Privacy policy

OrnaStudio (“we”) provides an online studio that turns jewellery product photos into catalogue images. This policy covers ornastudio.in and the OrnaStudio app.

Questions or requests: contact@ornastudio.in. We reply within 7 working days.

• Account details: your email address, business name, contact name and city. Your password is stored only as a one-way hash; we can't read it.
• Your images and settings: the photos you upload, the SKU and file name you give them, the images we generate, your brand logo and brand-kit settings.
• Usage and billing records: which images you generated, with which style, the result, and your credit history.
• Security data: IP address, browser type and login times, used to protect accounts (rate limits, suspicious-login checks) and kept in server logs.

We don't use advertising or analytics cookies. The only cookies keep you signed in and protect forms against cross-site attacks; the app doesn't work without them.

• To run the service: store your photos, generate images, apply your logo and let you download the results.
• To manage your account and credits, and to send service emails such as email verification and password reset.
• To keep the service secure and working: preventing abuse, investigating errors and controlling costs.

We don't use your images to train AI models, and we don't use them in our demos or marketing without your written permission.

To create an image we send your photo and the style instructions to an AI image provider — currently Google (Gemini API), with OpenAI as a possible backup. We don't send your name, contact details, SKU, file name or logo. Your logo is added on our own servers after the AI step.

We use these providers under their paid API terms, which don't allow them to use the content we send to train their models. A provider may keep a copy for a limited time to detect abuse, under its own policy; deleting an image in OrnaStudio does not delete that copy.

Other providers that process data for us:

• Amazon Web Services — storage of your images in its Mumbai (India) region, and hosting.
• An email delivery provider — to send service emails.
• Sentry — error reports, which contain technical details only, not your images or form contents.

We don't sell your data or share it with anyone else, except where the law requires it.

• Images you delete disappear from your account and our storage straight away. Residual copies in storage versioning and backups are removed within 35 days.
• Images you keep stay until you delete them or close your account.
• Account details are kept while your account is open. When you ask us to close it, we delete your account, images and brand kit within 30 days.
• Credit and payment records may be kept longer where accounting or tax law requires it.

Photos are stored in private storage that is never publicly accessible; each download is checked against your account. Connections are encrypted (HTTPS). Staff access is limited to administrators who use two-step verification, and every administrative action is logged. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

• See and correct your business details in Settings.
• Delete any photo or generated image from My Creations.
• Ask for a copy of your data, or for your account to be closed and deleted, by emailing us.
• Withdraw consent or raise a complaint with our grievance contact below.

Grievance contact: contact@ornastudio.in. We acknowledge complaints within 7 days and aim to resolve them within 30 days.

OrnaStudio is a business service for people aged 18 and over.

If we change how we handle your data, we will update this page and, for important changes, email you before they apply. See also our terms of service.