Privacy Policy

Who operates MSRX

MSRX is a brand name used by Mrinal Singh Raja, an individual. It is not a registered company, and nothing on this site should be read as implying a corporate entity behind it.

In this policy "we", "us", "our" and "MSRX" mean Mrinal Singh Raja. For the purposes of India's Digital Personal Data Protection Act 2023 he is the data fiduciary, and the data controller under the UK and EU GDPR.

Overview

MSRX apps are built so that privacy is the default rather than a setting. Only what a feature genuinely needs is collected, and nothing is ever sold.

What is collected

Most MSRX apps run entirely on your device and send no personal data to MSRX servers. The web apps require no account, so there is no profile attached to your use of them.

Where an app has a network feature — OrionPulseNet running a speed test, MSRX WeatherWatch fetching a forecast, MSRX Planner syncing your own work between your devices — only the data that feature requires is processed.

What is not kept

IncognitoCV scores a CV against a job posting inside your browser, and neither text leaves your device to do it. Asking it to rewrite the CV or draft a cover letter is different: the CV and the posting are then sent through MSRX's server to Groq to produce that text, and MSRX stores neither. MSRX Meeting carries audio and video peer-to-peer and records only to your own machine; no recording is uploaded to MSRX. MSRX QR Studio and MSRX CanvasIQ draw everything in your browser; their optional AI assistants send Groq only what you type to them, and in CanvasIQ's case a short summary of the canvas the question is about. Groq's handling of all of these is set out in the next paragraph.

Live captions and the AI transcript in MSRX Meeting are both off until you switch them on. Captions are recognised by your browser — on your device where it offers that, otherwise by your browser vendor's speech service — and short clips of your microphone are sent to Groq for transcription while the transcript is running. MSRX stores neither. Groq states that it does not retain data from inference requests by default and does not train on them, but may keep troubleshooting and abuse logs for up to 30 days, so this is described as it is rather than as "nothing is kept anywhere".

This website

www.msrx.co.in is a static site with no accounts, no forms and no database. Fonts are served from this origin rather than a third-party CDN, so visiting a page here does not disclose that visit to another company. Page views are counted anonymously, as described under Analytics.

This website keeps two things in your own browser's local storage and never sends either anywhere: whether you chose the light or dark theme, and a short list of the MSRX app pages you opened most recently, so a later visit can offer them first. Clearing this site's data in your browser removes both, and the Clear link beside that list removes the history on its own.

Analytics

MSRX's web apps, and this website, count page views with Vercel Web Analytics, which is part of the service that hosts them. It sets no cookies and stores nothing on your device. For each page view it records the page address with anything after a ? or # removed, the referring site, an approximate location (country, region and city) worked out from the request, and the browser, operating system and type of device.

It does not store IP addresses. Visitors are told apart only by a hash of the request that Vercel discards after 24 hours, so a view cannot be tied to a person or followed across sites. Vercel shows the figures for a month and may keep them longer, and MSRX copies the daily total for each app into a private dashboard. The basis is MSRX's legitimate interest in knowing whether an app is used, and a content blocker stops the count without changing anything else.

Two places are never counted: MSRX Community Library, and the meeting rooms in MSRX Meeting.

MSRX may use Apple's App Store Connect analytics for aggregate, anonymised usage metrics on the macOS and iPhone apps. No personally identifiable information is collected through it.

Third-party services

Some apps integrate with third-party services, and data handled by those services is governed by their own privacy policies. Where an app depends on one, its own page and in-app disclosures say so.

For MSRX Meeting specifically, the recipients are Groq for transcription and summaries, your own browser's speech service for live captions where it cannot recognise speech on the device, the PeerJS cloud and Google STUN to introduce two browsers to each other, and Vercel to serve the site. The signalling and STUN services see the network addresses of the people connecting and no call content. That app's own notice at meeting.msrx.co.in/privacy lists each one and what reaches it, and its terms at meeting.msrx.co.in/terms set out who is responsible for consent when a call is recorded.

These services operate outside India and the EEA, including in the United States, so using an optional AI feature involves an international transfer.

Your rights

If you are in the EU or UK, the GDPR gives you rights of access, correction, erasure, restriction, portability and objection. If you are in India, the Digital Personal Data Protection Act, 2023 gives you comparable rights, including the right to nominate someone to exercise them on your behalf.

In practice there is very little for those rights to reach, because the web apps have no accounts and keep nothing that identifies you. Ask and we will tell you honestly what exists, which in almost every case is nothing. Where an app has an optional AI feature, the lawful basis is your consent, given by switching it on and withdrawn by switching it off.

Children

MSRX StoryQuest is aimed at school students and, like every MSRX web app, requires no account, collects no personal details and asks for no contact information.

The apps are not otherwise directed at children. You should be at least 13 to use them on your own, and where the law where you live sets a higher age for consenting to online services — several EU member states set 16 — a parent or guardian's permission is needed below it.

Complaints and contact

Questions, complaints and privacy requests go to mrinalsinghraja@gmail.com, which also reaches the grievance contact for the purposes of India's Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. We aim to acknowledge within 24 hours and resolve within 15 days.

If you are in the EU or UK you may also complain to your national data protection authority; if you are in India, to the Data Protection Board.

Changes

If this policy changes materially, the date below changes with it. Past versions are visible in the site's public source history.

Contact

Questions about privacy, or a request about your data — mrinalsinghraja@gmail.com.