1. Introduction
Thareja Technologies Inc. ("Thareja," "we," "us," or "our") operates a family of products and services under the thareja.ai domain, including:
Thareja Work (app.thareja.ai) — Time tracking, project management, payroll, and global workforce management.
AI Assistant (chat.thareja.ai) — A unified AI chat platform with access to 50+ AI models.
Magic Agent (magicagent.thareja.ai) — An AI-powered chatbot builder for businesses.
Magic Reel (magicreel.thareja.ai) — An AI-powered real estate video creation tool.
This Privacy Policy describes how we collect, use, share, and protect information across all of our products and services. By using any Thareja product, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services.
This policy applies to all users of our products, including account holders, team members, managed workers (Thareja Work), end users who interact with chatbots built on Magic Agent, and visitors to our websites.
2. Information We Collect
We collect different types of information depending on which products you use and how you interact with them.
2a. Account and Profile Data (All Products)
When you create an account or use any Thareja product, we may collect:
Full name and display name
Email address
Phone number
Company or organization name
Profile photo
Password (stored in hashed form)
Billing and payment information (see Section 2g)
Tax documentation, including W-9 or W-8BEN forms (Thareja Work only)
2b. Thareja Work Data
Thareja Work enables employers and clients to manage distributed teams. Depending on settings configured by the employer or client, the following data may be collected from workers:
Screen recordings and screenshots captured at intervals during tracked work sessions
Mouse and keyboard activity levels — measured as activity percentages to gauge engagement. We do not perform keylogging and do not capture the content of keystrokes.
Applications and URLs accessed during tracked work sessions
GPS location data collected during sign-in and check-in events
Face ID verification data used for identity confirmation at check-in
Automated timesheets and work session logs, including start times, end times, breaks, and duration
Project and task assignments, notes, and deliverables
Payroll and payment data related to compensation, invoicing, and global payments
Workers are informed when monitoring features are active. Employers and clients control which monitoring features are enabled for their teams.
2c. AI Assistant Data
When you use the AI Assistant, we may collect:
Chat prompts, messages, and conversations you submit to AI models
Files you upload for analysis or processing, including CSV, XLSX, JSON, images, and other supported formats
AI model outputs, including generated text, images, and other responses
Persona configurations you create or customize
Model selection preferences and switching history
Audio files submitted for transcription
Web search queries initiated through the assistant
Team collaboration data, including shared conversations and workspace activity
Usage patterns, such as frequency of use, preferred models, and feature engagement
2d. Magic Agent Data
When you build and deploy chatbots with Magic Agent, we may collect:
Training documents, URLs, and knowledge base content you provide to train your chatbot
Chatbot configurations, including conversation flows, personality settings, and deployment preferences
End-user conversations — messages exchanged between your deployed chatbot and the people who interact with it
Lead capture data collected by your chatbot from end users, which may include names, email addresses, phone numbers, and other information submitted through chatbot interactions
Lead qualification data and scoring information generated by the chatbot
Integration data exchanged with connected third-party services, such as Stripe (payment data) and Zendesk (support ticket data)
Deployment channel information, including website embed data, SMS configurations, WhatsApp Business settings, social media connections, and phone system integrations
If you are an end user interacting with a chatbot built on Magic Agent, the chatbot operator (our customer) determines what data is collected through the chatbot. We process that data on behalf of the chatbot operator.
2e. Magic Reel Data
When you use Magic Reel to create real estate videos, we may collect:
Property photos you upload directly or import from third-party listing services such as Zillow and Realtor.com
Listing information, including property addresses, descriptions, pricing, and other details imported from listing platforms or entered manually
AI-enhanced images generated from your uploaded or imported photos
Generated videos, including rendered 1080p output files
Branding assets you upload, such as logos, text overlays, color schemes, and agent contact information
Editing history and project configurations
2f. Device and Technical Data (All Products)
We automatically collect certain technical information when you access any Thareja product:
IP address
Browser type and version
Operating system and device type
Referring and exit URLs
Timestamps and session duration
Pages and features accessed
Error logs and performance data
2g. Payment Data
We use PCI-compliant third-party payment processors to handle billing transactions. We do not store full credit card numbers, debit card numbers, or bank account numbers on our servers. We may retain partial payment identifiers (such as the last four digits of a card) and transaction records for billing, invoicing, and dispute resolution purposes.
