Privacy Policy

1. Data we collect

Data you give us

• Account details from Google Sign-In: your name, email address and profile picture.
• Product photos and brand kits you upload, including reference images, colours and style preferences.
• Generated images and the shoot settings you chose (shot style, model options, marketplace).
• Support messages you send through the in-app support assistant or by email.

Data from payments

Payments are handled by Dodo Payments as Merchant of Record. We receive your name, email, country, the pack you bought, the amount and a transaction reference. We never receive or store your full card number, UPI PIN or bank login details.

Data collected automatically

• Usage and device data, such as IP address, approximate country, browser, pages visited and actions in the app.
• Referral data, such as the website or campaign (UTM tags) that brought you to us.
• Cookies, described in section 6.

2. How we use your data

• To create and secure your account and sign you in.
• To generate, store and deliver your images, and to apply your brand kits.
• To process purchases, add credits, show the right currency for your country and keep billing records.
• To answer support requests and handle refunds.
• To prevent fraud and abuse and to enforce our Terms of Service.
• To understand how the Service is used and improve it.
• To send important service messages, such as payment receipts or changes to our policies.

We don't sell your personal data, and we don't use your uploaded photos or generated images to train our own AI models.

3. How AI processing works

To create your images, your product photos and shoot settings are sent to third-party AI model providers, which generate and upscale the images and return them to us. Messages to the in-app support assistant are also processed by an AI model provider. These providers process the data only to deliver the Service to you.

4. Who we share data with

We share personal data only with service providers that help us run Snapvara:

• Google: sign-in and website analytics (Google Analytics).
• Amazon Web Services: hosting and database.
• Cloudflare: storage for uploaded and generated images.
• Vercel AI Gateway, OpenAI and fal.ai: AI image generation and upscaling.
• Anthropic: the AI model behind the in-app support assistant.
• Dodo Payments: payment processing, tax and invoicing as Merchant of Record.
• Discord: internal notifications to our team about signups, purchases and support requests.

We may also disclose data if required by law, to respond to valid legal requests, or to protect the rights and safety of Snapvara, our users or others. If Snapvara is involved in a merger or acquisition, data may be transferred as part of that deal, subject to this policy.

5. International transfers

We are based in India, but your data is stored and processed by service providers in other countries, including the United States. Where this happens, we rely on providers that apply appropriate safeguards to protect your data.

6. Cookies

• Essential cookies keep you signed in (for up to 30 days) and protect your account. The Service doesn't work without them.
• Referral cookie remembers where you first came from, for up to 30 days.
• Analytics cookies from Google Analytics help us understand traffic. You can block them in your browser settings or with Google's opt-out add-on.

7. How long we keep data

• Account details, generated images and brand kits are kept while your account is active, and deleted when you ask us to delete your account.
• Original product photos you upload may be deleted automatically after a limited period, once they're no longer needed to generate images.
• Payment and billing records are kept for as long as tax and accounting laws require.
• Support conversations are kept as long as needed to resolve your request and improve support.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 and other applicable laws, you can:

• Ask for a summary of the personal data we hold about you and how we use it.
• Ask us to correct, complete or update your data.
• Ask us to delete your account and personal data.
• Withdraw your consent at any time. This won't affect processing that already happened, but we may not be able to provide the Service without it.
• Nominate someone to exercise these rights on your behalf in case of death or incapacity.
• Raise a grievance with us, and if you're not satisfied with our response, with the Data Protection Board of India.

To use any of these rights, email contact@snapvara.com from the email address on your account. We'll respond within 2 business days.

9. Security

We protect your data with encryption in transit (HTTPS), access controls, private storage with time-limited download links, and limited staff access. No system is completely secure, but we work to protect your data and will notify you and the authorities of a data breach as required by law.

10. Children

Snapvara is meant for businesses and adults. We don't knowingly collect data from children under 18 without verifiable consent from a parent or guardian. If you believe a child has given us data, contact us and we'll delete it.

11. Changes to this policy

We may update this policy from time to time. We'll change the "Last updated" date above and, for significant changes, notify you by email or in the app.

12. Grievance Officer and contact

For privacy questions, requests or complaints, contact our Grievance Officer, Lakshay Maini, at contact@snapvara.com. We'll acknowledge your complaint within 2 business days and aim to resolve it within 30 days.