Privacy Policy

Privacy Policy

Effective date: 23 July 2026

This Privacy Policy explains how Maveristic collects, uses, shares, protects and retains personal data in connection with Creative Lab. Maveristic ordinarily acts as the data fiduciary or controller for Creative Lab. An AI provider, payment processor, cloud service or Oryyn may act as a processor, service provider or independent controller for its own purposes.

1. Data we collect

• Account data, including name, email, mobile number, login records, eligibility confirmation and profile information.
• Billing data, including billing address, GST or tax details, top-up amount, currency, payment status, order and payment references, invoice details, refunds and fraud signals. Full payment-card credentials are ordinarily processed by Razorpay or banking partners.
• Creative data, including prompts, scripts, uploads, reference images, audio, video, voice, likeness, project names, settings, outputs, thumbnails and user-entered metadata.
• Technical data, including IP address, browser, device, session, cookies, crash logs, performance data, timestamps and security events.
• Usage and ledger data, including credit purchases, welcome-credit allocation, reservations, deductions, releases, restorations, provider jobs and feature use.
• Support and compliance data, including messages, grievances, appeals, infringement notices, consent evidence, identity or rights verification and safety reports.
• Oryyn transfer data, when requested, including the selected asset, creator identity, title, description, tags, rights declarations, provider/model, provenance and transaction identifiers.

2. How we use data

We use personal data to create and secure accounts; operate the workspace; route and recover generation jobs; moderate content; calculate and reconcile credits; process payments and invoices; prevent fraud; provide support; investigate complaints; comply with law; improve reliability; and perform a user-requested transfer to Oryyn.

We do not use private prompts, uploads or outputs to train a general-purpose public model without a separate clear disclosure and an applicable legal basis or choice. This statement does not prevent operational logging, safety review, fraud prevention, debugging, support, quality evaluation or processing by a selected provider under its disclosed terms.

3. Legal basis

Depending on the user and jurisdiction, processing may be necessary to perform a contract, respond to a request, comply with law, protect users and the service, prevent fraud, pursue legitimate operational interests or act on consent. Where consent is the basis, it may be withdrawn prospectively, subject to processing still needed for the service, security or law.

4. AI providers and international processing

Prompts, uploaded media and settings may be sent to the selected provider or another compatible provider disclosed by the product. Processing may occur outside India. Provider rules concerning retention, moderation, training and commercial use vary and should be shown in the live Provider Register.

Do not upload trade secrets, privileged information, regulated data, financial credentials, government identifiers, medical records or other highly sensitive material unless a feature expressly supports it and you are authorised to use that provider.

5. Payment processing

Razorpay and its banking or payment partners process payment credentials and transaction data under their own notices. Creative Lab receives the information needed to verify payment, allocate credits, issue records, prevent fraud and support disputes.

6. Sharing

We may share data with AI providers, Base44 and other platform infrastructure, cloud hosting and content-delivery vendors, payment processors, authentication and communication services, analytics tools activated in accordance with the Cookie Notice, professional advisers, authorities and transaction counterparties. We do not ordinarily sell personal data for money.

7. Oryyn transfer

Creative Lab transfers data to Oryyn only when a user initiates the relevant action or another clear legal basis applies. Oryyn then processes the transferred data under its own terms and privacy notice. Deleting an asset from Creative Lab does not automatically delete a separately accepted Oryyn copy.

8. Retention

Retention depends on account status, workspace use, provider rules, billing and tax obligations, security, legal claims, rights complaints and service continuity. Workspace files may be deleted when the user deletes them, the account is closed, a storage rule applies or the content violates policy.

Billing, credit-ledger, consent, acceptance, provenance, fraud, grievance, takedown and legal records may be retained longer where reasonably required to establish transactions, comply with law, prevent repeat abuse or defend claims. When data is no longer reasonably needed, we delete, anonymise or securely isolate it.

9. Security

We use proportionate administrative, technical and organisational safeguards, which may include access control, encrypted transmission, secret management, logging, environment separation, vendor review, backups and incident response. No online system is completely secure. Users must protect their accounts and independently back up important outputs.

10. Your choices and rights

Subject to applicable law, you may request information about processing, access, correction, deletion, consent withdrawal, restriction, objection, portability, nomination or grievance redressal. We may verify identity and may retain information required for security, billing, tax, rights, legal claims or another lawful purpose.

Submit a privacy request to canute@maveristic.com. Include the account email and the nature of the request, but do not send passwords or full payment-card details.

11. Automated moderation and fraud review

Automated systems may block a prompt, flag an output, estimate fraud or restrict a feature. These signals do not by themselves prove wrongdoing. Where required and reasonably feasible, significant restrictions may be reviewed through the grievance process.

12. Adults only

Creative Lab is intended for users aged 18 and above. We do not knowingly provide accounts to minors. Users must not upload a child's personal data, face or voice without lawful authority and an appropriate purpose; content involving minors may be restricted or blocked even when non-sexual.

13. Cookies

We use essential technologies for login, security, checkout and preferences. Optional analytics or marketing technologies will be used only with the consent or other basis required by applicable law. See the Cookie and Tracking Notice.

14. Changes and contact

We may update this Policy to reflect changes in law, providers or service operation. Material changes will be communicated reasonably. Privacy questions and requests: canute@maveristic.com. Grievances: visaj@maveristic.com.