LEGAL

Privacy Policy

Last updated: 28 May 2025

This Privacy Policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules thereunder. DesignerVerse is a Data Fiduciary as defined under Section 2(i) of the DPDP Act.

1. Data Fiduciary

DesignerVerse ("we", "us", "our") is the Data Fiduciary responsible for processing your personal data. We are incorporated and operate from India. For any data-related queries, our Grievance Officer can be reached at grievance@designerverse.in.

2. Information We Collect

We collect the following categories of personal data:

Account dataFull name, email address, profile photo (optional), password (hashed — never stored in plain text)
Profile dataDesigner specialisation, years of experience, city, portfolio URL, design tools used
Usage dataChallenge submissions, Oracle messages, XP earned, badges awarded, login history, streak count
Payment dataSubscription status, payment transaction IDs (processed by Razorpay — we do not store card details)
Technical dataIP address, browser type, device identifiers, cookie identifiers, session data
CommunicationsGrievance submissions, support messages, email replies

We do not collect sensitive personal data (Aadhaar, biometric, financial, health, caste, or religious data) unless explicitly required and with separate consent.

3. Purpose of Processing

Your personal data is processed only for the following specified purposes:

  • Account creation and authentication — to verify identity and secure your account
  • Service delivery — to provide daily challenges, AI feedback, Oracle responses, and leaderboard features
  • Personalisation — to tailor challenge difficulty and recommendations based on your skill tier
  • Payment processing — to manage Premium subscriptions via Razorpay
  • Communications — to send account notifications, streak reminders (if opted in), and service updates
  • Legal compliance — to comply with applicable Indian laws including DPDP Act 2023 and IT Rules 2021
  • Grievance redressal — to respond to complaints within the 15-day statutory period
  • Safety and fraud prevention — to detect and prevent abuse of the Platform

We do not use your data for profiling, automated decision-making with legal effects, or sale to third-party advertisers.

4. Data Sharing and Sub-processors

We share your personal data only with the following categories of recipients, each contractually bound to process data only as instructed:

Supabase Inc.Privacy Policy ↗

Database, authentication, and file storage

📍 AWS ap-south-1 (Mumbai, India)

Application hosting and edge functions

📍 Edge CDN; origin compute in AWS us-east-1 (application only — no personal data stored on Vercel's infrastructure)

Transactional email delivery

📍 United States (SCCs applied under IT Act/DPDP framework)

Razorpay Software Private LimitedPrivacy Policy ↗

Payment processing for Premium subscriptions

📍 India

Anthropic PBCPrivacy Policy ↗

AI model inference for challenge feedback and Oracle responses

📍 United States (SCCs applied; message content processed for inference only, not retained for training)

We do not sell, rent, or trade your personal data with any other parties.

5. Data Localisation

In compliance with applicable Indian data localisation requirements, all primary personal data (account data, submissions, usage history) is stored on AWS ap-south-1 (Mumbai, India) via Supabase. Data transfers outside India (to Vercel, Resend, Anthropic) are limited to the minimum necessary for service delivery, are governed by appropriate safeguards, and do not involve persistent storage of personal data outside India.

6. Data Retention

We retain personal data for the following periods:

  • Account data: For the duration of your account plus 90 days after account deletion
  • Design submissions: For the duration of your account; anonymised data may be retained for platform analytics
  • Payment records: 7 years, as required under Indian accounting and tax laws
  • Grievance records: 3 years from resolution, as required under IT Rules 2021
  • Server logs: 90 days for security and debugging purposes

When data is no longer required, it is securely deleted or anonymised.

7. Your Rights under DPDP Act 2023

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

Right to access

You may request a summary of your personal data we hold and the purposes for which it is processed.

Right to correction

You may request correction of inaccurate or incomplete personal data.

Right to erasure

You may request deletion of your personal data where it is no longer necessary for the stated purposes, subject to legal retention obligations.

Right to grievance redressal

You may file a complaint with our Grievance Officer, who will respond within 15 days.

Right to nominate

You may nominate another individual to exercise your rights in the event of your death or incapacity.

Withdrawal of consent

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, email privacy@designerverse.in or use the in-app settings. We will respond within 30 days. For grievances, use our dedicated grievance portal for a 15-day SLA.

8. Cookies and Tracking

We use the following types of cookies:

  • Essential cookies: Required for authentication and session management (Supabase auth tokens). Cannot be disabled without breaking the Service.
  • Analytics cookies: If implemented, used to understand Platform usage in aggregate. We do not use Google Analytics or similar third-party advertising trackers.

We do not use third-party advertising cookies or cross-site tracking technologies.

9. Children's Privacy

Users between 13 and 18 years of age may use DesignerVerse only with verifiable parental consent, which is collected during the onboarding process. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided personal data without parental consent, we will promptly delete it. Parents or guardians who believe their child's data has been collected without consent should contact us at privacy@designerverse.in.

10. Grievance Officer

As required under Rule 13 of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and Section 13 of the DPDP Act 2023, we have designated a Grievance Officer:

Grievance Officer, DesignerVerse
Email: grievance@designerverse.in
Response time: within 15 days of receipt
→ File a grievance online

If you are not satisfied with our response, you may approach the Data Protection Board of India once constituted under the DPDP Act 2023.

11. Changes to This Policy

We may update this Privacy Policy periodically. For material changes, we will notify you via email at your registered address and/or by posting a prominent notice on the Platform at least 7 days before the change takes effect. The "Last updated" date at the top of this document reflects when the most recent changes were made. Continued use of the Platform after the effective date constitutes your acceptance of the revised Policy.

12. Contact Us

For all privacy-related queries: privacy@designerverse.in
For grievances: grievance@designerverse.in or the Grievance Portal.

Terms of ServiceConsent TermsGrievance Officer← Home