Privacy notice
Draft for review. Last updated 2026-11-13.
[Company legal name] ("we") runs Zigniz. This notice explains what personal data we process, why, and your rights under India's Digital Personal Data Protection Act 2023 and other laws that apply to you.
What we collect and why
| Data | Why | Kept |
|---|---|---|
| Email, name, sign-in identity | Your account and sign-in | While your account exists |
| Designs, versions, imported files | To save and show your work | Until you delete them or your account |
| Descriptions and images you send to the AI | To generate models | Not used to train AI models; kept up to 30 days to fix problems, then deleted |
| Credit balance, payments (amount, date, reference) | Billing and tax records | As tax law requires (usually 8 years) |
| Usage and error data (pages used, errors, device type) | To fix problems and improve the service | Up to 12 months, in aggregate after that |
| Waitlist email, role and city | To invite you | Until you are invited or ask us to remove it |
We do not sell personal data and we do not show advertising.
Consent
We process your data with your consent, given when you sign up or join the waitlist, and where the law allows without consent (for example to keep tax records). You can withdraw consent at any time; this does not affect processing that already happened, and some features will stop working.
Children
If you are under 18, we need verifiable consent from your parent or guardian before you use an account. Children's accounts have no public profile, no messages from strangers and no tracking for advertising.
Who processes data for us
We use service providers who process data only on our instructions: hosting and content delivery (Cloudflare), database and sign-in (Supabase), the AI model (Anthropic), payments (Razorpay, Stripe), error and product analytics (Sentry, PostHog), and email delivery. Some are outside India; we transfer data only where the law permits and under contracts that protect it.
Your rights
You can ask for a summary of your personal data, correct it, delete it, and nominate someone to exercise your rights if you cannot. Most of this you can do yourself in Settings (export all my data, delete my account). For anything else, write to support@zigniz.com.
Grievance officer
[Name], grievance@zigniz.com, [Registered address]. We reply within 7 days and resolve within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
Security
Data is encrypted in transit, access is limited to the people who need it, and the AI key and payment secrets never reach your browser. If a breach affects you, we will tell you and the authorities as the law requires.
Changes
We will tell you about important changes before they take effect.