Privacy Policy

Last updated: October 29, 2026

OPAI ("OPAI", "we", "us") is a personal workspace and AI assistant (called KARNA) that helps one person manage applications, outreach, projects, coursework and client work. It is available at opai.live and was founded by Tiru Venkatesh Musirana (Founder) and Himesh Arava (Co-founder). This policy explains what data we collect, why, how it is stored and shared, and the choices you have. If anything here is unclear, write to tiruvenkatesh123@gmail.com.

1. Information we collect

Data	Source	Why we use it
Google account basics: name, email address, profile picture	"Sign in with Google" (through Firebase Authentication). We do not receive your Google password.	To create and sign you in to your account, show your name and photo in the app, and identify your private workspace. The photo is displayed from your browser and is not stored in OPAI's database.
Email and password (if you sign up with email instead)	You, via Firebase Authentication	Authentication only. Passwords are handled by Firebase; OPAI does not see or store them.
Profile details you enter: name, college, course, branch, year, semester, goals, study preferences, time zone, optional date of birth, optional GitHub / LinkedIn / portfolio links	You, during onboarding or in the app	To personalise planning, study schedules and answers. Date of birth is optional, is never shown in chat, and is not sent to the AI service.
Content you add: applications, projects, tasks, notes, documents and resumes you upload, outreach drafts, saved memory items	You	To provide the features you use (trackers, planner, search over your own documents, drafting).
Chat messages with KARNA	You	To generate replies and, only after you confirm it, to remember facts about you. Chat data saved to your account is stored with your workspace and deleted when you delete your account.
Gmail send permission (optional, off by default)	You, only when you click "Connect Gmail" inside the app	To send an email you wrote and approved, from your own Gmail account. See section 3.
Device storage: preferences, theme, recent chat history, cached app files	Your browser	To keep the app fast and remember your settings. This stays on your device until you clear it.

We do not collect your contacts, your inbox contents, your Google Drive files, your location, or payment information. We do not use advertising trackers. To count page views we use Vercel Web Analytics, which sets no cookies and does not receive any Google user data.

2. How we use information

Provide, secure and improve OPAI's features for you.
Answer your questions and draft content with AI, using your own workspace data as context.
Remember facts about you only after you press Save. You can review, edit or delete every remembered item on the Memory screen.
Respond to support requests and keep the service safe from abuse.

We do not sell your data, we do not use it for advertising, and we do not use it to train AI models.

3. Google user data and the Gmail permission

Sign-in. When you choose Sign in with Google, we receive your name, email address and profile picture. We use them only to run your account as described above. Your Google email address and profile picture are never sent to our AI provider (see section 4).

Gmail (optional). If you click "Connect Gmail", Google asks you to grant the gmail.send permission. It allows OPAI to send an email on your behalf and nothing more:

It is used only when you approve a specific outreach email in your Outbox and choose to send it. OPAI never sends email on its own.
OPAI cannot read, search, list, modify or delete any email in your Gmail account.
The short-lived access token is used for that single send request. OPAI does not store it or write it to logs.
You can revoke access at any time at myaccount.google.com/permissions.

Limited Use disclosure. OPAI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the user-facing features described here, do not transfer it to others except as needed to provide those features or comply with law, do not use it for advertising, do not allow humans to read it except with your consent, for security purposes, or as required by law, and do not use it to develop, improve or train generalised AI or machine-learning models.

OPAI does not use Google APIs to generate any content, including AI-generated non-consensual intimate imagery (NCII), and does not permit such use.

4. How information is shared

We share data only with service providers that help us run OPAI, and only as needed:

Google (Firebase Authentication) to sign you in.
Groq, our AI inference provider. To write a reply or a draft, OPAI sends Groq only what that request needs:
- your message and the recent messages of that conversation;
- excerpts of the documents, notes and resume text you added that match your question, and the text of a file you ask OPAI to read (for example a timetable PDF);
- a short profile summary: your name, course and branch, college, year and semester, skills, goals and time zone, plus the items from your own workspace that the answer needs (for example today's planned tasks, upcoming exams or open applications);
- for an outreach draft: your name, branch, skills and profile highlight, and the notes saved about the contact (for example a professor's research areas).
We never send Groq your Google email address, your profile picture, your date of birth, your password or Gmail access tokens, and we never send the content of your Gmail (OPAI cannot read it). Text you add yourself, such as a resume that contains your email address, is sent as you wrote it when a request needs it.
Hosting and database providers (including Vercel and Firebase) that store and serve the application and your account data.

We may disclose information if required by law or to protect the rights and safety of users or the service. We do not sell or rent personal information.

5. Storage, security and retention

Your account data is stored in a database operated for OPAI and is kept separate per user; you can only access your own workspace. Data is transmitted over HTTPS. No system is perfectly secure, but we limit what we collect and who can access it.

We keep your data while your account is active. If an account stays inactive for 24 months, we may delete it after giving notice to the email address on the account. When you ask us to delete your account, we delete your profile, workspace content, uploaded documents, chat data saved to your account and memory items. Backups are overwritten within 30 days of deletion.

6. Your choices and rights

Access and correct: view and edit your profile and workspace in the app.
Memory: review, edit or delete what KARNA remembers from the Memory screen.
Delete your account and data: email tiruvenkatesh123@gmail.com from the address you signed up with. We will confirm and complete deletion within 30 days.
Revoke Google access: at myaccount.google.com/permissions.
Clear local data: clear this site's data in your browser settings.
Withdraw consent or raise a complaint: you can withdraw consent to processing at any time by writing to us, and you can contact our grievance contact in section 9 about any concern with how your data is handled.

7. International processing

OPAI is operated from India. Our service providers (Google, Groq, Vercel and others listed in section 4) may process and store data on servers outside India. By using OPAI you understand that your data may be transferred to and processed in those locations, and we require our providers to protect it with appropriate safeguards.

8. Children

OPAI is not directed to children under 13, or under any higher minimum age that applies to you under local law, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

9. Changes to this policy

We may update this policy as OPAI changes. The "Last updated" date above shows the latest version, and we will give notice in the app for material changes.

10. Contact and grievance officer

OPAI
Founder: Tiru Venkatesh Musirana
Co-founder: Himesh Arava
Grievance contact: Tiru Venkatesh Musirana, tiruvenkatesh123@gmail.com
Website: opai.live

We aim to acknowledge privacy requests and complaints within 7 days and resolve them within 30 days.