1. Introduction

This Privacy Policy explains how FineTune Studio ("we", "us", "our") collects, uses, shares, and protects your personal data when you use our AI model customization platform (the "Service"), and describes the rights available to you as a Data Principal under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

By using the Service, you consent to the collection and processing of your personal data as described in this policy. If you do not agree, please do not use the Service.

2. Who We Are (Data Fiduciary)

FineTune Studio is currently operated as an individually-owned (sole proprietor) service based in Coimbatore, Tamil Nadu, India. For the purposes of the DPDP Act, the operator of FineTune Studio is the "Data Fiduciary" responsible for your personal data.

3. Personal Data We Collect

We collect only the data needed to provide the Service:

Account data: name, email address, and password (stored as a secure hash, never in plain text)
Payment data: name, email, and phone number shared with our payment processor, Cashfree, to process subscriptions. We never see or store your card, UPI, or bank details ourselves.
Service content: the prompts, messages, and model configurations you create or send while using the Service
Technical data: IP address and device fingerprint, used only for fraud and abuse prevention (e.g. limiting fake account creation)
Communications: anything you send us via the contact form or support email

4. How We Use Your Data

To create and secure your account, and authenticate you when you log in
To provide the core Service: running your prompts through AI models and returning responses
To process payments and manage your subscription
To prevent fraud, spam, and abuse of the platform
To respond to support and contact requests
To comply with Indian tax, accounting, and other legal obligations

We do not use your data for third-party advertising, and we do not sell your personal data to anyone.

5. Who We Share Data With

We share the minimum data necessary with the following service providers (Data Processors) to operate FineTune Studio:

Cashfree Payments (India) — processes subscription payments using your name, email, and phone number
MongoDB Atlas — hosts our application database
AI inference providers (including NVIDIA NIM, Groq, and DeepInfra) — process the prompts and messages you submit in order to generate AI responses. These providers may process data outside India.
Resend — delivers transactional emails (e.g. verification codes, account notices)
Oracle Cloud Infrastructure — hosts our application servers

We require these providers to use your data only to perform the service they provide to us, not for their own independent purposes.

6. Cross-Border Data Transfers

Some of the service providers listed above may process your data outside India. The DPDP Act permits such transfers except to countries specifically restricted by the Central Government; as of the date above, no such restriction affects our processors. We only work with providers that maintain industry-standard security practices.

7. Data Retention

Account and usage data is retained for as long as your account is active.
If you delete your account, your profile, prompts, models, and usage history are erased promptly.
Payment and transaction records are retained in anonymized form for the period required under Indian tax and financial regulations (typically up to 8 years), even after account deletion, since we are legally required to keep evidence of transactions.

8. Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

Access a summary of the personal data we hold about you
Correct inaccurate or incomplete data, and update your profile at any time
Erase your personal data once it is no longer needed for the purpose it was collected
Withdraw consent at any time, which you can do by deleting your account
Grievance redressal — raise a complaint with our Grievance Officer (below), and escalate to the Data Protection Board of India if unresolved
Nominate another individual to exercise these rights on your behalf in the event of death or incapacity, by contacting our Grievance Officer

9. How to Exercise Your Rights

You can export a copy of your data or delete your account at any time from Dashboard → Settings. Deleting your account erases your profile, models, prompts, and usage history immediately; a minimal, anonymized payment record is retained as described in Section 7. For any other request, contact our Grievance Officer below.

10. Children's Data

The Service is intended for users who are 18 years of age or older. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will delete it promptly.

11. Data Security

We apply reasonable technical and organizational safeguards to protect your data, including password hashing (bcrypt), encrypted connections (HTTPS/TLS), and access controls on our infrastructure. No system is perfectly secure, but we take reasonable steps appropriate to the nature of the data we hold.

12. Data Breach Notification

In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required under the DPDP Act and its rules.

13. Grievance Officer

For any questions, complaints, or requests regarding your personal data, please contact our Grievance Officer:

Email: skpvikaash@gmail.com
Phone: +91 6383069860
Address: Coimbatore, Tamil Nadu, India

We aim to acknowledge and resolve grievances within 30 days.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and significant changes will be communicated via email or an in-app notice.

15. Contact Us

See our Contact page, or reach the Grievance Officer directly using the details in Section 13. See also our Terms and Conditions.