 days. These copies exist so the service can be recovered; we do not read them for anything else.

When you delete something, it is gone from the live database at once, but it stays in the backups until they age out: up to 7 days in the minute-by-minute history and up to 14 days in the daily backups. After that no copy remains.

What we do if something goes wrong

If we find, or are told, that data we hold may have been exposed, we first check what happened without changing anything, then stop the part of the service involved, change any key that may have leaked, and keep every record of what happened rather than deleting it.

We then tell each person affected by email, without delay, saying what happened, what it involved, what it could mean for them, what we have done, what they can do, and who to ask. We tell India's Data Protection Board without delay and send it a full report within 72 hours of becoming aware, as the DPDP Rules 2025 (rule 7) require, and where the GDPR applies we tell the supervisory authority within 72 hours where feasible (Article 33).

Every incident is written down, with what was done and when, whether or not it had to be reported.