Privacy notice

Last updated 1 November 2026. Written for India’s Digital Personal Data Protection Act 2023, and for the GDPR where it applies.

Who is responsible

Nethram (nethram.ai) is run by its founder, Shoaib Mustaque, in India, who is the data fiduciary. Grievances, questions, objections, corrections and erasure requests: privacy@nethram.ai. We answer within 30 days.

If a member invited you and you are not a member

The member typed your address, a one-line reason about you, and optionally a first message and up to five other addresses they suggest you invite. We keep your address in plain text only while the invitation is open (14 days) and use it to send one email; we send at most one Nethram email to an address every 90 days and never a reminder. If you ask for a confirmation code, we email that too. When the invitation closes (expires, is declined, withdrawn, or you join through someone else) the address, the reason, the message and the suggestions are erased. What remains is a one-way hash of your address, used only to honour “never email me”, a decline (180 days), and the rule that a person can be added once. Nothing about you is created on Nethram unless you accept. You can stop all invitations with the link at the foot of any invitation email.

If you asked for an invitation

We keep the name, email, WhatsApp number and line you gave for 60 days, only to invite you, then delete them. Members who already have your email in their contacts may see that you asked.

If someone sent you a Nethram link on WhatsApp

The member who made the link may have typed a note for themselves, such as your name or phone number. It is kept only until the link is used or closes (at most 30 days), shown only to them, and never used to contact you. If you join, the account is the email address you confirm, not your phone number.

If you are a member

We store: your email address and a hash of it; the profile you give (name, headline, company, city, tags); who added you and whom you add; the invitations you send (with the addresses, reasons and suggestions you type, under the rules above); the Asks, replies and messages you send and receive; your reach, inbox and visibility settings; mutes and cuts; a credit ledger; how many addresses you checked each day; sign-in codes (deleted after a day) and session tokens (stored only as hashes); the time you last used Nethram; and a record of emails sent to you (only the recipient, kind, subject and status once email is live; deleted after 30 days). Purpose: running the network you joined. Legal basis: your consent when you accept, which you can withdraw by leaving.

Who sees what

The people on your line below (the person who added you, their adder, and so on down) can see your card and the names of the people you add. The people above you can see your card. The other people your adder chose (your siblings) can see your card unless your adder kept you private. Nobody can read your threads except the other person in them. There is no public profile, no directory, and no search outside a member’s own tree. A member who cut someone is invisible to that person and everyone below them.

Checking who is already here

When a member pastes addresses to see who is on Nethram, the addresses are hashed and compared in that request and are not stored. The result says only “on Nethram” for members who allow it (Settings), never who added them. Typing a member’s address into an invitation tells the inviter the same, under the same allowance of 50 checks a day.

Leaving and your rights

Leaving (Settings) erases your profile, address and its hash, sign-in codes, sessions and our record of emails to you, and closes your threads. A nameless placeholder keeps your place in the tree so others’ trees stay intact. Messages you already sent stay in the other person’s thread, shown as from a former member. You may ask for a copy or correction of your data at privacy@nethram.ai. If you are in the EU, the section above about invitations is the notice required by Article 14 GDPR.

Processors

Email is delivered by Resend. The service runs on a server rented from Hostinger. Neither may use your data for their own purposes.