Privacy Policy

We collect only the minimum necessary personal data required to provide and operate our platform services effectively:

• Account Details: When you register, we collect your name, email address, and encrypted authentication credentials (passwords hashed using bcrypt). If you authenticate using Google OAuth, we receive your verified Google profile email and display name.
• Billing & Transaction Records: When you purchase or upgrade a subscription, our payment processor (Razorpay) collects payment instrument details. We store only transaction identifiers, order IDs, amount, and subscription renewal timestamps. Raw credit card numbers or UPI MPINs are never received or stored on our servers.
• Usage & Execution Logs: We monitor tool usage counts, execution timestamps, processing success/failure statuses, and IP addresses to prevent abuse, enforce tier quotas, and optimize cluster capacity.
• Uploaded Files & Input Data: Content, images, videos, or documents uploaded to our tools are handled strictly as transient processing workloads under your unique authenticated user identifier.

Korevante Studio adheres to a strict data-minimization philosophy. We use collected information exclusively to:

• Deliver, execute, and render the outputs of our 50+ AI, Image, Video, PDF, and Developer tools.
• Manage user authentication sessions, role-based permissions, and 7-day trial eligibility.
• Process monthly subscription billing, invoice generation, and refund verifications via Razorpay.
• Communicate vital platform announcements, security alerts, and customer support resolutions.
• Detect and mitigate malicious activities, automated scraping, API flooding, and fraudulent chargebacks.

We do not sell, rent, monetize, or trade your personal information or uploaded assets to third-party data brokers or advertisers under any circumstances.

A fundamental principle of Korevante Studio is that you retain 100% full intellectual property ownership of all files, text, images, code, and prompts you input into our tools, as well as the resulting generated outputs.

No Training on Customer Data: We do NOT use your private inputs, uploaded documents, generated media, or proprietary scripts to train, fine-tune, or calibrate public AI foundation models. All third-party AI requests (such as OpenAI or Anthropic APIs) are dispatched via zero-retention enterprise API endpoints.

We employ multi-layered enterprise defense strategies to safeguard your data at all times:

• Encryption in Transit & At Rest: All data transmissions between your browser and our servers are encrypted using TLS 1.3. Stored database records and cloud storage buckets are encrypted using AES-256 standards.
• Ephemeral Tool Processing: Temporary intermediate files generated during video rendering, PDF splitting, or image compression are automatically purged from server temp storage immediately following task completion.
• User-Controlled Deletion: You can delete any saved project, file, or asset from your workspace at any time. Account deletion triggers a complete permanent erasure of all associated database entries within 30 days.

Regardless of your jurisdiction, we uphold universal privacy standards adhering to the Digital Personal Data Protection (DPDP) Act of India and the EU General Data Protection Regulation (GDPR):

• Right to Access: You can request a copy of all personal data held in association with your profile.
• Right to Rectification: You can update inaccurate profile information directly via Dashboard > Profile.
• Right to Erasure ("Right to be Forgotten"): You have the absolute right to have your entire account, usage logs, and billing references permanently deleted upon written request or via Settings.
• Right to Data Portability: You can export your saved projects, files, and generation history in standard machine-readable formats.

Korevante Studio uses strictly necessary first-party cookies to manage active authentication tokens (NextAuth JWT session cookies) and store your interface preferences (such as Light/Dark mode state).

We do NOT employ invasive cross-site tracking cookies, behavioral tracking pixels, or third-party fingerprinting scripts.

If you have questions, feedback, or requests regarding this Privacy Policy or your data rights, please contact our dedicated Data Protection Officer: