Privacy Policy

Last updated: June 26, 2026

This Privacy Notice for BHARATH MOHAN (doing business as Radha AI Products) (“we,” “us,” or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use Antgrid and our related services (“Services”), including when you:

• Visit our website at https://antgrid.ai, use the app at https://app.antgrid.ai, or any website or application of ours that links to this Privacy Notice
• Install and run the Antgrid bridge, desktop app, or mobile app
• Engage with us in other related ways, including any sales, marketing, or support

Radha AI Products is the legal entity behind Antgrid. Questions or concerns? If you do not agree with our policies and practices, please do not use our Services. If you have questions, contact us at contact@radhaai.com.

Summary of Key Points

• End-to-end encrypted. Communication between your coding agents and your devices is end-to-end encrypted (X25519 key exchange + AES-256-GCM). Our relay server forwards encrypted data it cannot decrypt — it never sees your source code, terminal output, prompts, or files in readable form. The relay does authenticate and route by your device identity (see Section 3).
• What we process. Account details (name, email), device identifiers and public keys used for pairing, session information including IP address and browser/device type, and billing status. Payment card data is handled by our payment processors and app stores — not by us.
• Privacy-respecting analytics & crash reporting. Anonymous, cookieless usage analytics via our self-hosted Plausible and our own first-party backend, plus crash/error reports via our self-hosted error tracker. No third-party analytics, advertising, or tracking SDKs, and no third party ever receives your data — the only third-party SDK in the app (Sentry) is used purely as transport to our own self-hosted error tracking. No personal information is included; opt out anytime in app settings.
• AI providers. Antgrid does not send your code or prompts to AI providers. Your local coding agents (e.g., Claude Code, Codex) do that directly, under your own accounts and API keys.
• We do not sell your personal information, and we do not process sensitive personal information.
• Your rights. You may review, change, or delete your information. See Sections 10 and 11.

1. What Information Do We Collect?

Personal information you disclose to us

• Account information — name and email address (provided directly or via a third-party sign-in provider).
• Billing status — your plan, subscription state, trial status, and transaction identifiers returned by our payment processors or app stores. We do not collect or store full payment card numbers; these are handled entirely by our payment processors and the app stores.

Information collected automatically

When you use the Services, we collect limited technical information necessary to operate and secure them:

• Device and pairing data — a device identifier (device UUID), device public keys (a persistent Ed25519 identity key and a per-connection X25519 session key) used to establish encrypted sessions, the device/machine name (derived from your system hostname or set by you), and your subscription tier. While a device is connected, our relay holds these in memory to authenticate and route your traffic.
• Session and connection data — your IP address and browser/device user-agent. We use these to operate the Services, authenticate sessions, prevent abuse, and enforce rate limits. How long this is retained, and where it is stored, is described in Sections 5 and 7.
• Sign-in security data — when you use cross-device (email link) sign-in, we briefly record the requesting IP address and user-agent and include them in the approval email so you can confirm the request is yours.
• Anonymous usage analytics — when telemetry is enabled (opt-out; toggled in app settings), we collect anonymous usage events: an install-scoped random UUID (generated on first run and stored in secure device storage — this is not your account id, device UUID, or any persistent personal identifier), the event name, your platform, and app version. The install id is sent only to our own first-party backend (for retention analysis); our self-hosted Plausible instance receives only the event name, platform, and app version — no install id or identifier of any kind. No personal information, no content, and no relay traffic is included. The install id is never shared with any third party, and it persists locally in secure storage; when telemetry is off it is simply not transmitted.
• Crash and error diagnostics — when telemetry is enabled, the app reports crashes and errors to our self-hosted error tracker using the Sentry SDK as transport only (no data is sent to Sentry’s own servers or any third party). Before transmission, file paths are truncated and any potential user content is stripped. These reports contain stack traces, app version, platform, and device type — not your source code, files, or personal information.

Information we do not access

Because of our end-to-end encryption, we do not have access to, and do not store in readable form: your source code, files, repository contents, terminal output, command history, prompts to or responses from AI agents, or the content of any message, approval, or preview tunneled through the relay. The relay processes only opaque ciphertext.

2. How Do We Process Your Information?

• Provide and operate the Services — create and authenticate your account, pair your devices, route encrypted traffic, and deliver the features you use.
• Determine correct pricing — we use your IP address to detect your country so we can show the correct price and apply taxes (see Section 6).
• Process payments and manage subscriptions — via our payment processors and app stores (Section 6).
• Maintain security — prevent fraud and abuse, enforce rate limits, and protect the integrity of the relay and your account.
• Communicate with you — send service, security, billing, and support messages.
• Comply with law — meet legal, tax, and accounting obligations.

3. End-to-End Encryption and the Relay

All agent-to-app traffic is end-to-end encrypted after a handshake using X25519 key exchange and AES-256-GCM authenticated encryption. Encryption keys are generated on your devices, are per-connection, and are never persisted by us. As a result, we cannot read the contents of the data you transmit through the Services.

For full transparency about what the relay can see: the relay authenticates devices using their public keys and routes messages by device identity, so it processes device identifiers and the public keys exchanged during the handshake. When a recipient device is temporarily offline, the relay briefly buffers a small number of still-encrypted messages in memory so they can be delivered on reconnect; these buffers are never written to disk and remain encrypted. The relay does not store your IP address in a database or link it to your account; IP addresses on the relay are held only in memory for the duration of a connection (for rate limiting) and may appear in short-lived operational logs.

