Legal
Privacy Policy
Last updated: 2026-07-15
1. What we collect
- Account information. Your email address, your studio name, and basic account settings so we can create and secure your account.
- Uploads. The product photographs you upload to generate imagery from.
- Generated outputs. The images and video the studio produces for you, kept in your account so you can return to your work.
- Usage and billing records. Credit balance, purchases, credit spend, and technical logs such as request timing and error events that help us keep the service reliable and secure.
2. How we use your information
- to operate the studio and generate the outputs you request;
- to maintain your account, balance, and history so your work is there when you return;
- to process purchases and apply credits, launch grants, and the fidelity guarantee;
- to keep the service secure, prevent abuse, and diagnose and fix problems;
- to respond to your support requests and important service notices.
We do not sell your personal data, and we do not use your uploads to train our own foundation models.
3. AI processing and generation providers
Generating imagery involves automated processing of your uploads. To do this, we send the minimum necessary content to specialized third-party generation providers that run the models on our behalf. These providers process the content only to return your output and are bound by their obligations to us. We describe them generically here and do not share your content for their own advertising or model-training purposes.
4. Storage and security
- Private storage. Your uploads and outputs are held in private storage buckets that are not publicly listable or browsable.
- Short-lived links. When your media is displayed in the app, it is served through short-lived signed links that expire, rather than permanent public URLs.
- Metadata stripped. EXIF metadata, which can include device and location details, is stripped from your uploads during processing.
- Access controls. Data access is restricted so that your content is associated with your account and protected by row-level security and access rules.
5. Our lawful basis and purpose
We process your personal data to provide the service you asked for. Under India's Digital Personal Data Protection Act, our basis is your consent, given when you create an account and upload content to generate imagery, and the necessity of processing to deliver that service. We use your data only for the purposes listed in section 1: running your studio, keeping your work available to you, securing your account, and meeting legal and billing obligations. We do not sell your data and we do not use it for advertising.
6. Where your data is stored
Your account data, uploads, and generated outputs are stored with our infrastructure provider (Supabase) in the Asia Pacific (Sydney, Australia) region. This means personal data of Indian users is stored in Australia. This is lawful under the DPDP Act, which permits transfer except to countries the government specifically restricts, and Australia is not restricted. For any users in the EU or UK: Australia does not have an EU adequacy decision, so such transfers would rely on Standard Contractual Clauses.
7. Data retention
We keep data only as long as needed for the purpose it was collected:
- Account information (email, studio name): for as long as your account is active, and deleted when you delete your account.
- Uploads and generated outputs: for as long as your account is active; deleted when you delete the item or your account. Residual copies in encrypted backups are cycled out within 30 days.
- Credit ledger and billing records: retained up to 7 years to meet accounting and tax obligations, then deleted.
- Security and audit logs: retained up to 12 months, then deleted.
When you delete your account, we remove your data from active systems immediately (uploads, outputs, models, credit balance, profile) and backups are cycled out as above.
8. Your rights and choices
- Access and export. You can view and download the outputs in your account at any time, and you can request a copy of your account data by writing to us.
- Deletion. You can delete your account yourself from within the app. Doing so removes your account and the associated content from our active systems.
- Correction. You can update your account details in the app, or ask us to correct information you cannot change yourself.
To make any of these requests beyond the self-serve tools, write to support@oviyastudio.com.
10. Children
Oviya Studio is a tool for businesses and creators and is not directed at children. We do not knowingly collect personal information from anyone under the age required to hold an account in their country. If you believe a child has provided us information, contact us and we will remove it.
11. Changes to this policy
As the product grows, we may update this policy. When we make material changes, we will update the version shown here and, where appropriate, notify you in the app or by email. Continuing to use the service after an update means you accept the revised policy.
12. Contact
For any privacy question or request, write to us at support@oviyastudio.com. We read every message and will help you exercise your choices.
13. Grievance Officer
In line with India's Digital Personal Data Protection Act, you can reach our Grievance Officer for any concern about how your personal data is handled:
- Name: Anish Modi
- Title: Founder, Oviya Studio
- Email: support@oviyastudio.com
We aim to acknowledge grievances within 72 hours and resolve them promptly.