Privacy Policy

This Policy explains what Dimensionleap Technologies Pvt. Ltd. ("Kraftflix," "we," "us") collects when you use Kraftflix — including the Spotlight and Blueprint products — why we collect it, and the rights you have over it under the DPDP Act and other applicable law. Your creative content belongs to you; this page is about the personal data around it.

1. Information we collect

• Account information — name, email, password (hashed), and authentication details.
• Profile & workspace — organisation name, role, team membership, seat assignments.
• Usage & device data — actions taken in the product, credits consumed, IP address, browser/device type, and technical logs used to operate, secure and debug the Service.
• Payment data — handled by our payment processor; we store limited billing metadata (plan, invoice history, GSTIN if provided). We do not store full card numbers.
• Your content — the scripts, prompts, uploaded media, and projects you create, which may itself contain personal data (e.g. a real person's name or likeness referenced in a script).
• Communications — support requests, feedback, and correspondence with us.

2. Creative content & ownership

Your content belongs to you. We do not sell it, and we do not use it to train models we make available to other customers or the public. Generated outputs are private by default and accessible only to you and the collaborators you explicitly invite. See the Terms of Service for how AI-generated output ownership works.

3. How we use information

We process personal data to: provide and maintain the Service; process payments and manage your credit balance; secure the platform and detect abuse; respond to support requests; send service-related communications (and, only with your consent, product updates); and meet legal and tax obligations.

4. Legal basis & consent

Where the DPDP Act applies, we process personal data on the basis of your consent (for example, when you create an account) or as otherwise permitted by law — such as compliance with a legal obligation, or "legitimate uses" like responding to a request you've made. You can withdraw consent at any time from account settings or by contacting us, without affecting processing already carried out lawfully before withdrawal. Withdrawing consent for data we need to run the Service may mean we can no longer provide it to you.

5. Data sharing

• Service providers — cloud infrastructure, storage, and payment processors, acting under contract and only for the purposes we specify.
• Legal & safety — where required by law, court order, or to protect the rights, property or safety of Kraftflix, our users, or the public.
• Business transfers — as part of a merger, financing, or asset sale, subject to this Policy continuing to apply to your data.

We do not sell personal data. A current list of subprocessors is available on request via the Trust & Security page.

6. Cross-border data transfer

Kraftflix is based in India and primarily processes data there. Where data is transferred outside India (for example, to a cloud provider's regional infrastructure), we take steps to ensure it remains protected consistent with the DPDP Act and this Policy. [To confirm before publishing: name the specific countries/regions data may be processed in, once infrastructure is finalised.]

7. Data storage & security

We use encryption in transit and at rest and access controls scoped to production media workflows. In the event of a personal-data breach likely to cause harm, we will notify the Data Protection Board of India and affected users as required under the DPDP Rules. See the Security page for detail on our current controls and certification status.

8. Cookies & analytics

We use essential cookies required to run the Service, and privacy-respecting analytics to understand aggregate usage (not to build individual ad profiles). Where analytics or non-essential cookies require consent under applicable law, we'll ask for it before they load.

9. Data retention

We retain personal data for as long as your account is active and as needed to provide the Service, plus any additional period required for tax, accounting, or legal-dispute purposes. When you delete your account, we delete or anonymise personal data within a reasonable period, except where retention is legally required.

10. Your rights

Subject to applicable law, including the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how it's being processed.
• Correct or update inaccurate or incomplete personal data.
• Erase personal data that's no longer needed for the purpose it was collected, subject to legal retention requirements.
• Withdraw consent at any time, as described in Section 4.
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
• Register a complaint with us, and if unresolved, with the Data Protection Board of India.

To exercise any of these rights, email our Grievance Officer (below). We aim to respond within 30 days.

11. Children's data

The Service is not directed at children under 18, and we do not knowingly collect personal data from them without verifiable parental consent. If you believe a child has provided us data, contact us and we'll act promptly to remove it.

12. Grievance Officer & contact

As required under the DPDP Act, Kraftflix has designated a Grievance Officer to handle privacy-related complaints and requests. Name and direct contact to be added before publishing — until then, reach us at hello@dimensionleap.com with the subject line "Privacy request."

13. Changes to this Policy

We may update this Policy as our practices, the product, or the law evolve. Material changes will be notified in-product or by email. This Policy is governed by the laws of India.