Privacy Policy

This document is an electronic record in terms of the Information Technology Act, 2000 and the rules made thereunder. It is generated by a computer system and does not require any physical or digital signature.

The domain name Designesto.ai (the "Website") is owned and operated by Square Yards Technology Private Limited (the "Company", "we", "us" or "our"), incorporated under the provisions of the Companies Act, 2013, and having its registered office at 3-B, Rajindra Park, Pusa Road, near Rajendra Place Metro Station Gate no- 4 Old Rajinder Nagar New Delhi, 110060 India. The Website provides artificial-intelligence-assisted room and interior design visualization services (the "Platform" or "Services").

For the purpose of this Privacy Policy (the "Policy"), wherever the context so requires:

the terms "You" and "User" shall mean any legal person or entity accessing or using the services provided on this Website, who is competent to enter into binding contracts as per the provisions of the Indian Contract Act, 1872;

the terms "We", "Us" and "Our" shall mean the Website and/or the Company, as applicable;

the terms "Party" and "Parties" shall respectively refer to the User and the Company individually and collectively, as applicable; and

"Personal Information" shall mean information relating to you which, either directly or indirectly, in combination with other information available with us, can identify you.

Headings in this Policy are for reference purposes only and shall not affect the meaning or interpretation of any part of this Policy.

This Policy explains the Company's privacy practices and should be read with the Terms of Use available at https://www.designesto.ai/terms-and-conditions. Your use of the Website and Services is governed by the Terms of Use; this Policy is a notice about how we handle Personal Information.

The Company may amend this Policy by publishing a revised version with a revised effective date. Where a change materially affects how we use Personal Information, we will provide appropriate notice and obtain fresh consent where required by applicable law.

We collect and store only such minimal information as is necessary to provide the Service.

Information you provide to us - (a) your name, email address and password (stored only in hashed form) and, where you choose to provide it, a phone number for profile, authentication, account recovery or service communications; (b) images and files you upload, including photographs of premises, floor plans and reference images, together with metadata embedded in them; (c) prompts and the style, material, budget and other preferences you submit, and projects and designs you create and save; (d) transaction and billing information, including the Plan selected, Credits purchased and consumed, invoice history, billing address and GSTIN, if furnished; and (e) support tickets, emails, chats and feedback.

Information we collect automatically - your IP address, device and browser details, operating system, language and time-zone settings, the pages and features you access, generations requested, credits consumed, session timestamps, error and crash reports, cookies as described in clause 7, and the approximate area inferred from your IP address. We do not collect precise location unless you expressly enable it.

Your credit and debit card information is not received, stored or retained by the Company or the Website in any manner.

We obtain consent through a clear affirmative action before processing Personal Information where consent is the applicable legal basis. Consent for optional purposes, including analytics cookies, Model Improvement and marketing or showcase use, is requested separately from consent needed to provide the Services.

Consent is specific to the purpose described when it is requested. You may refuse an optional purpose without losing access to core Services, and we will seek fresh consent before using Personal Information for a materially different purpose.

You may withdraw consent, request access, correction or erasure, or object to a specific optional use by using the controls made available on the Platform or by writing to connect@designesto.ai. Withdrawal is as easy as giving consent and does not affect processing lawfully completed before withdrawal.

If withdrawal makes a requested feature impossible to provide, we will explain the consequence before completing the withdrawal. We will stop the relevant future processing within a reasonable period, subject to information that must be retained by law or for the establishment, exercise or defence of legal claims.

We process Personal Information only for lawful purposes connected with the Services, including to: (a) create and authenticate your Account, support optional phone-based authentication or recovery where offered, and provide support; (b) generate, deliver, store and retain Output in History; (c) account for Credits, process payments, issue invoices and comply with tax obligations; (d) prevent fraud and misuse, moderate content and secure the Platform; (e) carry out essential diagnostics and, where you consent, optional analytics; (f) train and improve models only where you have separately opted in under clause 5; (g) send service, security and transactional communications; (h) send marketing communications or showcase designs only where you have separately opted in; and (i) comply with law and exercise or defend legal claims.

We use your information only for the purpose for which it was collected and will not use it for any new and incompatible purpose without first informing you and obtaining your consent.

Where the laws of the European Economic Area or United Kingdom apply, our legal bases depend on the purpose and may include performance of our contract with you, compliance with a legal obligation, your consent, and our legitimate interests in securing, supporting and improving the Services where those interests are not overridden by your rights and interests. You may contact us for information about the legal basis applicable to a particular processing activity.

We will use uploaded images, Prompts or Output to train, fine-tune, test, evaluate or improve our image models, safety filters and related features (the "Model Improvement Purpose") only after you provide separate, express and optional consent. Where reasonably practicable, we remove direct identifiers and limit access to authorised personnel. Model-improvement datasets are stored in India. You may withdraw this consent at any time through the Platform or at connect@designesto.ai; withdrawal stops future inclusion and use of your source data and we will remove it from active training datasets within 30 days, unless retention is required by law. Withdrawal cannot reverse training runs already completed or require deletion of statistical model parameters that cannot reasonably be linked back to you. Service delivery, marketing/showcase use and Model Improvement are separate purposes and require separate permissions.

The Company stores customer data, History and model-improvement datasets on secure servers located in India. Service providers may transiently process limited data outside India where necessary to generate Output or provide a requested feature, subject to contractual safeguards, access controls and applicable law; such processing does not change the location of our primary customer-data storage. We do not transfer model-improvement datasets outside India.

The Company maintains a defined data governance framework which addresses (a) the type and duration of data stored; (b) restrictions on the use of data; (c) data destruction protocols; and (d) security breach response and incident handling procedures.

The Platform provides a History feature that retains uploaded images, Prompts and Output in your Account so that you may access, revisit, re-use and download them. History is a convenience feature and not a guaranteed backup or archival service, and you should retain your own copies. When you request Account deletion, access is disabled immediately and the request date is recorded. The Company manually deletes the Account, Personal Information, History and associated User Content from active systems no later than 30 days after the request, except information that must be retained by law or for fraud prevention, security, dispute resolution or legal claims. Operational backups follow our controlled rotation process and are not restored for ordinary user access; any deletion request is reapplied if a backup is restored.

Where Personal Information subject to European Economic Area or United Kingdom data-protection law is processed outside the relevant jurisdiction, we use an applicable lawful transfer mechanism where required, which may include the European Commission's Standard Contractual Clauses, the United Kingdom International Data Transfer Addendum, an adequacy decision, or another mechanism permitted by law.

The Website uses cookies and similar technologies. Strictly necessary cookies are used for authentication, security, session continuity and essential preferences and do not require optional analytics consent. We do not store your password in a cookie.

Google Analytics and Microsoft Clarity are optional analytics services. They are not loaded unless you select "Accept analytics" through our cookie banner. You may select "Decline" without losing access to core Services. We store your choice in a first-party cookie for up to six months. You may withdraw consent by clearing that cookie and revisiting the Website or by contacting connect@designesto.ai. Third-party analytics providers process information under their own privacy terms and our contractual arrangements.

We disclose Personal Information only where necessary for the stated purposes, where you direct us to do so, where separate consent is required and obtained, or where law permits or requires disclosure. Recipients may include: (a) artificial-intelligence model and inference providers used to generate requested Output; (b) cloud hosting, India-based storage, content-delivery and security providers; (c) payment gateways that process payment independently; (d) email delivery, support, CRM and, after analytics consent, analytics providers; (e) group companies providing internal administration, support or shared infrastructure; (f) professional advisers under confidentiality duties; (g) recipients with whom you choose to share a project or Output; (h) government authorities, regulators, law-enforcement agencies and courts where lawfully required; and (i) an acquirer in a merger, restructuring or sale, subject to protections no less protective than this Policy.

We share personal information only for the purposes stated in this Privacy Policy and only with entities necessary to provide the requested services or comply with applicable legal and regulatory obligations. We do not sell your personal information to third parties for their independent marketing purposes.

Transactions on the Website are secure and protected. Any information entered by the User when transacting on the Website is encrypted to protect the User against unintentional disclosure to third parties. The User's credit and debit card information is not received, stored by or retained by the Company / Website in any manner. This information is supplied by the User directly to the relevant payment aggregator/gateway which is authorized to handle the information provided and is compliant with the regulations and requirements of various banks and institutions and payment franchisees that it is associated with.

We maintain reasonable administrative, technical and organisational safeguards appropriate to the nature and risk of the information, including encryption in transit, access controls, authentication, monitoring and restricted personnel access. Encryption at rest is used where supported and appropriate. No internet-based service is completely secure. We do not receive or store complete card credentials or biometric information; payment credentials are handled by authorised payment processors.

Subject to applicable law, you may request access to a summary of Personal Information and processing activities, correction or completion of inaccurate information, erasure, withdrawal of consent, grievance redressal and nomination of another person to exercise rights in the event of death or incapacity. Requests may be sent to connect@designesto.ai. We may verify identity before acting on a request and will respond within the period required by applicable law.

If European Economic Area or United Kingdom data-protection law applies to you, you may also have rights to restrict processing, receive portable data, object to processing based on legitimate interests or direct marketing, and lodge a complaint with your local data-protection authority. You may withdraw consent at any time without affecting processing lawfully completed before withdrawal.

Under applicable United States state privacy laws, you may request to know, access, correct, delete or obtain a copy of covered Personal Information and, where applicable, opt out of its sale, sharing or use for targeted advertising. We do not sell Personal Information or share it for cross-context behavioural advertising.

We will not discriminate against you for exercising a privacy right. To submit a request, contact connect@designesto.ai. We may verify your identity and may require an authorised agent to provide evidence of authority, as permitted by applicable law.

In accordance with applicable information-technology, data-protection and consumer laws, the Company has designated the following Grievance Officer:

Children. The Platform is intended solely for persons aged 18 years and above. We do not knowingly collect or process information relating to a child. If we become aware that such information or an image of a child has been uploaded, we will delete it promptly. Please report any concern to connect@designesto.ai.

Third-party links. The Website may contain links to third-party websites and services. Optional third-party analytics are loaded only after analytics consent as described in clause 7. The Company is not responsible for the independent privacy practices or content of third-party sites, and you should review their notices before providing information.

Contact. Square Yards Technology Private Limited, registered office at 3-B, Rajindra Park, Pusa Road, near Rajendra Place Metro Station Gate No. 4, Old Rajinder Nagar, New Delhi 110060, India. Privacy and grievance queries: connect@designesto.ai. Legal notices: legal@designesto.ai.

This Policy and any dispute arising out of or in connection with it or the Platform shall be governed by and construed in accordance with the laws of India.

The courts at New Delhi, India shall have exclusive jurisdiction.