4. Analytics, Crash Reporting, and Tracking

We do not use any third-party analytics, advertising, or behavioral-tracking technologies, and no third party ever receives your analytics or crash data. We do not use tracking cookies. Our website and app use only the functional cookies and storage necessary to keep you signed in and to operate the Services.

The Antgrid app does collect anonymous, first-party usage analytics and crash/error reports when telemetry is enabled:

• Usage analytics are cookieless and anonymous. We use our self-hosted Plausible instance and our own first-party backend to record which features are used, on what platform, and with which app version. Plausible receives only the event name, platform, and app version — no install id or identifier of any kind. A random install-scoped UUID (not your account or device id) is sent only to our own first-party backend for retention analysis. You can opt out at any time in the app’s settings (Settings → Privacy → Usage Analytics).
• Crash and error reports are sent via the Sentry SDK configured to point exclusively at our own self-hosted error tracker — no data is forwarded to Sentry’s cloud or any other third party. Reports contain stack traces, platform, app version, and device type. User content and file paths are stripped before transmission.

Telemetry is on by default but entirely optional. If you opt out, analytics events stop immediately. Crash reporting is disabled at the next app launch (it is initialized at startup, so a restart is needed for that change to take effect). Your choice is stored locally on your device.

5. Where Your Information Is Stored

• Account and session data (name, email, and your session’s IP address and user-agent) is stored in our application database, associated with your account, for security and account management.
• Cross-device sign-in records (including the requesting IP and user-agent) are stored only briefly and expire automatically (within approximately 10 minutes).
• Relay traffic is processed in transit only and is end-to-end encrypted; the relay does not maintain a database of your activity.

6. Artificial Intelligence and Third-Party Coding Agents

Antgrid is a command centre for AI coding agents (such as Claude Code, Codex, and similar tools) that you install and run on your own machine. Antgrid does not itself send your code, prompts, or data to AI providers. Those agents connect to their respective AI providers (e.g., Anthropic, OpenAI, Google) directly, using your own accounts, credentials, and API keys, and are governed by those providers’ terms and privacy policies. You are responsible for your use of those agents and for complying with the applicable AI provider terms.

7. With Whom Do We Share Your Information? (Subprocessors)

We share information only with service providers that help us operate the Services, and only as needed. Our key subprocessors are:

Each provider operates under its own privacy policy. We may also disclose information for legal reasons (to comply with applicable law or enforceable governmental request, and to protect our rights, safety, and property) and in a business transfer (merger, financing, acquisition, or sale of assets). We do not sell your personal information.

8. How Long Do We Keep Your Information?

We keep personal information only for as long as necessary for the purposes set out in this Notice, unless a longer period is required or permitted by law (such as tax or accounting requirements):

• Account information — for as long as your account is active, and then as required for legal/financial obligations.
• Session IP address and user-agent — for the lifetime of the session; expired and deleted sessions are removed.
• Cross-device sign-in records — automatically expire within approximately 10 minutes.
• Operational logs (which may contain IP addresses) — retained for up to 30 days, then deleted.

When we no longer have a legitimate need to process your information, we delete or anonymize it, or securely isolate it where deletion is not immediately possible (for example, in backups).

9. How Do We Keep Your Information Safe?

We implement appropriate technical and organizational measures to protect personal information, including end-to-end encryption of agent traffic and authenticated device pairing. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. What Are Your Privacy Rights?

Depending on your location, you may have the right to access, correct, update, or delete your personal information, to withdraw consent, and to opt out of marketing communications. To exercise these rights, contact us at contact@radhaai.com.

Account and data deletion

You can request deletion of your account and associated personal data at any time by emailing contact@radhaai.com with the subject “Account Deletion Request” from your registered email address. Upon verification, we will delete or anonymize your account data, except where retention is required by law (for example, tax and transaction records). We will action verified deletion requests within 30 days.

If you purchased through the Apple App Store or Google Play, manage or cancel any active subscription through your store account before requesting deletion, as those subscriptions are managed by the store (see our Cancellation & Refund Policy).

11. India (DPDP Act, 2023) — Grievance Redressal

If you are in India, you have rights under the Digital Personal Data Protection Act, 2023, including the right to access, correct, and erase your personal data and to grievance redressal. To exercise these rights or raise a grievance, contact our Grievance Officer:

Grievance Officer: Bharath Mohan (Proprietor, Radha AI Products) Email: contact@radhaai.com

We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days.

12. Do We Collect Information From Minors?

We do not knowingly collect data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18, or the parent or guardian of a minor who uses the Services with your consent. If you believe we have collected information from a child under 18, contact us at contact@radhaai.com and we will take reasonable steps to delete it.

13. Controls for Do-Not-Track Features

No uniform standard for recognizing Do-Not-Track (“DNT”) signals has been finalized, so we do not currently respond to them. Because we do not use behavioral tracking, this has no effect on how we handle your information.

14. Jurisdiction-Specific Rights

If you are located in a jurisdiction with specific data-protection requirements (for example, the European Union or the United Kingdom), you may have additional rights, including the rights of access, erasure, and data portability. To the extent those laws apply, we honor the higher standard. This Privacy Notice is governed by the laws of India, and disputes are subject to the exclusive jurisdiction of the courts of India.

15. Do We Make Updates to This Notice?

Yes. We may update this Privacy Notice from time to time. The updated version will be indicated by a revised “Last updated” date. If we make material changes, we will notify you by posting a prominent notice or by direct communication where required.

16. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, email us at contact@radhaai.com or write to us at:

Radha AI Products 14A Chokka Nadar Shandu, Thiruthangal Tamil Nadu - 626130, India GSTIN: 33BCQPB1528R1ZA contact@radhaai.com