Privacy Policy
How NavratriPrompt handles accounts, photos, generated files, and service records.
Last updated: 2026-10-16
1. Who we are
The data controller for NavratriPrompt (https://navratriprompt.app) is LI KUN, an individual based in China, at China; contact support@navratriprompt.app for correspondence. Privacy and rights requests: support@navratriprompt.app.
2. What we collect
Account records: email, display name, sign-in method, session data, and settings. Google sign-in does not give us your Google password.
Generation records: uploads, settings, task status, output files, and credit use. Do not upload unnecessary personal or sensitive content.
Billing records: plan, order status, and credit grants or consumption. Checkout providers collect payment details. We do not store full card numbers.
Technical records: IP address, request time, browser data, and error logs, used to operate, debug, and secure the service.
Support and report records: correspondence, content reports, appeals, task identifiers and necessary evidence for support, safety review and disputes.
3. How we use it
We use this information to sign you in, run generations, keep your creations, process payments, send account email, answer support, prevent abuse, and meet legal duties.
Where applicable, account, generation, payment and support processing relies on contract performance; security, fraud prevention and moderation on legitimate interests; tax, regulatory compliance and lawful disclosure on legal obligations; optional marketing and tracking requiring consent on your consent. Consent can be withdrawn without affecting prior lawful processing.
5. Retention
Retention periods and backup deletion windows: Uploaded reference photos become eligible for automatic storage deletion after 1 day, and generated photos after 7 days; provider deletion may complete later. Download results promptly. Account records remain while the account is active. Contact support from your account email to request account or file deletion. Minimal task, credit, support and security records may remain as needed for outstanding requests, abuse prevention or legal obligations. Provider backups and independently processed copies follow the relevant provider’s policies. Data is deleted or anonymized when periods expire; legally required tax, dispute or security records are retained only as necessary. Download outputs you need to keep. Deletion requests: support@navratriprompt.app. Canceling a subscription does not delete your account or immediately erase data.
6. Your rights
Depending on applicable law, you may request information, access, correction, deletion, restriction, portability, objection and withdrawal of consent. Email support@navratriprompt.app from your account address and describe the request. We may verify identity and respond within the legally required timeframe; under GDPR this is normally one month, with reasons given for lawful extensions.
You may complain to your local data protection authority. We do not sell personal information or discriminate against you for exercising applicable privacy rights.
7. Contact
support@navratriprompt.app
8. Cookies, analytics and marketing
Necessary cookies support sign-in, security and core functionality; functional cookies remember preferences such as language. Analytics or marketing tracking that requires consent is enabled only with that consent. Manage cookies in your browser; disabling necessary cookies may affect sign-in.
Analytics tools and privacy policies: Cloudflare Web Analytics (https://www.cloudflare.com/privacypolicy/). Google Analytics and Vercel Analytics are disabled. Contact support@navratriprompt.app about choices or withdrawing consent.
Marketing communications require applicable consent. Unsubscribe through email links or by contacting us. Essential billing, security and account messages are separate from marketing preferences.
9. Security and incident handling
We use transmission, credential and access protections appropriate to risk. No system can guarantee absolute security; protect your credentials.
After a personal-data incident, we assess risk, contain and remediate it, and notify authorities and affected people as required by law. Where GDPR applies, reportable breaches normally require authority notification within 72 hours of awareness; individual notification follows applicable risk and legal requirements.
10. International transfers
Processing regions and safeguards: The operator is based in China. Hosting, storage, email and image processing may occur internationally, including the United States. Account data is stored in the selected US Neon region. The applicable providers’ processing locations and policies also apply. International processing must meet applicable law, using valid transfer mechanisms and supplementary protections where necessary.
11. Children
The service is for users aged 18 or older and is not directed to younger children. Contact support@navratriprompt.app about a child’s personal information; we will investigate and delete it or take protective measures as legally required.
12. Third parties and policy changes
Third-party sites and services follow their own privacy policies; review them before use.
Material changes receive at least 15 days’ notice through the website or registered email and an updated date. New purposes requiring consent will be subject to separate consent.
