GeetAI Studio — Privacy Policy

1. Information We Collect

We collect only the information necessary to provide our AI and digital marketing services. This includes:

Personal Identification Information: Name, email address, phone number, billing address, and company name when you register, place an order, or contact us.
Project Data: Content, images, brand assets, text prompts, and creative briefs you share with us to deliver our services. We treat this as confidential and use it solely for the agreed scope of work.
Communication Records: Correspondence via WhatsApp, email, phone, or contact forms, including call recordings where prior consent is obtained.
Usage Data: IP address, browser type, device information, pages visited, and session duration collected through cookies and analytics tools to improve our website and services.
Payment Information: Transaction details processed through our payment partners. We do not store full credit/debit card numbers or UPI credentials on our servers.

We collect this information when you voluntarily provide it or automatically through your interaction with our website and services.

2. How We Use Your Information

Your data serves the following lawful purposes under the DPDP Act:

Service Delivery: To provide, maintain, and improve our AI systems, website design, digital marketing, and creative services as agreed in your engagement.
Communication: To respond to inquiries, send project updates, share invoices, and provide customer support via email, WhatsApp, or phone.
Billing & Compliance: To process payments, generate invoices, maintain records for tax and regulatory compliance under Indian law.
Service Improvement: To analyse usage patterns and feedback, enabling us to enhance our platform, tools, and service quality.
Legal Obligations: To comply with applicable Indian laws, court orders, or regulatory requests from government authorities.

We process your data only on the basis of consent, contractual necessity, or legal obligation. You may withdraw consent at any time by contacting us, subject to legal retention requirements.

3. Data Sharing & Disclosure

We do not sell your personal data. We share information only in the following circumstances:

Service Providers: With trusted third-party vendors who assist us in operating our business — including payment gateways (Stripe, Razorpay), cloud hosting (AWS, Vercel), analytics, and communication tools. These providers are contractually bound to protect your data and process it only on our instructions.
Legal Compliance: When required by Indian law, court order, or government authority under Section 35 of the DPDP Act, we may disclose information necessary to comply.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the business transition, with notice provided to you.

Where data is transferred outside India, we ensure adequate safeguards consistent with the DPDP Act's requirements for cross-border data transfers.

4. Cookies & Tracking

Our website uses cookies and similar tracking technologies to enhance your experience and analyse site traffic.

Essential Cookies: Required for basic site functionality, such as session management and security.
Analytics Cookies: Help us understand how visitors interact with our site — we use privacy-respecting analytics that anonymise IP addresses.
Preference Cookies: Remember your settings and preferences for a personalised experience.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect site functionality. We provide a cookie consent banner on your first visit to obtain your informed consent under applicable guidelines.

5. Data Security

GeetAI Studio implements reasonable security safeguards to protect your personal data from unauthorised access, loss, or misuse, consistent with Section 8 of the DPDP Act:

SSL/TLS encryption for all data transmitted through our website.
Role-based access controls limiting internal access to data on a need-to-know basis.
Regular security audits and vulnerability assessments of our systems.
Secure storage of project assets with encrypted backups.
Employee confidentiality agreements and data handling training.

In the unlikely event of a data breach, we will notify the Data Protection Board of India and affected individuals within the timelines prescribed under applicable law, along with remediation steps.

6. Your Rights Under the DPDP Act

As a data principal under the Indian Digital Personal Data Protection Act, 2023, you have the following rights:

Right to Know: Request a summary of the personal data we hold about you and the purposes for which it is processed.
Right to Correction: Request correction of inaccurate or incomplete personal data.
Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
Right to Grievance Redressal: Lodge a complaint regarding our data processing practices.
Right to Nominate: The right to nominate a person to exercise your data rights in the event of incapacity or death.

To exercise any of these rights, contact our Data Protection Officer at privacy@geetai.studio. We will respond within 30 days as required under the DPDP Act. If unsatisfied, you may file a complaint with the Data Protection Board of India.

7. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out:

Email: privacy@geetai.studio
Phone / WhatsApp: +91 82408 17664
Address: GeetAI Studio, India

Our Data Protection Officer is available to address any grievances. We are committed to resolving your concerns promptly and transparently.