Privacy Policy

0. Scope of This Policy

This Privacy Policy governs the EXAFABS FABS & CHIP Tracker web SaaS platform accessed at fabs.exafabs.ai, operated by Alpit Tare, sole proprietor trading as EXAFABS.AI (India). EXAFABS also publishes consumer mobile applications (FastAI Health Coach, and the games CrickBot AI, GoalBot AI, BaseHit AI, Survival Arena AI, Infinite Voyager AI). Those mobile products are sold through the Apple App Store and Google Play and are governed by their own in-app and store-listing privacy policies (see https://exafabs.ai/privacy-policy). Data flowing through this web platform is kept logically separate from data flowing through the mobile apps.

1. Information We Collect

When you create an account on fabs.exafabs.ai, we collect your name, email address, and authentication data via our identity provider (Clerk). When you subscribe to a paid tier, payment information is processed by our payment partner Dodo Payments (the Merchant of Record for fabs.exafabs.ai web subscriptions); we receive subscription status and entitlement metadata but never see your card number or bank account details. We also collect product usage data including pages visited, dashboards opened, AI queries made, and reports generated, used to operate and improve the service.

2. How We Use Your Information

We use your information to: provide and maintain the EXAFABS platform, process subscriptions and billing (via Dodo Payments), improve our service and user experience, send service-related communications, detect and prevent abuse, and comply with legal and tax obligations. We do not sell your personal information to third parties and do not use your data to train AI models.

3. Data Storage & Security

Your data is stored on secure cloud infrastructure provided by Vercel (application hosting) and Convex (database, real-time sync, serverless functions). We implement industry-standard security measures including encryption in transit (TLS 1.2+) and at rest. Authentication is managed by Clerk with support for OAuth and multi-factor authentication.

4. Sub-Processors & Third-Party Services

We share data with the following sub-processors, each acting solely on our documented instructions and under their own privacy policies:

• Clerk — authentication, session management, account profiles
• Convex — database, real-time data sync, serverless backend functions
• Vercel — application hosting and edge delivery
• Dodo Payments — Merchant of Record for paid subscriptions, tax handling, and remittance (web only)
• Anthropic Claude — large language model inference for AI queries, insights, and reports. Query content may be sent to Anthropic in pseudonymized form. No data is used by Anthropic for model training under our agreement.
• Mapbox — map rendering for the global fab map. Mapbox receives only the geographic viewport you load, not your account identity.
• Sentry — error monitoring and performance diagnostics
• PostHog (EU region) — pseudonymous product analytics (page views, feature usage). We do not send query content or report content to PostHog.

We share only the minimum data necessary for each service to function.

5. Cookies & Analytics

We use essential cookies for authentication and session management (set by Clerk). We use first-party analytics cookies set by PostHog to understand product usage in aggregate. You can control cookie preferences through your browser settings; blocking essential cookies will prevent sign-in.

6. Your Rights

You have the right to: access your personal data, correct inaccurate data, request deletion of your data, export your data in a portable format, and withdraw consent for data processing. To exercise these rights, contact alpit@exafabs.ai. We respond within 30 days of receipt; in most cases within 1 business day.

7. Data Retention

We retain your account data for as long as your account is active. After account deletion, we remove personal data within 1 business day; backups containing your data are purged within 30 days. Pseudonymized analytics data is retained for up to 12 months. Tax-relevant transaction records are retained for the period required by Indian tax law (currently 8 years).

8. Children's Privacy

EXAFABS FABS & CHIP Tracker is intended for business and professional use and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children.

9. International Transfers

EXAFABS is operated from India. By using fabs.exafabs.ai, you consent to your data being transferred to and processed in India and in any country where our sub-processors operate (including the United States, the European Economic Area, and others). We rely on standard contractual clauses or equivalent mechanisms with our sub-processors.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the updated policy on this page, updating the "Last updated" date, and (for active subscribers) by email at least 14 days before the changes take effect.

11. Contact

For privacy-related questions or data requests, contact: alpit@exafabs.ai

Operator: Alpit Tare, sole proprietor trading as EXAFABS.AI, India.