Draft for lawyer review. Not yet legal advice or a binding policy. Items in [brackets] must be filled in before launch.
Privacy notice
Last updated: [Date]
This notice explains how Ritely (“we”), operated by [Legal entity name], [registered address], handles your personal data under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000. We are the Data Fiduciary for the data described here.
What we collect
- Account: your email address and, if you sign in with Google, your Google account id and name.
- Your content: the videos you upload or record, and what we make from them: audio, transcript, captions, edits and exported reels.
- Preferences: your category, niche, caption language and style.
- Payments: order, subscription and payment ids from Razorpay. We never see or store your card number, UPI PIN or bank password.
- Photos and clips you add: stripped of location and camera metadata before we store them.
- Android app: if you allow notifications, a notification token from Google (Firebase Cloud Messaging) so we can tell you when a reel is ready. It is deleted when it stops working or you delete your account. If you buy a plan through Google Play, Google handles the payment and we receive the order id and subscription status.
- Security records: sign-in events, abuse-prevention signals (a keyed hash of your device and IP address) and rate-limit counters.
Why we use it
- To make your reels: transcribe your speech, design visuals and render the video.
- To run your account, apply your plan and credits, and process payments.
- To keep the service secure and prevent abuse, such as repeated free trials.
We do not sell your data, show you third-party ads, or use your videos to train AI models. We process your content on the basis of your consent and to perform the service you asked for.
Who processes it for us
We use service providers under contract: cloud hosting and storage ([hosting provider], Cloudflare R2), a transcription service (Deepgram), an AI model provider (OpenAI) for planning visuals from your transcript, GPU processing (RunPod), authentication and database (Supabase), payments (Razorpay, and Google Play for purchases in the Android app), and notifications in the Android app (Google Firebase Cloud Messaging). Some of them process data outside India. [Confirm data-transfer terms and locations with each provider.]
How long we keep it
- Uploaded originals: deleted automatically about 30 days after upload.
- Working files (transcripts, analysis): about 60 days. Exported reels: about 90 days. Previews: about 7 days.
- Security logs: about 13 months. Payment records: as long as tax law requires, without a link to a deleted account.
Your rights
You can access, correct or erase your personal data, withdraw consent, and nominate someone to exercise your rights. Delete your account and all its content at any time from Account in the app. For anything else, contact our Grievance Officer (below). You may also complain to the Data Protection Board of India.
Children
Ritely is for people aged 18 and over. We do not knowingly process children’s data. [Review verifiable parental consent requirements.]
Grievance Officer
[Name], Grievance Officer, [Legal entity name], [address]. Email: [grievance email]. We acknowledge complaints within 24 hours and resolve them within [15] days. See also Contact.