Privacy Policy

This Privacy Policy describes how ArtworkUpgrade("we", "us" or "our") collects, uses, stores and discloses personal information when you use the website artworkupgrade.com and its services ("Service"). This Policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (together, "Applicable Law").

1. Information We Collect

• Contact information you provide at checkout: email address and mobile number.
• Image files that you upload for conversion, temporarily processed for preview and download generation.
• Payment information: we do not store full card numbers, UPI PINs or banking credentials; our payment partner (Razorpay) processes these directly. We receive a payment reference, transaction ID, status, payment method and amount.
• Technical information: IP address, browser type, device identifiers, approximate location, referrer URL and timestamps, collected automatically via cookies and server logs.

2. Purposes of Processing

We process the information for the following purposes:

• to provide the Service, including generating previews and delivering paid output files;
• to verify payments and prevent fraudulent transactions;
• to send transactional messages such as receipts, download links and customer-support replies;
• to comply with legal, regulatory and tax obligations, including under the Central Goods and Services Tax Act, 2017;
• to maintain security, detect abuse and improve the Service.

3. Legal Basis

We rely on your consent (given when you upload a file and provide checkout details), on the performance of our contract with you, and on our legitimate interests in operating and securing the Service, as permitted under Applicable Law.

4. Retention

Uploaded images and derived preview files are retained only for the period needed to deliver the Service and, thereafter, for a limited buffer to support refund and dispute handling. Transaction and tax records are retained for the period required by Indian law (typically up to eight years). You may request earlier deletion by writing to our Grievance Officer, subject to legal retention obligations.

5. Sharing and Disclosure

We share personal information only with:

• Payment partners such as Razorpay, for processing payments;
• Cloud infrastructure and email providers that host our systems and deliver download links on our behalf;
• Professional advisers and auditors under confidentiality obligations;
• Law-enforcement or regulatory authorities where disclosure is required by law or a valid legal process.

We do not sell your personal information to third parties.

6. Cross-Border Transfers

Some of our service providers may process data on servers located outside India. Where this occurs, we take reasonable steps to ensure that your information receives a level of protection consistent with Applicable Law.

7. Security

We use reasonable security practices aligned with ISO/IEC 27001 principles, including HTTPS encryption, access controls, signed download links and limited-retention processing pipelines. However, no system is fully secure and we cannot guarantee absolute security of your information.

8. Cookies

We use a minimal set of first-party cookies and similar technologies to operate the Service, remember your session and understand aggregated usage. You may disable cookies in your browser; some features may not work as intended if you do so.

9. Your Rights

Subject to Applicable Law, you have the right to: access your personal data, seek correction of inaccurate data, request deletion, withdraw consent, and nominate another individual to exercise your rights in the event of death or incapacity. To exercise any of these rights, please write to our Grievance Officer at the address below. We may need to verify your identity before fulfilling a request.

10. Children

The Service is not directed at children below the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so that we may delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. Material changes will be highlighted where appropriate.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the name and contact details of our Grievance Officer are provided below. Complaints will be acknowledged within 24 hours and resolved within 15 days of receipt.

Grievance Officer: The Grievance Officer, ArtworkUpgrade
Email: support@artworkupgrade.com