PRIVACY POLICY

1.1 Information You Provide — Account Information: Your name, email address, phone number (if provided), and business name during registration. Jewellery Images: Photographs and images of jewellery you upload for AI generation. Communication Data: Messages, feedback, images, and other content shared through our communication channels including WhatsApp, Instagram, email, and in-app messaging. Support Requests: Information provided when you contact us for assistance, including error reports and quality complaints. Prompts and Instructions: The text prompts, style selections, instructions, and other inputs you provide to direct AI generation. Connected Account Information: Where you link a social-media or business account (such as Instagram, Facebook, or LinkedIn), we collect access tokens, account or page identifiers, and the basic account information necessary to publish or schedule content on your behalf, as authorised by you and the relevant platform.

1.2 Information Collected Automatically — Usage Data: Generation history, styles selected, Credits used, feature interactions, session duration, and platform usage patterns. Device Information: Browser type, operating system, device type, screen resolution, and language preferences. Analytics Data: We use third-party analytics services (including PostHog) that may collect autocapture data, session recordings, and behavioural analytics to improve our Service. This data collection begins upon your use of the Platform. Log Data: IP addresses, access timestamps, pages visited, and system activity logs.

1.3 Payment Information — Payment transactions are processed through third-party payment gateway providers. We do not store, access, or have visibility into your credit/debit card numbers, bank account details, UPI credentials, or any other financial instrument information. Our payment processors handle all financial data in accordance with their own privacy policies and PCI-DSS compliance requirements.

1.4 Inputs Sent to AI Providers — To generate content, your uploaded images, prompts, and related inputs are transmitted to and processed by third-party artificial-intelligence providers (see Section 8), which may process this data on servers located outside India.

1.5 Agency and Delivery Services — Where you engage us for agency, managed, or done-for-you services, we collect and process the source images, briefs, product information, and other materials you provide so that we can produce and deliver content to you. Where content is delivered through a client delivery portal, we process access tokens and the basic access information necessary to operate the portal. You are responsible for any notice or consent required in respect of recipients you invite to a delivery portal.

2.1 Core Service Delivery — Processing your jewellery images through our AI generation pipeline. Managing your account, Credits, and generation history. Processing payments and maintaining transaction records. Providing customer support and resolving issues. Publishing or scheduling content to your Connected Accounts at your direction.

2.2 Service Improvement — Analysing usage patterns to improve AI model accuracy and service quality. Debugging and resolving reported errors (which may involve reviewing input-output pairs from reported generations). Developing new features and enhancing existing functionality.

2.3 Communication — Sending transactional emails (welcome messages, Credit grants, generation notifications). Sending service updates, maintenance notices, and policy changes. Responding to inquiries and support requests.

2.4 Marketing (Limited) — Using anonymized feedback and testimonials for marketing purposes (see Section 4). Using images from Free Samples and Complimentary Generations for marketing, demonstrations, and business purposes as outlined in the Terms and Conditions.

3.1 Paid Generation Images — Images generated through paid Credits are owned by you. We store your uploaded images and generated outputs for a period of thirty (30) days from the date of generation to facilitate downloads, regeneration requests, and support resolution. After thirty (30) days, images are automatically and permanently deleted from our active servers. We do not use paid generation images for AI model training except when you report an error or quality issue (see Section 3.3).

3.2 Free Sample Images — Images generated through Free Samples or Complimentary Credits may be retained by us indefinitely. These images may be used for marketing, demonstrations, model training, quality improvement, and any other business purpose as described in the Terms and Conditions. By creating an account and by using Free Samples or Complimentary Credits, you expressly consent to this retention and usage, including for AI model training and marketing, as described in the Terms and Conditions (Sections 2.5, 4.3, and 8.2). This consent does not extend to your paid generation images, which are not used for model training except when you report an error (see Section 3.3). You may withdraw your consent to future use at any time as described in Section 6.

3.3 Error-Reported Images — When you report an error or quality issue, the relevant input and output images may be retained and used for debugging, quality improvement, and model retraining. This retention and usage applies regardless of whether the generation was paid or free.

3.4 Future Model Training Policy Changes — Our current policy is to not use your paid generation images for AI model training. If we ever decide to change this policy: We will notify you at least thirty (30) days in advance via email. We will seek your explicit consent through a clear in-platform consent mechanism before using any of your paid generation data for training. You will have the right to decline without any impact on your access to the Service. You may withdraw consent at any time, which will apply to future training activities. For full details, see Section 8.4 of the Terms and Conditions.

3.5 Other AI-Generated Content and Inputs — The storage, retention, and usage practices described in this Section apply equally to AI-generated video and other AI-Generated Content, and to the prompts, instructions, and metadata associated with a generation.

We do not sell your personal data to third parties. We may share information in the following circumstances:

Service Providers: With third-party vendors who assist in operating our Service, including cloud hosting and storage providers; third-party artificial-intelligence model and infrastructure providers (such as Google / Google Cloud Vertex AI and OpenRouter and their sub-processors), which process your uploaded images and prompts to generate outputs; payment processors; analytics providers; email and messaging providers; and, where you authorise publishing, social-media platforms (such as Meta / Instagram / Facebook and LinkedIn). These providers are contractually bound to use your data only for the purposes of providing services to us, and some of them may store or process your data on servers located outside India.

Legal Requirements: When required by law, regulation, court order, or governmental authority. We may also disclose information to enforce our Terms, protect our rights, or respond to legal claims.

Business Transfers: In connection with a merger, acquisition, restructuring, sale of assets, or similar corporate transaction, your information may be transferred as part of the transaction. We will notify you of any such transfer.

