1. Who We Are

Project Never Give Up (projectnevergiveup.com) is an independent website dedicated to resilience, comeback stories, and emotional support. It is operated by an individual based in India and is not a registered company or legal entity.

If you have any questions about this policy, you can reach us at: projectnevergiveup.com/contact

2. What Information We Collect

Information You Give Us

• Name and email address — when you sign up for our free guide or newsletter via our website forms
• Account information — name, email address, and password when you create a Risha account
• Conversation content — messages you send to Risha, our AI companion, which are stored so you can access your conversation history
• Payment information — when our shop launches, payment details will be processed securely by a third-party payment provider. We will never store your card details directly.

Information Collected Automatically

• Usage data — pages visited, time spent on site, referring URLs, browser type, and device type, collected via analytics tools
• IP address — used for security purposes and approximate geographic location (country level only)
• Cookies — small files stored in your browser to remember your preferences and keep you signed in. See Section 7 for details.

3. How We Use Your Information

• To deliver the free guide or newsletter you signed up for
• To operate your Risha account and store your conversation history
• To improve the website and understand how people use it
• To send you occasional emails about new stories, resources, or features (you can unsubscribe at any time)
• To process orders when our shop launches
• To detect and prevent abuse or fraudulent activity

4. Legal Basis for Processing

For visitors from the European Union or UK, we process your data under the following legal bases:

• Consent — for email marketing and newsletters. You can withdraw consent at any time.
• Contract — to provide services you have signed up for, including your Risha account
• Legitimate interests — for website analytics and security, where these do not override your rights

For visitors from India, we process your data in accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act).

5. How We Share Your Information

We do not sell your personal data. We share data only with the following service providers, strictly to operate this website:

• Brevo — email marketing and list management (EU-based, GDPR compliant)
• Hostinger — website hosting and data storage
• Anthropic — AI technology powering Risha. Messages sent to Risha are processed by Anthropic’s API. Please refer to Anthropic’s Privacy Policy for details on how they handle API data.
• Printful — order fulfilment when our shop launches. Order and shipping details will be shared as necessary to fulfil your purchase.
• Payment processors — when our shop launches, payment will be handled by a third-party provider (details will be updated here at that time)

We may also disclose your information if required by law or to protect the rights and safety of this website and its users.

6. Data Retention

• Email subscribers — your data is retained until you unsubscribe or request deletion
• Risha accounts and conversations — retained while your account is active. You may request deletion at any time by contacting us.
• Analytics data — retained in aggregated, anonymised form
• Order data — retained for the period required by applicable law (typically 7 years for financial records under Indian law)

7. Cookies

We use the following types of cookies:

• Essential cookies — required for the website to function, including keeping you signed in to your Risha account
• Analytics cookies — to understand how visitors use the site (e.g. Google Analytics, if enabled)
• Preference cookies — to remember your settings and dismissals (e.g. popup dismissed)

You can control cookies through your browser settings. Disabling cookies may affect some website functionality.

8. Your Rights

Depending on where you are located, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — ask us to correct inaccurate data
• Deletion — ask us to delete your data (“right to be forgotten”)
• Portability — request your data in a portable format
• Objection — object to certain types of processing
• Withdraw consent — unsubscribe from emails at any time using the link in any email we send

To exercise any of these rights, please contact us via our contact page. We will respond within 30 days.

9. Data Security

We take reasonable technical and organisational measures to protect your data, including secure HTTPS connections, encrypted password storage, and access controls on our hosting environment. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children’s Privacy

This website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. International Transfers

This website is operated from India. If you are accessing it from the EU, UK, or elsewhere, your data may be transferred to and processed in India or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of the website after changes constitutes acceptance of the updated policy.

13. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out via our contact page.