Privacy Policy

1. What Information Do We Collect?

Personal Information You Disclose to Us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Service, express an interest in obtaining information about us or our products and services, when you participate in activities on the Service, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Service, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Names
• Email addresses
• Usernames
• Passwords
• Contact preferences
• Billing addresses
• Payment information

Design-Related Information

When you use our design tools, we collect:

• Reference images you upload for design generation (always kept private)
• Text prompts and design specifications you provide
• AI-generated jewelry designs created in your account
• Metadata associated with your designs (tags, notes, favorites)

Billing and Credit Purchase Information

When you subscribe to a paid plan or purchase extra credits, we collect and retain:

• Subscription tier, status, and billing cycle dates
• Credit purchase transaction records (amount, date, expiry)
• Credit usage history and remaining balances (subscription credits and purchased credits)
• Stripe customer identifiers (we do not store full payment card details)

Information Automatically Collected

In short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Service.

We automatically collect certain information when you visit, use, or navigate the Service. This information does not reveal your specific identity but may include device and usage information, such as:

• IP address
• Browser and device characteristics
• Operating system
• Language preferences
• Referring URLs
• Device name and identifier
• Country and location
• Information about how and when you use our Service
• Other technical information

2. How Do We Process Your Information?

In short: We process your information to provide, improve, and administer our Service, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons, depending on how you interact with our Service, including:

• To facilitate account creation and authentication and otherwise manage user accounts
• To deliver and facilitate delivery of services to the user
• To respond to user inquiries and offer support to users
• To send administrative information to you, such as changes to our terms, conditions, and policies
• To fulfill and manage your orders, payments, returns, and exchanges made through the Service
• To enable user-to-user communications with each user's consent
• To request feedback and to contact you about your use of our Service
• To send you marketing and promotional communications (with your consent where required)
• To protect our Service through fraud detection and prevention
• To comply with our legal obligations and protect our rights
• To train and improve our AI models that power the Service

3. When and With Whom Do We Share Your Information?

In short: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.
• AI Service Providers. We use third-party AI services to power our design platform. Your design inputs and outputs may be processed by these services.
• Payment Processors. We share payment information with payment processors (Stripe) to facilitate subscription billing and one-time credit purchases. We do not store your full credit card details on our servers.
• Legal Requirements. We may disclose your information where we are legally required to do so to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.

4. Do We Use Cookies and Other Tracking Technologies?

In short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Service. Some online tracking technologies help us maintain the security of our Service and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

5. Do We Offer Artificial Intelligence-Based Products?

In short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.

As part of our Service, we offer AI-powered jewelry design and visualization tools. We use third-party AI service providers to process your design inputs and generate outputs.

Your Uploads and Privacy

When you upload reference images or files to assist in design generation:

• These uploads are always private and accessible only to you
• We do not share your uploads with other users or display them publicly
• Uploads are processed solely to generate your requested designs
• You may delete your uploads at any time

Generated Design Visibility

The visibility of AI-generated designs depends on your subscription tier:

• Free Tier: Designs are automatically shared in our public Explore gallery. This is part of the free service model and enables community inspiration. By using the Free tier, you consent to this public sharing.
• Basic Tier and Above: You control whether your designs are public or private. By default, designs are private and visible only to you.

Regardless of tier, you can:

• View, organize, and manage your designs in your private Gallery
• Download your designs for personal records

AI Data Processing

When you use our AI features:

• Your text prompts and design inputs are processed by AI models
• Generated designs and outputs are stored in your account
• We may use anonymized, aggregated data to improve our AI models
• We implement safeguards to prevent misuse of AI-generated content
• We do not use your private designs or uploads to train AI models without explicit consent

6. How Long Do We Keep Your Information?

In short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.

Specific Retention Periods

• Account profile, designs, uploads, chat history: retained while your account is active. Deleted within 30 days of account deletion (see Section 10).
• Payment and invoice records: retained for 8 years as required by the Indian Income Tax Act, Goods and Services Tax (GST) Act, and Companies Act 2013. After account deletion, these records are retained in anonymized form (your name and email are removed; only amounts, dates, and Stripe references are kept).
• Stripe transaction data: retained by our payment processor (Stripe) for 5–7 years to comply with anti-money-laundering (AML) and Know-Your-Customer (KYC) regulations. We cannot override this.
• Audit and processing logs: retained for at least 1 year as required by India's Digital Personal Data Protection Act, 2023.
• Backups: encrypted backups roll off naturally within 90 days, in line with DPDP Act exemptions for immutable backups.
• Purchased credits: expire one (1) year from the date of each purchase, regardless of account status.

