Privacy Policy

1. Introduction

BhaktiMedia ("we", "us") respects your privacy. This policy explains what data we collect, why we collect it, and how we protect it — in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

2. What We Collect

• Account data: Name, email, phone, city, pincode (for invoicing & delivery)
• Payment data: Processed by Razorpay — we never see or store your card/UPI details
• Studio uploads: Photos you upload for poster generation (stored temporarily, auto-deleted after processing)
• Usage data: Pages visited, creations made, session duration (for improving the service)
• Newsletter: Email only, if you explicitly subscribe

3. How We Use Your Data

• To run your account and deliver creations
• To process payments and generate GST invoices
• To send transactional emails (welcome, invoice, password reset)
• To send our monthly newsletter (only if subscribed)
• To improve AI prompts, templates, and site performance

We do NOT sell, rent, or share your personal data with marketers or data brokers.

4. Third-Party Services

We use trusted partners who also protect your data:

• Razorpay — payment processing
• Supabase — authentication and database (EU/India hosted)
• Cloudflare — hosting, CDN, DDoS protection
• OpenAI / Stability AI — AI generation (prompts and photos sent for processing; they do not train on business API data)

5. Cookies

We use only essential cookies (login session, theme preference) and basic anonymous analytics. No third-party tracking ads, ever.

6. Data Security

Your data is encrypted in transit (HTTPS) and at rest. Access is limited to the BhaktiMedia team on a need-to-know basis. Uploaded photos are auto-deleted from our servers within 7 days unless saved to your creations.

7. Your Rights (DPDP Act)

• Right to access: Ask us for a copy of your data
• Right to correction: Update incorrect details from your dashboard
• Right to erasure: Delete your account and all associated data anytime
• Right to withdraw consent: Unsubscribe from newsletter, revoke data use
• Right to grievance redressal: Contact our grievance officer below

8. Children

Our service is intended for users aged 18+. We do not knowingly collect data from minors. If you believe a minor has provided us data, please contact us and we will delete it.

9. Changes to This Policy

Updates will be posted on this page with a revised "Last updated" date. Material changes will be communicated via email.

10. Contact & Grievance Officer

For any privacy concern: Contact us. Our grievance officer will respond within 30 days as per DPDP Act requirements.