LEGAL
Consent Terms
Last updated: 28 May 2025 · Under the Digital Personal Data Protection Act, 2023
Plain-English Summary
This document explains exactly what data we collect from you, why we collect it, who we share it with, and what you can do about it — in plain language, not legalese. The DPDP Act 2023 requires us to get your free, informed, specific, and unambiguous consent before processing your personal data. This document is that consent notice.
What we collect
When you sign up
- Your name and email address
- Password (stored as a secure hash — we never see it in plain text)
- Google OAuth token (if you sign in with Google)
When you use the platform
- Your design submissions and feedback responses
- Messages sent to the Design Oracle
- XP, streaks, badges, and challenge history
- The device and browser you use (for security)
When you pay
- Subscription status and payment IDs (processed by Razorpay — we never see your card number)
- Invoice records for tax compliance
Why we collect it
To run the platform
Your account data lets you log in. Your submission history powers the leaderboard, badges, and skill tier system.
To give you AI feedback
Your submissions are sent to Anthropic's Claude API to generate structured design critique. Anthropic processes this for inference only — it is not used to train their models under our commercial agreement.
To send you emails
We send verification emails, password resets (always), and optional streak reminders (only if you opt in during signup).
To process your payment
If you subscribe to Premium, Razorpay processes the payment. We receive a confirmation and store your subscription status.
To keep you safe
We log security events (login attempts, unusual activity) to protect your account.
To comply with Indian law
We retain certain records as required by the IT Act 2000, IT Rules 2021, DPDP Act 2023, and Indian tax laws.
Who we share it with
We share your data only with the services that make DesignerVerse work. We do not sell your data or share it with advertisers.
Supabase
Database (India)
Vercel
Web hosting
Anthropic
AI feedback
Razorpay
Payments (India)
Resend
Email delivery
Each provider is bound by a Data Processing Agreement. See our full Privacy Policy → Data Sharing for details.
Your rights
See your data
Ask us what personal data we hold about you and why.
Correct your data
Tell us if anything is wrong or out of date — we'll fix it.
Delete your account
Request full deletion of your account and associated personal data. Payment records are retained for 7 years as required by law.
Withdraw consent
You can withdraw consent for optional processing (e.g. marketing emails) at any time from account settings.
File a complaint
If you're unhappy with how we handle your data, file a grievance — we'll respond within 15 days.
How to withdraw consent
You may withdraw your consent for data processing at any time. Here's how:
Email us
Send a withdrawal request to privacy@designerverse.in from your registered email address. We will action it within 7 business days.
Delete your account
Account deletion is available from Settings → Account. This withdraws all consent and triggers data deletion (except legally required records).
Unsubscribe from emails
Toggle email preferences in Settings → Notifications, or click the unsubscribe link in any marketing email. Transactional emails (password reset, verification) cannot be disabled.
Note: Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal. Some processing (e.g., payment records) is based on legal obligation rather than consent and cannot be withdrawn.
Have questions about your data or want to exercise your rights?