Aakhir baar update · 2026-09-01

Gopniyata neeti

Hum Karigar chalane ke liye jo data zaroori hai, bas wahi kam se kam ikattha karte hain. Is page par samjhaya gaya hai ki hum kya ikattha karte hain, kyun karte hain, GDPR aur Bharat ke kramik DPDP framework ke antargat kaun se kaanooni aadhar lagu hain, hum data kitne samay tak rakhte hain, kaun aur hamari taraf se ise process karta hai, aur aap apne adhikaron ka upyog kaise karein.

Hum kaun hain

Karigar ka sanchaalan photoGen dwara hota hai. Gopniyata ke sawaal, data-subject request, ya aapke data ke vyavahaar ko lekar koi chinta ho to support@karigar.studio par sampark karein. Ye pata hamara naimit gopniyata tatha shikayat sampark bhi hai.

Hum kya ikattha karte hain aur kyun

Email — sirf tab jab aap sign in karein. Magic-link sign-in aur pack kharidne ki rasid bhejne ke liye prayog hota hai. Kaanooni aadhar: contract ka anushthan (GDPR Art 6(1)(b)).
Aapki apload ki gayi photo — generation process ke liye sanchit hoti hain. 24 ghante baad hamare server se apne aap delete ho jaati hain. Kaanooni aadhar: contract ka anushthan.
Generate kiye gaye output — jab tak aapka account bana rahta hai, tab tak sanchit rakhe jaate hain taaki aap unhe dobara download kar saken. Kaanooni aadhar: contract ka anushthan.
IP-aadharit desh — aapke kshetra ke liye sahi currency, payment ke tareeke aur marketplace dikhane ke liye prayog hota hai. Thode samay ke liye ek cookie mein sanchit hota hai. Hum aapka IP address khud sanchit nahi karte; durupyog se bachaav ke liye hum sirf ek one-way salted hash rakhte hain, jise aapke address par wapas nahi badla ja sakta aur jo aapke account se juda nahi hota. Kaanooni aadhar: uchit hit (kshetriya seva pradaan).
Payment jaankari — poori tarah Razorpay dwara sambhaali jaati hai. Hum card ya UPI credentials kabhi nahi dekhte ya sanchit karte; humein sirf ek payment ID aur rakam milti hai. Kaanooni aadhar: contract ka anushthan.
Upyog analytics — yeh samajhne ke liye ki kaun se features ka upyog hota hai, gopniyata-mitra product analytics (PostHog). Ye consent banner se opt-in karne tak band rehta hai; aapki sveekaar se pehle koi analytics cookie set nahi hoti, aur aap apni sahmati footer mein Cookie settings se kabhi bhi wapas le sakte hain. Hum aapka account ID, naam, photo bytes ya payment data kabhi analytics se nahi jodte. Kaanooni aadhar: sahmati (GDPR Art 6(1)(a)); analytics cookie sirf pehle se di gayi sahmati ke baad hi set hoti hain.
Error monitoring — crash aur error report (Grafana Faro), taaki signup ya render ke dauran failure ka pata lagaya ja sake. Ye page load hote hi chalu ho jaata hai, kyunki consent banner se pehle hone wali galti ka bhi sudhaar zaroori hota hai. Isme photo bytes ya payment data shaamil nahi hota; text aur inputs mask kiye jaate hain, aur aapka account ID sirf tab judta hai jab aap identified analytics ke liye opt-in karein. Kaanooni aadhar: uchit hit (service chalu rakhna).

Hum iska upyog kaise karte hain

Sirf service chalane ke liye: photo generate karna, credit pradaan karna, payment process karna, durupyog rokna, bug theek karna, aur product flow behtar karna. Hum aapka data advertisers ko nahi bechte ya share karte. Jab tak aap saaf taur par opt-in na karein, hum marketing email nahi bhejte.

Aapka data aur kaun process karta hai

Website hosting, database aur authentication, private photo storage, image generation, payment, durupyog se suraksha, optional Google sign-in, sahmati wale product analytics, aur error monitoring ke liye hum teesri party ka upyog karte hain. Is processing ko unke lagoo contractual aur data-suraksha shartein niyantrit karti hain. Jahan personal data ka antarrashtriya transfer hota hai, wahan lagoo transfer-suraksha upaay, jaise Standard Contractual Clauses (SCCs) ya koi adequacy mechanism, laagu hote hain.

Vartaman naamit provider, unke uddeshya aur processing ke kshetr hamare sub-processors page par prakashit hain. Naya provider jodne se 14 din pehle hum signed-in users ko soochna dete hain.

Cookies

Hum do prakaar ke cookie ka upyog karte hain. Essential cookie aapko signed-in rakhte hain, aapki bhasha-pasand yaad rakhte hain, aur payment tatha marketplace chunav ke liye aapka IP-aadharit desh sath rakhte hain; ye hamesha chalu rehte hain kyunki inke bina site kaam nahi karti. Analytics cookie (PostHog) default par band hote hain aur consent banner par aapki sveekaar ke baad hi set hote hain; aap apni pasand kabhi bhi footer ke Cookie settings se badal sakte hain. Error monitoring (Grafana Faro) uchit hit ke tahat page load se hi chalta hai taaki failure ki jaanch ho sake।

