Privacy Policy

Overview

Uruvaku ("we", "us") is an AI creative suite operated by Uruvaku Inc. This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it. If you are in the EU, UK, or California, this policy is written with GDPR, UK-GDPR, and CCPA/CPRA principles in mind.

Data we collect

• Account data: name, email, profile photo, organization, role. Provided by you or your Google account on sign-in.
• Workspace data: brand assets, projects, storyboards, generated media, and any content you or members upload.
• Usage data: app interactions, feature usage, credit consumption, and error telemetry, used to operate and improve the service.
• Billing data: handled by Stripe — we never store full card numbers. We retain billing history, plan, and subscription status.
• Device & log data: IP, browser, OS, timestamps. Retained for up to 90 days for security and troubleshooting.

How we use your data

• Operate the service (authenticate, render your workspace, generate media, bill you).
• Improve product quality and train internal usage heuristics — not third-party AI models, unless you opt in.
• Communicate about your account, security events, billing, and product updates you haven't opted out of.
• Prevent fraud, abuse, and security incidents.

Legal bases (GDPR)

Contract (delivering the service you signed up for), legitimate interest (improving the service, preventing abuse), consent (marketing email, optional analytics), and legal obligation (tax, accounting, responding to lawful requests).

Sharing & sub-processors

• Google Cloud & Firebase — hosting, authentication, storage (asia-south1).
• Stripe — payments.
• Vercel — web hosting and CDN.
• Google Gemini, OpenAI, and other AI model providers — only to process the specific content you send to the relevant feature. Provider retention policies apply.

We do not sell your personal data. We do not share it with advertisers.

International transfers

Primary hosting is in Mumbai (asia-south1). Personal data from the EEA/UK may be transferred to third countries where our sub-processors operate, under Standard Contractual Clauses or equivalent safeguards.

Your rights

You can access, correct, export, or delete your data at any time from account.uruvaku.com. You can also email privacy@uruvaku.com for formal requests. EEA/UK users have the right to lodge a complaint with their local supervisory authority.

Retention

Account and workspace data is retained while your account is active. Deleted workspaces are soft-deleted for 14 days, then permanently purged. Billing records are retained for 7 years to meet tax and accounting obligations.

Contact

Questions? Email privacy@uruvaku.com.