7. How Do We Keep Your Information Safe?

In short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

8. Do We Collect Information from Minors?

In short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Service, you represent that you are at least 18 years old.

9. What Are Your Privacy Rights?

In short: Depending on your location, you may have certain rights regarding your personal information.

In some regions (like the EEA, UK, and Switzerland), you have rights that allow you greater access to and control over your personal information. You may:

• Request access to and obtain a copy of your personal information
• Request correction or deletion of your personal information
• Object to or restrict the processing of your personal information
• Request portability of your personal information
• Withdraw your consent at any time

Account Information

You may at any time review or change the information in your account or terminate your account by:

• Logging in to your account settings and updating your user account
• Contacting us using the contact information provided below

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms, and/or comply with applicable legal requirements.

Your Design Data Rights

In addition to your general privacy rights, you have specific rights regarding your designs and uploads:

• Right to Privacy: Your uploaded reference images are always private. If you have a paid subscription (Basic or above), you can keep all generated designs private.
• Right to Control Visibility: Paid subscribers can change any design from public to private or vice versa at any time through Gallery settings.
• Right to Export: You may download and export your designs at any time, preserving your creative work.
• Right to Opt-Out of Public Sharing: If you do not wish your designs to be publicly visible, you may upgrade to a paid subscription (Basic tier or above) which provides private design storage.
• Right to Account Deletion: You can permanently delete your account and all associated data at any time. See Section 10: Account Deletion for details.

To exercise any of these rights, use the controls in your Gallery or contact us at hello@tashvi.ai.

10. Account Deletion

In short: You can delete your account at any time. Deletion is reversible for 30 days, then permanent.

You can delete your Tashvi account at any time from Settings → Account → Delete account in the Studio dashboard.

Immediately on Confirmation

• Your subscription is canceled. No further charges.
• Your designs and chat history are hidden from public view.
• Your API keys are revoked.
• You are signed out of all sessions.

30-Day Reversal Window

• You can log back in within 30 days to cancel the deletion and restore your account.
• After 30 days, deletion is permanent and irreversible.

Permanently Deleted at T+30 Days

• Your profile, name, photo, and contact information
• All AI-generated designs, uploaded reference images, and 3D drafts
• Your conversation history with our AI agents
• Your saved preferences, design memory, and API keys
• Your authentication record

What We Are Legally Required to Retain

• Payment and invoice records (8 years) — Indian Income Tax Act, GST Act, and Companies Act 2013. Retained in anonymized form: amounts, dates, and Stripe references are kept; your name and email are removed.
• Stripe transaction data (5–7 years) — our payment processor (Stripe) retains this to comply with AML and KYC laws. We cannot override this.
• Audit logs (at least 1 year) — required by India's Digital Personal Data Protection Act, 2023.

Backups

Encrypted backups roll off naturally within 90 days, in line with DPDP Act exemptions for immutable backups.

Organization (B2B) Accounts

If you are the sole owner of an organization on Tashvi, you must transfer ownership of the organization or delete the organization before you can delete your personal account. This protects your team members and shared API keys.

Regulatory Basis

• EU users (GDPR): This policy implements your right to erasure under GDPR Article 17. Retention exceptions are exercised under Article 17(3)(b) (legal obligation) and 17(3)(e) (defense of legal claims).
• California users (CCPA): This policy implements your right to delete. Retention exceptions are exercised under CCPA §1798.105(d) for transaction completion, legal compliance, and security.
• India users (DPDP Act): This policy implements the right to erasure under the Digital Personal Data Protection Act, 2023, with retention as required by Indian Income Tax, GST, and Companies Act regulations.

For account deletion questions or special requests (for example, immediate purge without the 30-day wait), contact us at hello@tashvi.ai.

11. Do We Make Updates to This Policy?

In short: Yes, we will update this policy as necessary to stay compliant with relevant laws.

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last updated” date at the top of this Privacy Policy. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the date. We encourage you to review this Privacy Policy frequently to stay informed of how we are protecting your information.

12. How Can You Contact Us?

For all matters — privacy questions, account deletion, support, or anything else — you may contact us at:

How Can You Review, Update, or Delete Your Data?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. To make such a request, please contact us at hello@tashvi.ai.