Anonymized/Aggregated Data: We may share anonymized, aggregated data (from which no individual can be identified) with partners, investors, or the public for research, reporting, or business purposes.

Feedback and Testimonials: Anonymized feedback may be used publicly. Identified testimonials require your explicit consent.

We implement commercially reasonable technical and organizational security measures to protect your information, including encrypted data transmission (TLS/SSL), secure authentication, access controls, and regular security reviews. However, no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee absolute security and shall not be liable for unauthorized access resulting from factors beyond our reasonable control.

Breach Notification — In the event of a personal-data breach, we will take reasonable steps to address it and, where required by applicable law (including the Digital Personal Data Protection Act, 2023 and the rules thereunder), we will notify affected individuals without undue delay and the Data Protection Board of India within the timelines prescribed by law (including, where applicable, within 72 hours), describing in plain language the nature of the breach, its likely consequences, the measures taken, and a point of contact for further information.

Subject to applicable law, you have the following rights regarding your personal data: Access: You may request a copy of the personal data we hold about you. Correction: You may request correction of inaccurate or incomplete personal data. Deletion: You may request deletion of your account and associated personal data by contacting us at kunal@araviai.com. Deletion requests will be processed within thirty (30) days. Data Portability: You may request your data in a machine-readable format where technically feasible. Objection: You may object to certain processing of your data, subject to legal limitations. Withdrawal of Consent: Where our processing is based on your consent, you may withdraw that consent at any time by contacting us or using available in-platform controls; withdrawal does not affect processing already carried out and may limit your ability to use certain features. Nomination: You may nominate another individual to exercise your rights under applicable data-protection law in the event of your death or incapacity.

To exercise any of these rights, contact us at kunal@araviai.com. We may require identity verification before processing your request. If you are not satisfied with our response, you may escalate your complaint to our Grievance Officer (see Section 13) and, where applicable, to the Data Protection Board of India.

We use cookies and similar tracking technologies for the following purposes: Essential Cookies: Required for login sessions, authentication, and core platform functionality. Analytics Cookies: Used through third-party analytics providers (including PostHog) to understand usage patterns, improve user experience, and optimize the Service. Performance Cookies: Used to monitor Service performance and identify technical issues.

You may control cookie preferences through your browser settings. Disabling essential cookies may impair platform functionality.

Our Service integrates with third-party services including but not limited to: Payment gateway providers for processing transactions. Cloud infrastructure providers for hosting and storage. Analytics platforms for usage analysis. Artificial-intelligence model and infrastructure providers (such as Google / Google Cloud Vertex AI and OpenRouter and their sub-processors), to which your uploaded images, prompts, and related inputs are transmitted for the purpose of generating content, and which may process such data outside India. Social-media platforms (such as Meta / Instagram / Facebook and LinkedIn), where you authorise publishing or scheduling to your Connected Accounts. Email delivery services for transactional communications.

Each third-party service operates under its own privacy policy. We encourage you to review their policies. The Company is not responsible for the privacy practices of third-party services.

The Service is not intended for use by individuals under the age of thirteen (13). We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information, we will take steps to delete such information promptly. We rely on age-based access restrictions and do not knowingly permit use by, or collect data from, anyone under thirteen (13). Where verifiable parental or guardian consent is required by applicable law before processing the data of a child or a person with a disability, we will obtain such consent, consistent with the Digital Personal Data Protection Act, 2023.

Account Data: Retained for the duration of your account and for a reasonable period thereafter as required by law or legitimate business purposes. Generation Images (Paid): Automatically deleted thirty (30) days after generation. Generation Images (Free): May be retained indefinitely as described in Section 3.2. Transaction Records: Retained for a minimum of eight (8) years as required by Indian tax and accounting regulations. Communication Records: Retained for the duration of your account and for a reasonable period thereafter. Analytics Data: Retained in anonymized or aggregated form and may be kept indefinitely.

11.1 Cross-Border Processing — Your data may be processed on servers located in India or in other jurisdictions where our service providers (including our third-party AI providers) operate. By using the Service, you consent to the transfer and processing of your data in these locations. We ensure that appropriate safeguards are in place for any cross-border data transfers.

11.2 Users in the European Union, EEA, and United Kingdom — If you are located in the EU, EEA, or UK, we process your personal data on the legal bases of performance of our contract with you, your consent, and our legitimate interests in operating and improving the Service. You have the rights of access, rectification, erasure, restriction, objection, and data portability, and the right to lodge a complaint with your local supervisory authority. Where we transfer your data outside the EEA or the UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. To exercise these rights, contact us at kunal@araviai.com.

11.3 Users in the United States — If you are a resident of California or another U.S. state with applicable privacy laws, we do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under such laws. You may request access to, deletion of, or correction of your personal information, and you have the right not to be discriminated against for exercising these rights. To exercise these rights, contact us at kunal@araviai.com.

We may update this Privacy Policy from time to time. Material changes will be communicated via email to the address registered with your account or through prominent notice on the Platform. Your continued use of the Service after the effective date of any changes constitutes acceptance of the revised Privacy Policy.

In accordance with applicable Indian data protection laws, you may contact our Grievance Officer for any complaints or concerns regarding data processing: Name: Kunal Bairwa. Email: kunal@araviai.com.

The Grievance Officer shall acknowledge your complaint within forty-eight (48) hours and resolve it within thirty (30) days from the date of receipt. If your complaint is not satisfactorily resolved, you may have the right to escalate it to the Data Protection Board of India in accordance with the Digital Personal Data Protection Act, 2023.

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: Email: kunal@araviai.com | aditya@araviai.com. Service: jewel.araviai.com.