Privacy Policy

1. Information We Collect

We collect only the information needed to create your account, generate your campaigns, process payments, and keep the service secure. Specifically:

1a. Account Information

When you sign up, we collect:

• Your name and email address
• A securely hashed password (for email/password accounts — we never store your actual password)
• Your Google account ID and the verified email/name Google shares with us (if you sign in with Google)
• Whether your email has been verified

1b. Contact Information

The email address on your account is used to send you a one-time account-verification link, and may be used to contact you about your account, an order, or a support request.

1c. Business & Campaign Information You Provide

To generate your campaigns, we collect the details you enter, which may include:

• Your business name, industry, description, city/locality, phone or WhatsApp number, and website URL
• A logo image URL, if you provide one
• Your preferred language and tone
• Campaign details: the product or service you're promoting, your objective, target audience, offer, location, selected platforms, and any custom instructions you type

1d. Generated Campaign & Design Content

We store the campaign strategy and copy generated for you, and the design images generated for you (including each version, if you regenerate, create a variation, or edit a design), so you can view, download, and revisit your version history.

1e. Payment-Related Information

When you buy a creative package, our payment processor, Razorpay, handles your card/UPI/bank details directly — we never receive or store them. We store the order amount, currency, Razorpay's own order and payment reference IDs, and the payment status (e.g. paid, failed, refunded), so we can confirm your purchase and grant your creative credits.

1f. Technical & Log Information

For account security, we record:

• The IP address and browser/device user-agent string associated with each login session
• Session creation and expiry times

1g. Cookies and Local Storage

DesignadAI uses one essential cookie to keep you signed in — a secure, HTTP-only session cookie that identifies your logged-in session. It isn't used for advertising or tracking, and it can't be read by JavaScript. We don't currently use any analytics, advertising, or tracking cookies, or any other browser storage for tracking purposes.

If you complete a payment, Razorpay's own checkout page or script may set cookies or use local storage under its own privacy policy, outside our control — see Razorpay's privacy policy for detail.

2. How We Use Your Information

We use the information above to:

• Create and secure your account, and verify your email address
• Generate your campaign strategy, copy, and design creatives
• Process payments and grant the creative credits you've purchased
• Provide customer support
• Detect and prevent abuse of the free-campaign limit, rate limits, or payment system
• Maintain and improve the reliability of the service

3. How Information Is Stored and Protected

Your data is stored in a managed PostgreSQL database. Passwords are never stored in plain text — only a one-way cryptographic hash. Session tokens and email-verification tokens are likewise never stored in a form that could be reversed back to the original token. Generated design images are stored either on our server's private storage or in a private, access-controlled cloud storage bucket, and are only ever served back to you after we confirm you're signed in and that the design belongs to your account.

We take reasonable technical measures to protect your information, but no method of storage or transmission is completely secure, and we cannot guarantee absolute security — see "Security Limitations" below.

4. Service Providers We Use

We share information with the following categories of service providers, only as needed for them to perform their function for us, and never for their own independent marketing use:

• Payment processing: Razorpay (handles your payment details directly; we never see your card/UPI/bank credentials)
• AI campaign generation: a third-party AI language model provider, used to generate campaign strategy and copy from the business/campaign details you provide
• AI image generation: a third-party AI image-generation provider, used to generate the visual creative for your campaign
• Email delivery: a transactional email provider, used solely to send your account-verification email
• Cloud hosting and storage: our application, database, and generated design images are hosted on cloud infrastructure

5. Analytics

DesignadAI does not currently use any third-party analytics, advertising, or audience-tracking tool. If that changes in the future, we'll update this policy first.

6. Data Retention

We keep your account, business profile, campaign, design, and order information for as long as your account is active, so that your campaigns and version history remain available to you. We may retain certain information longer where required for legitimate business, security, fraud-prevention, or legal/accounting purposes (for example, payment records), even after an account is deleted.

7. Your Rights and Data Requests

You can review and update most of your account and business profile information directly from your dashboard. For anything you can't change yourself — including requesting a copy of your data, correcting it, or asking questions about what we hold — reach out through our Contact / Support page.

8. Account and Data Deletion

There is currently no self-serve "delete my account" option in the product. If you'd like your account and associated data deleted, reach out through our Contact / Support page (from your account's associated details) and we will process the request, subject to any information we're required to retain for legal, tax, or accounting purposes (for example, records of a completed payment).

9. Security Limitations

No online service can guarantee perfect security. While we use industry-standard practices (password hashing, HTTPS, access-controlled storage), we can't guarantee that unauthorized access, loss, or misuse of information will never occur, and you share information with us at your own risk.

10. Children's Privacy

DesignadAI is a business tool intended for use by adults operating or representing a business. It isn't directed at children, and we don't knowingly collect information from anyone under the age of majority in their jurisdiction.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make a material change, we'll update the date at the top of this page.

12. Contact

Questions about this Privacy Policy, or a data request? Visit our Contact / Support page.