Privacy Policy

Primit Studio (primitstudio.com) is operated by Amit Singh, an individual proprietor based in India("we", "us"). We act as the data controller for the personal data described here. This policy applies to our website and tools (the "Service"). If you have questions, contact info@primitstudio.com.

1. Data we collect

Account data

• Your name, email address, and password (stored only as a secure hash — we never see your plain password).
• Optional profile details you add, such as a phone number and an avatar selection.
• If you sign in with a third-party provider (such as Google), we receive basic profile information from them, such as your name and email address.

Content you submit

• The text and prompts you enter into our tools ("Input") and the results the tools generate ("Output"). This content is processed to provide the tool you requested.

Usage and billing data

• Your AI Coin balance, daily usage counts, and, for guests, a per-day usage record.
• For paid plans, limited billing metadata (such as plan, status, and a payment reference). Card details are handled by our payment processor — we do not store full card numbers.

Technical and anti-abuse data

• A guest identifier stored in a signed cookie, so we can apply the free daily allowance to visitors who are not signed in.
• A salted, hashed version of your IP address, used only to enforce daily rate limits and prevent abuse. We store the hash, not your raw IP address.
• Standard server and security logs generated when you use the Service.

2. How we use your data

• To provide, operate, and maintain the Service and its tools.
• To authenticate you, keep you signed in, and secure your account.
• To meter AI Coins, enforce daily limits, and prevent fraud and abuse.
• To process subscriptions and payments (when paid plans are live).
• To send you transactional emails, such as password-reset and account messages.
• To respond to your support requests and communications.
• To maintain, debug, and improve the Service, and to comply with legal obligations.

We rely on the following legal bases where applicable: performance of our contract with you, our legitimate interests (such as security and improving the Service), your consent (which you can withdraw), and compliance with law.

3. AI providers and how your content is processed

To generate Output, we send your Input to third-party AI model providers, which currently include:

• OpenAI — privacy policy
• Anthropic (Claude) — privacy policy
• Google (Gemini) — privacy policy

We do not use your Input or Output to train our own models, and we do not sell your content. We access these providers through their APIs and rely on their API terms, under which submitted content is generally not used to train their public models. However, each provider processes data under its own policies and may retain content for a limited period to operate, secure, or improve its services. Please review the linked policies, and avoid submitting sensitive personal information you would not want shared with a third-party AI provider.

4. Cookies and similar technologies

We use strictly necessary cookies to sign you in and to apply guest usage limits, and we store your theme preference locally in your browser. We do not use advertising cookies. See our Cookie Policy for details.

5. How we share data

We share personal data only with:

• Service providers (processors) that run the Service on our behalf — including AI model providers (above), our authentication provider, cloud hosting, our database provider, our email provider, and, for paid plans, our payment processor.
• Authorities or third parties where required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the Service.
• A successor in connection with a merger, acquisition, or sale of assets, subject to this policy.

We do not sell your personal data.

6. International transfers

We and our providers may process and store data on servers located outside your country, including our database hosted in Singapore and AI providers that operate globally. Where data is transferred internationally, we take reasonable steps to ensure it is protected consistently with this policy and applicable law.

7. Data retention

• Account data is kept while your account is active and for a reasonable period afterwards, or until you ask us to delete it.
• Guest usage records and anti-abuse hashes are short-lived and kept only as long as needed for rate-limiting and security.
• We may retain limited records longer where required for legal, tax, accounting, or dispute-resolution purposes.

8. Security

We use technical and organisational measures to protect your data, including encryption in transit (HTTPS), hashed passwords, and hashed IP addresses. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights

Depending on your location (including under India's Digital Personal Data Protection Act, 2023), you may have the right to access, correct, update, or delete your personal data, to withdraw consent, and to complain to a regulator. You can update most profile details from your account, or contact info@primitstudio.com to make a request. We will respond within the time required by applicable law.

10. Children

The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for material changes, take additional steps to notify you where appropriate.

12. Contact

For any privacy question or request, email info@primitstudio.com or use our contact page.