Privacy Policy

This policy explains how DIGIrabbits Consulting Pvt. Ltd. ("we", "us"), registered at Kolkata, West Bengal, India, collects and uses personal data when you use AI Office Studio at https://studio.dodosweb.com. We follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

1. Who is responsible

For your account data (your name, e-mail, login and billing details) we decide how the data is used. We are the "data fiduciary".
For the content of your workspace (for example the names and addresses of your clients in a quotation), your business decides what goes in and why. We process that content on your behalf and only to provide the Service to you.

2. What we collect

Account: name, e-mail address, password (stored only as a one-way hash), optional two-step login secret (encrypted), language and time zone.
Workspace and brand details: business name, address, GSTIN and PAN, phone, e-mail, website, logo, and the bank and UPI details you choose to print on your documents.
Your content: documents, designs, uploaded photos and logos, AI prompts and the images and videos made for you.
Billing: plan, invoices, billing name, address and GSTIN. Card and UPI payments are handled by Razorpay or Stripe; we receive a payment reference and status, never your full card number.
Technical and security data: IP address, browser type, sign-in times, actions in the workspace's activity log, and records of blocked or refused AI requests.
Messages you send us through the contact form or by e-mail.

3. Why we use it

To create and run your account and workspace and to provide the features you use (contract with you).
To take payments, issue GST invoices and keep tax records (legal obligation).
To keep the Service secure, prevent fraud and misuse of free trials, and enforce our Acceptable Use Policy (legitimate use for security and legal compliance).
To answer your messages and send service e-mails such as sign-in links, invoices and important changes.
We do not sell personal data, do not show advertising and do not use your content to train AI models.

4. AI processing

When you use an AI feature, we send the AI provider only what that request needs:

AI writer, image and video studio: the text you type, the options you choose and, for images and videos, your brand colours;
writing a document with AI: your brief, the recipient's name, company and address you entered, and your brand kit's description and voice;
improving a document: the text of the sections you ask to improve, as written;
editing a photo or making a video from one: that photo.

We do not add your bank details, PAN, phone numbers, e-mail addresses or prices to a request — but if you type them into the text you send, they are part of it. Requests and results are checked by an automated safety model. We use the providers' paid business services, under terms that do not allow them to train their models on your data. Providers may keep requests for a short time to detect abuse.

We share data only with service providers who help us run the Service, under contracts that require them to protect it:

Hosting and storage: Hostinger International Ltd. (web servers and database)
AI models: Google (Gemini, Imagen, Veo) and OpenAI
Payments: Razorpay Software Pvt. Ltd. (India) and Stripe (other countries)
E-mail delivery: our e-mail service provider

We also share data when the law requires it, for example with tax or law-enforcement authorities on a valid legal request.

6. Transfers outside India

Some providers (for example the AI providers) process data on servers outside India. We transfer data only to countries not restricted by the Government of India, and only what each request needs.

7. How long we keep data

Account and workspace data: while your account or workspace exists.
After you delete a workspace: its content is deleted 30 days after your request. Invoices, payment records and the related tax details are kept for 8 years, as Indian tax and company law requires.
AI videos that you do not save to your library are deleted after 90 days.
Records of misuse (blocked requests, abuse reviews) and our team's notes about a workspace: up to 2 years, also after the workspace is deleted, to prevent repeated abuse.
Security and activity logs: up to 2 years.
Backups are overwritten in the normal backup cycle, after about 14 days.

8. Security

Passwords are hashed; two-step login secrets and other secrets are encrypted; every page is served over HTTPS; workspaces are strictly separated so that one customer can never see another customer's data; staff access to a workspace for support is time-limited and recorded in that workspace's activity log. No system is perfectly secure; if a breach affects your personal data we will tell you and the authorities as the law requires.

9. Your rights

You can:

see and correct your data: most of it in your account and workspace settings;
get a copy of your workspace data: Workspace settings › Export data;
delete your workspace (Workspace settings) or your account (Account › Privacy);
withdraw consent where we rely on it, and nominate a person to exercise your rights if you die or become unable to;
complain to our Grievance Officer (below) and, if you are not satisfied, to the Data Protection Board of India.

To exercise a right that you cannot use in the app, write to —. We may need to confirm your identity first.

10. Children

The Service is for businesses and is not meant for anyone under 18. We do not knowingly collect data of children.

11. Cookies

We use only the cookies the Service needs to work (sign-in session and security). See our Cookie Policy.

12. Grievance Officer

—, DIGIrabbits Consulting Pvt. Ltd., Kolkata, West Bengal, India. E-mail: —. We acknowledge complaints within 24 hours and resolve them within 15 days.

13. Changes

We will post any change to this policy here with a new date, and tell you in the app or by e-mail about important changes.