Privacy policy
How woodle.cloud handles personal data, what we hold, where it sits, and how long we keep it.
- On this website
- No cookies at all, so no consent banner
- Under DPDP
- Accounts are 18 or over
- Your research data
- Never used to train models, on any plan
1. Who we are
Stringify AI Pvt Ltd operates woodle.cloud (“woodle”, “we”, “us”). For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) we act as a Data Fiduciary in respect of the personal data described in section 2, and as a Data Processor in respect of research content you place in the service (see section 4).
Contact: contact@stringifyai.com. Grievance Officer: Gopal Joshi, contact@stringifyai.com.
2. What we collect
| Category | Examples | Why |
|---|---|---|
| Account data | Name, email address, institution, role, password hash | To create and secure your account |
| Qualification data | Answers to the access questions — field, group size, institution type | To confirm eligibility for the academic edition and to understand who uses woodle |
| Content | Records, runs, claims, notes and files you create or connect | To provide the service. See section 4. |
| Derived data | Previews, extracted tables, structural metadata generated from your files | To make your material viewable and searchable. See section 5. |
| Usage data | Pages viewed, features used, timestamps, approximate location from IP | To operate, secure and improve the service |
| Technical data | IP address, browser and device type, error logs | Security, diagnostics and abuse prevention |
| Communications | Messages you send us through forms or email | To respond to you |
We do not collect special categories of personal data deliberately. Do not place personal health information, identifiable patient data or other sensitive personal data into woodle unless a separate written agreement is in place.
3. Lawful basis
We process personal data on the basis of: your consent, where given; the necessity of processing to perform our contract with you; and our legitimate interests in operating, securing and improving the service, where those interests are not overridden by your rights. Where the DPDP Act applies, we rely on consent or on legitimate uses as defined in that Act.
4. Your research content
You own your content. We claim no ownership of records, files, results or claims you place in woodle. We process content only to provide the service to you and on your instructions.
Where your content contains personal data relating to third parties, you are the Data Fiduciary and we are your Data Processor. Our obligations in that role are set out in our Data Processing Agreement.
We do not use your content to train machine learning models, and we do not sell, rent or share it for advertising.
5. Linked files and derived data
woodle can link to files that remain in your own storage — your computer, an institutional Microsoft 365 or Google Workspace account, a departmental share or similar. In those cases:
- We hold a reference to the file: its name, location, size, a content fingerprint and timestamps.
- We read the file to generate derived data — a preview, extracted tables, structural metadata.
- We do not hold a copy of the original unless you explicitly choose to keep one, or the file is small enough to be held whole in place of a preview.
Derived data is treated as your content. It carries the same confidentiality, residency and retention protections as the source file. We do not treat it as a lesser category.
When you connect a third-party storage account, we request the narrowest access that will do the job, and you may revoke that access at any time through that provider.
6. Where your data is stored and processed
Storage. Data is stored with our infrastructure providers in India. Where your institution needs that stated in a contract or a security review, we will confirm it in writing before you begin.
Derived data is stored in the same place as its source workspace. Storage location is not changed without your instruction.
Assistant processing. When you use the assistant, the content it needs in order to answer is sent to a model provider, processed, and a result is returned. We will tell you which provider, and the region it processes in, before you begin — just ask. It is contractually barred from retaining your content or using it to train models. Unless we have agreed in-region processing with you, the region where that processing happens may be outside the region where your data is stored. In-region processing is available on request — ask us before you begin if this matters to your institution.
7. Who else is involved
We use a small number of service providers to operate woodle — cloud infrastructure, email delivery, error monitoring and payment processing. Each is bound by contract to process data only on our instructions. A current list is maintained in Annexe B of our Data Processing Agreement and is available on request.
We may disclose data where required by law, and to protect our rights or the safety of others. Where we are permitted to tell you, we will.
8. How long we keep things
| What | Retention |
|---|---|
| Account and qualification data | While the account exists, and 12 months after closure |
| Your record — runs, claims, history, file references | While the account exists. Not deleted on subscription lapse. |
| Copies of files you asked us to keep | 90 days after a subscription ends, then the copy is released and only the reference remains |
| Derived data on a dormant account | 12 months after a subscription ends, then removed. Regenerated if you return. |
| Linked files in your own storage | Unaffected. They were never ours. |
| Usage and technical logs | 12 months |
| Records required for tax and accounting | As required by law |
On request we will delete your account and its contents. Some records may persist in backups for a limited period before being overwritten.
9. Your rights
Subject to applicable law, you may: access the personal data we hold about you; correct or complete it; request erasure; withdraw consent; nominate another person to exercise your rights in the event of death or incapacity; and complain to us or to a supervisory authority.
You can export everything at any time, on any plan including the free plan, at no charge, without contacting us.
To exercise a right, write to contact@stringifyai.com. We will respond within 30 days. If you are not satisfied, our Grievance Officer is named in section 1. Under the DPDP Act you may escalate to the Data Protection Board of India.
10. Security
We encrypt data in transit and at rest, restrict internal access to those who need it, log administrative actions, and review our arrangements periodically. No system is perfectly secure, and we do not claim otherwise. If a breach affects your personal data we will notify you and the relevant authority as required by law.
11. Children
woodle is intended for researchers at institutions and is not directed at children. We do not knowingly collect personal data from a child as defined under the DPDP Act. If you believe we have, contact us and we will delete it.
12. Cookies
This website sets no cookies at all, and makes no third-party request of any kind — no analytics, no trackers, no externally hosted fonts. That is why you were not asked to dismiss a banner to read this page.
The signed-in service uses cookies that are strictly necessary to sign you in and keep your session secure. It sets no advertising cookies, and we do not permit third-party advertising trackers anywhere.
13. Changes
We will post any change to this policy on this page and update the version and date above. For material changes affecting your rights we will give notice by email at least 30 days in advance.
14. Contact
Stringify AI Pvt Ltd
General: contact@stringifyai.com
Grievance Officer: Gopal Joshi, contact@stringifyai.com