3. How We Use Your Information
We use the information we collect for the following purposes:
Providing and operating our services — To deliver the features and functionality of each product, process your requests, and maintain your account.
Billing and payments — To process subscriptions, invoices, payroll, and other financial transactions.
Improving and developing our products — To analyze usage patterns, identify issues, and develop new features. This may include using anonymized or aggregated data from AI interactions to improve our service quality.
AI model improvement — We may use anonymized interaction data to improve how our products integrate with and present AI capabilities. You may opt out of this use by contacting us at legal@thareja.ai.
Customer support — To respond to your inquiries, troubleshoot issues, and provide technical assistance.
Communications — To send you service-related notices, updates, security alerts, and, where permitted, promotional communications. You may opt out of non-essential communications at any time.
Security and fraud prevention — To detect, investigate, and prevent fraudulent, unauthorized, or illegal activity.
Compliance — To meet our legal obligations, enforce our terms, and respond to lawful requests from authorities.
Analytics — To understand how our products are used and measure the effectiveness of our features and content.
4. AI and Third-Party Data Processing
Several of our products rely on third-party AI model providers to deliver core functionality. When you use the AI Assistant, Magic Agent, or other AI-powered features, your inputs — including prompts, uploaded files, and conversation content — may be transmitted to and processed by one or more of the following providers:
OpenAI (GPT models)
Anthropic (Claude models)
Google (Gemini models)
xAI (Grok models)
Meta (Llama models)
Stability AI (image generation models)
Perplexity (search-augmented models)
Other AI model providers as we expand our platform
These providers process your data in order to generate outputs, including text responses, images, transcriptions, and other results. Each provider is bound by a data processing agreement with Thareja that governs how your data may be used and protected.
For Magic Agent specifically, end-user messages submitted to deployed chatbots are processed by AI providers in order to generate chatbot responses. Chatbot operators should inform their end users that AI-powered processing occurs.
We recommend that you do not submit highly sensitive personal information — such as Social Security numbers, financial account credentials, or medical records — through AI-powered features unless necessary for the specific service being used.
Each third-party AI provider maintains its own data handling practices. We encourage you to review their respective privacy policies for additional detail.
5. Who We Share Data With
We may share your information with the following categories of recipients:
Employers and clients (Thareja Work) — Worker activity data, timesheets, and related information are shared with the employer or client who manages the worker's engagement. The employer or client controls what monitoring features are active.
AI model providers — As described in Section 4, data is shared with third-party AI providers to deliver AI-powered features.
Payment processors — Billing and transaction data is shared with PCI-compliant payment processors such as Stripe.
Cloud hosting and infrastructure providers — Data is stored and processed using secure cloud infrastructure services.
Analytics providers — We may share anonymized or aggregated data with analytics services to help us understand product usage.
Legal authorities — We may disclose information when required by law, regulation, legal process, or enforceable governmental request, or when necessary to protect the rights, property, or safety of Thareja, our users, or the public.
Business transfers — In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
We do not sell your personal information. We do not share your personal information with third parties for their own direct marketing purposes.
6. Data Retention
We retain your information for as long as reasonably necessary to provide our services and fulfill the purposes described in this policy.
Thareja Work data — Worker activity data, timesheets, and related records are retained in accordance with the terms of the applicable client contract. Clients may configure retention periods within the platform.
AI Assistant data — Chat conversations and related data are retained to provide you with conversation history and to improve our services. You may request deletion of your conversation history at any time.
Magic Agent data — Training data, chatbot configurations, and end-user conversation logs are retained for as long as the associated chatbot remains active. Upon chatbot deletion or account closure, this data will be deleted within a reasonable timeframe.
Magic Reel data — Property photos, generated videos, and project files are retained while your account is active. Upon account closure, this data will be deleted within a reasonable timeframe.
