Privacy Policy

01Who we are

JewelBoat is a design tool made by CohortIX ("we", "us"), based in Surat, Gujarat, India. We decide how your personal data is used for the service, so under the DPDP Act we are the Data Fiduciary for it.

02What we collect

• Account details: your name, email address and the date you accepted these terms. Your password is never stored as text: our sign-in provider keeps only a one-way bcrypt hash, so nobody, including us, can read it.
• Your designs: sketch and CAD photos you upload, the renders, views and 3D files made from them, design briefs and specs, notes, ratings and feedback.
• Credits: your credit balance and a record of every change to it. When paid top-ups launch, card and bank details are handled by the payment provider; we will not store full card numbers.
• Technical data: IP address, browser and device type, pages used, errors and timestamps, kept in server logs for security and to fix problems.

03How we use it

• To run the service: sign you in, store your designs and turn your sketches into renders, briefs and files.
• To send service emails: sign-up and password-reset codes, and notices about your account. No marketing email without your separate consent.
• To keep the service safe: limiting repeated sign-in attempts, preventing abuse and investigating misuse.
• To improve render quality: we automatically measure how closely each render follows its sketch and use those scores to test better instructions for the AI. This happens inside JewelBoat; your designs are not published or shared for this.
• To meet legal and accounting duties, such as keeping records of credit purchases.

04AI processing and service providers

To make renders and read designs, we send the image and the text instructions needed for that job to AI providers that work on our behalf: an image-generation service (currently Siray) and vision-language model providers reached through an OpenAI-compatible interface (for example OpenRouter or Google). Your data is stored and served by Supabase (database, file storage and sign-in).

These providers receive only what a job needs and process it to return the result. Their handling is also governed by their own terms. We do not sell your personal data and we do not share it for advertising.

05Your consent

We process your personal data on the basis of the consent you give when you create an account, and for the legitimate uses the DPDP Act allows (such as meeting a legal duty). You can withdraw consent at any time by asking us to delete your account; this stops future processing but does not undo processing that already happened.

06How long we keep it

• Designs: until you delete them or your account. Deleting a design removes its photos, renders and files.
• Account: while it is active. After you ask us to delete it, we erase your data within 30 days, except what the law requires us to keep.
• Credit and payment records: as long as tax and accounting law requires.
• Server logs: up to 90 days.

07Your rights

• Get a summary of the personal data we hold about you and how we use it.
• Correct or update inaccurate data, and complete missing data.
• Erase your data and close your account.
• Nominate another person to exercise these rights if you die or become unable to.
• Raise a grievance with us, and if we don't resolve it, with the Data Protection Board of India.

To use any of these rights, email us from the address on your account. We reply within 30 days.

08How we protect it

• Encrypted connections (HTTPS) between your browser and our servers.
• Passwords stored only as bcrypt hashes, with limits on repeated sign-in and code attempts.
• Database rules that let each account read only its own designs and files.
• Admin access limited to a few people, with changes to accounts and credits logged.

No system is perfectly secure. If a breach affects your data, we will tell you and the Data Protection Board as the law requires.

09Cookies and local storage

We use only essential cookies that keep you signed in. Your browser also remembers small preferences on your device, such as the light or dark theme. We do not use advertising or cross-site tracking cookies.

10Children

JewelBoat is for professionals and is not meant for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

11Data outside India

Some of our providers may store or process data outside India. We only use such transfers where Indian law allows them.

12Changes to this policy

If we change this policy in a way that matters, we will update the date above and tell you by email or in the app before the change applies.

13Contact and grievance officer

For privacy questions, requests or complaints, write to our Grievance Officer at the email below. Please include the email address of your account.