This Privacy Policy explains how Gameup Technologies Private Limited ("Gameup", "we", "us" or "our") collects, uses, discloses and protects information when you use DesiCMO (the "Service") at desicmo.com.
By using DesiCMO you agree to the practices described here. If you do not agree, please do not use the Service.
1. Who we are
DesiCMO is a product of Gameup Technologies Private Limited. For any questions about this policy or your data, contact us at officialdesicmo@gmail.com.
2. Information we collect
We collect the following categories of information:
- Account data — email address, name, profile photo (if provided), authentication tokens, password hash.
- Billing data — billing name, billing address, GST identifiers if applicable, transaction history, last four digits and brand of cards used. Full payment card numbers and bank details are processed directly by our payment gateway and are never stored on DesiCMO servers.
- User content — reference images, scene prompts, generated images and videos, captions, and other content you upload, generate or schedule through the Service.
- Usage data — pages visited, features used, requests made, time spent, click events, browser/device metadata, IP address (anonymised for analytics), referrer, language and locale.
- Communications — emails, support tickets, feedback, replies on our social handles.
- Cookies and similar technologies — see Section 7.
3. How we use information
- To provide the Service — render generations, schedule posts, store assets.
- To authenticate users and secure accounts.
- To process payments and prevent fraud.
- To improve product features and quality of AI generations.
- To send transactional emails (receipts, security alerts) and optional product updates.
- To enforce our Terms & Conditions and comply with legal obligations.
4. Legal bases for processing
Depending on your region, we rely on one or more of these legal bases:
- Performance of the contract you enter into when you sign up.
- Your consent, where required (e.g. optional marketing emails, certain cookies).
- Our legitimate interests in running, improving and securing the Service.
- Compliance with applicable law, including the Digital Personal Data Protection Act, 2023, the EU GDPR and the UK GDPR where applicable.
5. Third-party processors we use
DesiCMO relies on a small number of carefully selected sub-processors to deliver the Service. The current list is:
- Google Cloud Platform — hosting, storage, compute.
- Google Gemini API — AI image and language generation.
- Higgsfield — AI video generation for the Video Lab.
- Razorpay / Stripe — payment processing.
- Resend / Postmark — transactional email delivery.
- Google Analytics 4 — anonymised usage analytics.
- Meta, Google and X platform APIs — when you connect a social account for auto-posting.
We sign data processing agreements with all sub-processors where applicable and require equivalent privacy protections.
6. How we share information
We do not sell personal information. We may share data only with:
- Our sub-processors listed above, strictly to operate the Service.
- Regulators, courts or law enforcement when legally compelled.
- An acquirer in the event of a merger, acquisition or asset sale, subject to equivalent privacy obligations.
- Third parties you explicitly authorise (e.g. when you connect a social account).
7. Cookies and analytics
We use first-party cookies for authentication and session management and a small number of third-party cookies for analytics. We use Google Analytics 4 with IP anonymisation. You can disable non-essential cookies through your browser or via a future cookie banner.
8. Data retention
- Account data — for the lifetime of your account, plus 30 days after deletion.
- Billing records — 7 years to comply with tax law.
- Generated assets — until you delete them, with an automatic prune of unviewed assets older than 90 days on the Free tier.
- Logs — 90 days, then aggregated or deleted.
9. Your rights
Depending on your jurisdiction, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data, subject to legal retention requirements.
- Object to certain processing.
- Withdraw consent at any time where consent is the legal basis.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email officialdesicmo@gmail.com. We respond within 30 days.
10. Security
We use industry-standard security controls including TLS encryption in transit, encryption at rest for sensitive fields, principle-of-least-privilege access controls, and 24×7 logging. No system is perfectly secure; if you suspect a security incident contact us immediately at officialdesicmo@gmail.com.
11. International transfers
Our infrastructure is hosted on Google Cloud. Your data may be processed in data centres outside your country of residence. Where required by law we put in place Standard Contractual Clauses or equivalent transfer mechanisms.
12. Children
DesiCMO is not directed at and not intended for use by anyone under 18. If we learn that we have collected personal data of a minor, we will delete it.
13. Changes to this policy
We may update this Policy from time to time. Material changes will be notified by email or in-app banner at least 14 days before they take effect. The "Last updated" date at the top reflects the latest revision.
14. Contact
Gameup Technologies Private Limited
DesiCMO Privacy Office
officialdesicmo@gmail.com