Account data — Basic account information is retained for as long as your account exists. After account deletion, we may retain certain records as required by law or for legitimate business purposes such as fraud prevention and dispute resolution.
7. Your Rights and Choices
Depending on your location and applicable law, you may have the following rights regarding your personal information:
Access — Request a copy of the personal information we hold about you.
Correction — Request that we correct inaccurate or incomplete information.
Deletion — Request that we delete your personal information, subject to certain legal exceptions.
Portability — Request a copy of your data in a structured, commonly used, machine-readable format.
Opt-out of communications — Unsubscribe from promotional emails using the link provided in each message, or contact us to adjust your preferences.
Manage tracking preferences (Thareja Work) — Workers should contact their employer or client regarding the specific monitoring features enabled for their account.
Manage AI data processing preferences — You may request that we stop using your data for AI service improvement purposes by contacting us at legal@thareja.ai.
To exercise any of these rights, please contact us at legal@thareja.ai. We will respond to your request within the timeframe required by applicable law.
7a. Rights for California Residents (CCPA/CPRA)
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:
The right to know what personal information we collect, use, disclose, and sell or share.
The right to delete personal information we have collected from you, subject to certain exceptions.
The right to correct inaccurate personal information.
The right to opt out of the sale or sharing of personal information. As stated above, we do not sell your personal information.
The right to non-discrimination for exercising your privacy rights.
To submit a request, contact us at legal@thareja.ai. We may need to verify your identity before processing your request.
7b. Rights for EU/EEA Residents (GDPR)
If you are located in the European Union or European Economic Area, you have the following additional rights under the General Data Protection Regulation:
The right to access your personal data.
The right to rectification of inaccurate data.
The right to erasure ("right to be forgotten").
The right to restrict processing.
The right to data portability.
The right to object to processing, including processing based on legitimate interests or for direct marketing.
The right to withdraw consent at any time, where processing is based on consent.
The right to lodge a complaint with a supervisory authority in your member state.
Our legal bases for processing your personal data include: performance of a contract, compliance with legal obligations, your consent, and our legitimate interests in operating and improving our services.
To exercise your rights, contact us at legal@thareja.ai.
8. SMS/Text Messaging
Certain Thareja products may offer SMS or text message notifications, including appointment reminders, booking confirmations, and service updates. By providing your phone number and opting in to text messages, you consent to receive such communications.
You may opt out of text messages at any time by replying STOP to any message you receive.
Message and data rates may apply depending on your carrier and plan.
We do not share your phone number with third parties for their marketing purposes.
Message frequency varies based on your account activity and preferences.
9. Cookies and Tracking Technologies
We use cookies and similar tracking technologies across our products to provide functionality, remember your preferences, analyze usage, and support our operations. For detailed information about the types of cookies we use and how to manage your preferences, please refer to our Cookie Policy.
10. Security
We implement industry-standard security measures to protect your information, including:
Encryption of data in transit (TLS/SSL) and at rest
Secure cloud infrastructure with access controls
Regular security audits and vulnerability assessments
Role-based access controls and authentication safeguards
Monitoring for unauthorized access and suspicious activity
While we take reasonable measures to protect your data, no method of transmission or storage is completely secure. We cannot guarantee absolute security.
11. Children's Privacy
Our products and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at legal@thareja.ai.
12. International Data Transfers
Thareja Technologies Inc. is based in the United States. Your information may be processed, stored, and transferred in the United States and other countries where we or our service providers operate. These countries may have data protection laws that differ from the laws of your jurisdiction.
If you are located outside the United States, by using our services you consent to the transfer of your information to the United States and other jurisdictions. Where required by applicable law, we implement appropriate safeguards for international data transfers, including standard contractual clauses or other approved mechanisms.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, products, or applicable law. When we make material changes, we will notify you by posting the updated policy on our website and updating the effective date. Where required by law, we will provide additional notice, such as an email notification.
We encourage you to review this policy periodically. Your continued use of our services after changes take effect constitutes your acceptance of the updated policy.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Thareja Technologies Inc. Email: legal@thareja.ai
This policy is part of the Thareja AI Agreement as defined in our Terms of Use.