Privacy Policy

In this policy, "we," "our," and "us" refer to CORE.AI Scientific Technologies Private Limited. This Privacy Policy explains how we handle data when you use मौसम.live.

Plain-English summary. मौसम.live is a free, read-only weather portal. You don't create an account. We don't use cookies, ads, or third-party analytics trackers. If you grant browser geolocation, your coordinates stay in your browser — they are never sent to our servers. Standard web-server access logs (IP, URL, timestamp) are retained for 30 days for security and abuse prevention, then deleted.

1. About the Company

We are registered under the Companies Act, 2013 as CORE.AI SCIENTIFIC TECHNOLOGIES PRIVATE LIMITED (CIN: U72501KL2020PTC063362). Registered office: No. 6/858-M, 2nd Floor, Suite No. 695 Valamkottil Towers, Judgemukku Kakkanad, Ernakulam, Kerala – 682021, India.

Our Data Protection Officer can be reached at privacy@core.ai.

2. Scope

This Privacy Policy applies to:

• मौसम.live (the punycode form is xn--r2ba3a9e.live), including all its language variants at /en/, /ta/, /te/, /mr/, /gu/, and /bn/.
• The public /v1/* API endpoints we serve, which proxy weather data from the India Meteorological Department (IMD).

It does not apply to IMD's own website or any third-party site you may navigate to from here.

3. Data We Collect

3.1 No accounts, no PII collection

मौसम.live does not have user accounts, sign-in, or any registration mechanism. We do not collect names, email addresses, phone numbers, or any direct personal identifiers from visitors.

3.2 Server access logs

When you visit मौसम.live, our edge server (nginx on a single Mumbai-region VM) logs:

• IP address (visible to our server only — not forwarded to IMD or any other upstream)
• Request URL, HTTP method, response code, response size
• User-Agent string sent by your browser
• Referrer URL (if your browser sent one)
• Timestamp

These logs are standard web-server "combined" format. We use them to operate the site, debug issues, and detect abuse (rate-limiting bots, blocking attacks). Logs are retained for 30 days and then deleted.

3.3 Browser geolocation (optional)

If you grant your browser permission to share your location with मौसम.live, we use the latitude and longitude only inside your browser to find the nearest Indian district (using a static lookup table that ships with the site). The coordinates are never transmitted to our servers, never logged, and never stored anywhere except your browser's local storage.

You can decline the permission prompt or revoke it later in your browser settings. If you decline, the site falls back to showing default content.

3.4 Browser local storage

We store small JSON values in your browser's localStorage to remember preferences across visits. None of this leaves your device.

• mausam-near-me — the nearest-district resolution from a previous geolocation grant (district slug + name + 30-day TTL).
• mausam-near-me-denied — a 7-day cooldown timestamp so we don't re-prompt after you decline.
• mausam-pinned-cities — the list of cities you've pinned, if any.
• mausam-theme — your chosen light/dark theme override.

You can clear this data at any time via your browser's "Clear site data" or "Clear cookies and site data" controls.

3.5 Cookies (Google Analytics)

मौसम.live uses Google Analytics 4 (GA4) to understand aggregate site usage. GA4 sets two HTTP cookies:

• _ga — a random client-identifier number; expires after 2 years.
• _ga_<container> — session state; expires after 2 years.

These cookies do not contain your name, email, IP address, or any other personally identifiable information. They contain only a random number that GA4 uses to count returning visitors and group page-views into sessions. The localStorage values listed in section 3.4 are not cookies — they stay entirely in your browser and are never sent in HTTP request headers.

3.6 Third-party analytics

We use Google Analytics 4 (GA4). When you visit a page, GA4 receives:

• Page URL, referrer URL, page title
• User-Agent string, screen size, browser language
• Approximate country/city (derived from your IP server-side, then discarded — full IP is never stored by GA4)
• Time on page, scroll depth, click events on outbound links and downloads

GA4 does not receive: your name, email, phone number, exact location, or any data from the geolocation permission you may have granted (those coordinates stay in your browser per section 3.3 and are never transmitted to our servers either).

We do not embed Facebook Pixel, Hotjar, advertising SDKs, or any other tracker. Google Analytics is the only third-party origin that scripts on this site.

Opt out: to disable GA4 across every site you visit, install Google's official browser add-on at tools.google.com/dlpage/gaoptout. Browser-level "Block third-party cookies" or strict-tracking-protection settings (Brave, Firefox Strict, Safari ITP) also stop GA4 from setting cookies on this site.

4. How We Use This Data

• Operate the site: serve pages, deliver weather content, handle errors.
• Security and abuse prevention: detect bot scraping, rate-limit abusive clients, investigate incidents.
• Aggregate measurement: count anonymous request volumes by region/page to understand usage patterns and capacity needs. Aggregates do not identify individuals.
• Legal compliance: respond to lawful requests where required.

We do not sell, rent, or trade any data. We do not use your data for advertising or marketing.

5. Data Retention

• Server access logs: 30 days, then deleted.
• Aggregated request statistics: retained indefinitely; cannot identify individuals.
• Browser localStorage: controlled entirely by you; mausam-near-me auto-expires after 30 days.

6. Sharing and Subprocessors

We share limited operational data with these subprocessors only to the extent necessary to run the site:

We do not transfer personal information for advertising, profiling, or sale to any third party.

7. Your Rights (DPDP Act 2023, GDPR-equivalent)

Under India's Digital Personal Data Protection Act, 2023 and equivalent laws, you have the right to:

• Request access to any personal data we hold about you.
• Request correction or deletion.
• Withdraw consent (for the geolocation permission, by revoking it in your browser).
• File a grievance with the Data Protection Board of India if you believe your rights have been violated.

Because we don't have user accounts, the only data tied to a request you make is its presence in our 30-day access log. To request log deletion before the 30-day expiry, contact privacy@core.ai with the approximate timestamp and IP. We will respond within 30 days.

8. Security

We use TLS 1.2/1.3 for all traffic, HSTS, modern security headers (Content-Security-Policy, Referrer-Policy, Permissions-Policy), and isolated VM hosting. We follow industry-standard practices for log access controls and patch management.

No system is perfectly secure. If you believe you've found a vulnerability, please contact security@core.ai.

9. Children

मौसम.live is a public weather portal with no accounts and no targeted features. We do not knowingly collect personal information from anyone, including children under 18. If a parent or guardian believes a child's IP has been logged and wishes the log entry removed before the 30-day auto-expiry, contact privacy@core.ai.

10. Changes

We may update this Privacy Policy as the site evolves. Material changes (for example, adding analytics, accounts, or new subprocessors) will be flagged at the top of the page with a new effective date. Your continued use of the site after a change constitutes acceptance.