Privacy Policy

DhaagaX is an online business based in Surat, Gujarat, India ("we", "us"). We are the Data Fiduciary for the personal data described here.

• Account details — your name and email address. Passwords are stored only as a one-way hash. If you sign in with Google, we receive your name, email and profile picture from Google.
• Fabric photos you upload — used only to create the photoshoot you asked for.
• Generation details — the options you chose (pose, background, resolution and so on), and when you generated.
• Payment records — the pack you bought, the amount, and Razorpay's order and payment IDs. Card, UPI and bank details are entered on Razorpay's checkout and never reach us.
• Technical data — IP address, browser and device type, kept in server logs for security and troubleshooting.

• To run your account and generate the images you request.
• To process payments and keep your credit balance accurate.
• To send account emails — verification, password reset and payment confirmations. We do not send marketing email without your consent.
• To prevent fraud and abuse, and to keep the service secure.
• To answer your support requests.

We share data only with the service providers needed to run DhaagaX, and only what each one needs:

• fal.ai — processes your fabric photos to generate images. Its servers are outside India.
• Razorpay — processes payments.
• Google — only if you choose Sign in with Google.
• Email and hosting providers — deliver our emails and host the site and database.

We do not sell or rent your personal data, and we do not use your uploads to train AI models. We may disclose data when Indian law requires it.

• Fabric photos are never saved on our servers. They are sent to fal.ai for processing and handled under fal.ai's own retention policy.
• Generated images are deleted from our servers 120 minutes after they are created. Download anything you want to keep.
• Account data is kept while your account is open, and deleted when you ask us to close it.
• Payment records are kept for as long as Indian tax and accounting law requires.

We use one essential cookie to keep you signed in. We do not use advertising or third-party tracking cookies. Razorpay's checkout may set its own cookies while you pay.

Under the DPDP Act, 2023 you can:

• ask what personal data we hold about you;
• ask us to correct or update it;
• ask us to delete it and close your account;
• withdraw consent at any time, for future processing;
• nominate someone to exercise these rights for you;
• raise a grievance with us, and then with the Data Protection Board of India.

Email us at [email protected] to make a request. We reply within 30 days.

Data is sent over HTTPS, passwords are hashed, and access to our systems is restricted. No system is completely secure. If a breach affects your data, we will tell you and the Data Protection Board as the law requires.

DhaagaX is a business tool for people aged 18 and over. We do not knowingly collect data from children.

If we change this policy, we will update the date at the top. For significant changes, we will also email you.

For any privacy question or complaint, email [email protected]. We acknowledge grievances within 24 hours and resolve them within 15 days. See also the Contact page.