Data rakhne ki avadhi

Apload ki gayi photo: 24 ghante (apne aap delete)
Generate kiye gaye output: jab tak aapka account bana rahta hai, tab tak sanchit
Server logs: 30 din
Hashed IP counters (abuse se bachav): jab tak ye is uddeshya ke liye kaam karte hain, tab tak rakhe jaate hain, phir hata diye jaate hain. Inme koi address nahi hota aur kisi account se koi link nahi hota.
Account data: jab aap apna account delete karte hain, to ye turant delete ho jaata hai. Payment aur invoice records (sirf payment ID aur raashi — kabhi photos, generated images ya doosra content nahi) Indian tax kanoon ki aavashyakta ke anusaar, adhik se adhik 8 saal tak rakhe jaate hain aur uske baad delete kar diye jaate hain.
Anti-abuse record: account delete hone ke baad hum signup email ka ek one-way salted hash rakhte hain — address khud kabhi nahi, aur ise ulta nahi kiya ja sakta. Ye sirf account dobara banakar baar-baar free-credit claim karne se bachne ke liye hai. Ye aapki pehchaan, photos ya activity se juda nahi hai. Kanooni aadhaar: legitimate interest (fraud prevention); sirf isi kanooni uddeshya ke liye rakha jaata hai.
Analytics events: 12 mahine ka rolling window

Aapke adhikaar

Hum neeche diye gaye controls bina kisi shulk ke dete hain. Jahan aap EU, EEA ya UK me hain, wahan GDPR ke adhikaar lagu hote hain. India ke sambandhit DPDP adhikaar Act ke kramik lagu hone par nirbhar hain, jo filhaal May 2027 se shuru hone ke liye nirdharit hain; hum pehle se hi wahi vyavaharik request channels dete hain:

Pahunch ka adhikaar — dekhein ki humare paas aapke baare me kaunsa data hai. /account par maujood “Export my data” button aapka account, credit history, generations aur purchases shaamil JSON download karta hai. Agar aapko aisa kuch chahiye jo isme shaamil nahi hai, to humein email karein aur hum baaki sab ek mahine ke andar bhej denge.
Sudhaar ka adhikaar — jo bhi galat ho use theek karein. Humein email karein aur hum use update kar denge.
Mitane ka adhikaar — apna account aur usse juda data delete karein. /account par maujood Delete account button aapke account, upload ki gayi photos, generated images aur credit history ko humare systems se turant delete kar deta hai. Humare processors apni copies apne-apne schedule par, humare saath ke apne terms ke tahat delete karte hain; agar aapko likhit pushti chahiye to humein email karein. Retention ke antargat do seemit exceptions ki soochi di gayi hai.
Data portability ka adhikaar — upar varnit wahi machine-readable JSON export use karein.
Processing ko seemit karne ya usse virodh karne ka adhikaar — footer ke Cookie settings se analytics band kar dein; doosre processing ke liye humein email karein.
Sahmati wapas lene ka adhikaar — footer ke Cookie settings se kabhi bhi analytics ki sahmati wapas le lein; iska asar sirf aane wali tracking par hota hai.
Shikayat darj karne ka adhikaar — apne sthaaniy Data Protection Authority (EU ya UK) se sampark karein, ya jahan DPDP framework anumati deta hai, wahan India ke Data Protection Board se sampark karein. Jahan laagu kanoon aapko woh adhikaar deta hai, wahan aapko pehle humse sampark karne ki zaroorat nahi.

Hum privacy aur data-subject requests ka jawab 30 din ke andar dene ka prayas karte hain aur laagu kanoon dwara aavashyak kisi bhi chhoti deadline ko poora karenge. Requests ke liye support@karigar.studio par email karein.

Umar

Karigar 18 saal ya usse zyada umar ke users ke liye hai. Hum jaan-boojh kar 18 se kam umar ke kisi se data collect nahi karte. India ke DPDP framework me, jab sambandhit praavadhaan lagu honge, tab 18 se kam umar ke har vyakti ko bachcha maana jaayega; GDPR Art 8 bhi bachchon ki sahmati se judi aavashyaktaayein rakhta hai jo har EU member state ke hisaab se alag hain. Agar aapko lagta hai ki humare paas kisi nabalig ka data bina uchit sahmati ke hai, to support@karigar.studio par email karein aur hum use delete kar denge.

Data breach ki suchna

Agar koi suraksha ghatna personal data ko prakat kar de, to hum: (1) jahan GDPR aavashyak banata hai, wahan 72 ghante ke andar sambandhit supervisory authority ko suchna denge aur jahan laagu DPDP praavadhaan aavashyak banate hain, wahan India ke Data Protection Board ko suchna denge, (2) jahan kanoon aavashyak banata hai, wahan prabhavit users ko bina anavashyik der ke suchna denge, aur (3) is page par ghatna ke baad ka saar prakashit karenge.

Shikayat Adhikaari

photoGen Karigar ko sanchalit karta hai. Aman Chirania, Shikayat Adhikaari, support@karigar.studio par sampark kiye ja sakte hain. Consumer e-commerce shikayaton ka swikaar 48 ghante ke andar kiya jaata hai aur unka samadhan ek mahine ke andar hota hai. Privacy requests Aapke adhikaar me varnit response avadhi aur kisi bhi laagu kanooni deadline ke anusaar hoti hain.

Is policy me badlaav

Agar hum koi saarthak badlaav karte hain — naya sub-processor jodna, retention windows badalna, ya hum jo data collect karte hain uske daayre ko badha dena — to hum “Last updated” ki tareekh update karenge aur badlaav lagu hone se 14 din pehle signed-in users ko email bhejenge. Sabse naya version hamesha yahan milta hai /privacy.

Sampark

Gopaniyata se juda koi bhi sawaal, anurodh ya shikayat: support@karigar.studio. Hum har email padhte hain.