Privacy Policy

Last updated: [DATE — fill in when you publish this]

Before you publish this: this is a starting template, not legal advice. Have it reviewed by someone qualified before it goes live, especially since Digitoly processes payments and personal data of users in India (governed by the Digital Personal Data Protection Act, 2023). Replace every bracketed placeholder below with your real details.

This Privacy Policy explains what information Digitoly ("we", "us", "our") collects when you use digitoly.com (the "Service"), and how we use it.

Information we collect

Account information. When you sign up, we collect your email address and a password (stored securely, hashed, by our authentication provider — we never see your password in plain text).

Images you convert. Plain format conversion (JPG/PNG/WEBP) happens entirely in your browser — your images are never sent to our servers. Some features (like SVG Vectorize) require briefly uploading your image to our servers for processing; these files are deleted after processing and are not used for any purpose beyond fulfilling your request.

Payment information. Payments are processed by Razorpay. We do not store your card, UPI, or bank details — Razorpay handles that directly and shares with us only what's needed to manage your subscription (such as subscription status and renewal dates).

Usage data. We track how many conversions/downloads your account has used, to enforce free-tier and plan limits.

How we use this information

To provide and maintain the Service
To manage your account, subscription, and billing
To respond to support requests you send us
To detect and prevent abuse of the free tier or the Service generally

Third parties we work with

We rely on the following service providers to run Digitoly:

Supabase — account authentication and database storage
Vercel — hosting for our backend
Razorpay — payment processing and subscription billing

Each of these providers has its own privacy policy governing how they handle data on our behalf.

Cookies and local storage

We use your browser's local storage to keep you logged in and to remember your conversion history on your device. We do not currently use tracking cookies or third-party advertising cookies.

Data retention

We retain your account information for as long as your account is active. You can request deletion of your account and associated data by contacting us (see below).

Your rights

You can request access to, correction of, or deletion of your personal data at any time by contacting us at [PRIVACY CONTACT EMAIL].

Children's privacy

Digitoly is not directed at children under 18. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above when we do.

Contact us

Questions about this policy? Reach out via our Contact page or email [PRIVACY CONTACT EMAIL].