Privacy Policy
Last updated: November 10, 2025
1. Introduction
Avni Labs ("Avni Labs", "we", "our", "us") is a brand operated by Avnira Technology Private Limited, a company incorporated under the Companies Act, 2013, India (CIN: U62090DL2025PTC450720).
We are committed to protecting your privacy and personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable Indian laws.
This Privacy Policy explains how we collect, use, store, share, and protect your Personal Data when you access https://avnilabs.ai ("Website") or use our AI-powered tools, APIs, automation services, and related products ("Services").
By using our Website or Services, you acknowledge you have read, understood, and agree to this Privacy Policy.
2. Scope of This Policy
This Policy applies to:
- Website visitors
- Registered users
- API and automation users
- Enterprise and business clients
- Trial and marketing users
This Policy does not apply to third-party websites or services linked to our platform.
3. Definitions
- Personal Data: Any data about an identifiable individual.
- Processing: Any operation on Personal Data including collection, storage, usage, sharing, and deletion.
- Data Fiduciary: Avnira Technology Private Limited.
- Data Processor: Any entity processing Personal Data on behalf of Avni Labs.
- Data Principal: The individual whose Personal Data is processed.
- Consent: Freely given, specific, informed, unconditional, and unambiguous agreement.
4. Personal Data We Collect
4.1 Information You Provide
- Name, company name, designation
- Email address, phone number
- Login credentials
- Uploaded content (images, videos, audio, scripts, creative assets)
- API keys and automation data
- Payment details (processed via secure third-party gateways)
- Communications, feedback, and support interactions
We do not collect Aadhaar, PAN, or any government-issued identity numbers. We do not process biometric data, health data, or any other sensitive personal data as defined under applicable law.
We collect only the minimum personal data necessary for each stated purpose.
4.2 Information Collected Automatically
- IP address and device identifiers
- Browser and operating system details
- Usage analytics, logs, and performance data
- Cookies and similar technologies
4.3 Information From Third Parties
- Enterprise partners
- Social login providers
- Analytics and marketing platforms
5. Purpose of Processing
Your Personal Data is processed only for clear and lawful purposes. The table below maps each category of data to its specific purpose:
| Data Category | Purpose |
|---|---|
| Name, email, phone | Account creation, authentication, communication |
| Uploaded content (images, video, audio, scripts) | Delivering AI-powered video, image, voice, and automation services |
| API keys, automation data | API access and workflow execution |
| Payment details | Billing, invoicing, and compliance |
| IP address, device identifiers, logs | Platform security, fraud prevention, debugging |
| Usage analytics, cookies | Service improvement and performance optimisation |
| Communications and support interactions | Customer support |
All processing is limited strictly to the purposes stated above. Data will not be used for any purpose beyond what was consented to without obtaining fresh consent.
6. Consent Mechanism
Processing of your Personal Data is based on:
- Your explicit consent, or
- Legitimate purposes permitted under the DPDP Act, including:
- Performance of a contract to which you are a party (e.g. providing the Services you have subscribed to)
- Compliance with a legal obligation under Indian law
- Protection of vital interests of the Data Principal
Consent is obtained through clear affirmative actions such as:
- Checkbox acceptance
- Platform toggles
- Digital acknowledgments
Consent is purpose-specific. Separate consent is sought for each distinct processing purpose and consents are not bundled.
Withdrawing consent: You may withdraw your consent at any time with the same ease as it was given, through any of the following:
- Account Settings → Privacy → Manage Consent
- Email request to privacy@avnilabs.ai
Withdrawal of consent shall not affect the legality of processing prior to such withdrawal. Upon withdrawal:
- Processing for that purpose will cease immediately.
- Relevant data will be deleted within 30 days, unless retention is required by law.
- Certain Services or features dependent on that consent may become unavailable.
7. AI Processing & Model Training
- Uploaded content such as images, videos, audio files, scripts, and creative assets is processed solely for the purpose of providing the Services.
- AI model training is performed strictly on an explicit opt-in basis.
- Users may opt-out at any time, after which their data will no longer be used for training.
- We do not sell, rent, or publicly release identifiable user content for AI training or commercial use.
Logs and API payloads may be stored temporarily for:
- Debugging
- Security monitoring
- Fraud prevention
- Quality assurance
User Content Ownership: Users retain full ownership of all content uploaded to the platform. Avni Labs does not claim any intellectual property rights over user-generated content other than a limited license strictly necessary to provide the Services.
8. Data Sharing & Disclosure
We may share Personal Data with:
- Cloud hosting and AI infrastructure providers (e.g. Amazon Web Services, Google Cloud Platform)
- Payment processors (e.g. Razorpay, Stripe)
- Communication and analytics partners (e.g. email delivery and support tools)
- Government or legal authorities when required by law
- Successors in case of merger, acquisition, or restructuring
All Data Processors are bound by written contracts that require equivalent data protection and security standards as those maintained by Avni Labs.
We do not sell Personal Data for marketing purposes.
9. Data Retention
We retain Personal Data only for as long as necessary for the purpose for which it was collected. The following indicative retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and profile data | Duration of account + 90 days after deletion request |
| Uploaded content (images, video, audio) | Duration of active subscription + 30 days |
| API logs and automation data | 12 months from date of generation |
| Payment records | 7 years (as required under applicable law) |
| Security and access logs | Minimum 1 year for security and investigation purposes |
| Support communications | 3 years from last interaction |
Upon account deletion, or when consent is withdrawn, personal data will be erased within 30 days. Data Processors are also instructed to erase data accordingly. Aggregated or anonymised data (which cannot identify any individual) may be retained longer for analytics and model evaluation.
10. Data Security
We implement industry-standard safeguards including:
- Encryption in transit and at rest
- Secure cloud infrastructure with access controls
- Logging and monitoring
- Incident response mechanisms
However, no method of transmission is 100% secure. Users must safeguard their login credentials and API keys.
11. Cross-Border Data Transfers
Personal Data may be transferred outside India only to countries permitted by the Central Government under Section 16 of the DPDP Act, 2023. Where required, contractual and technical safeguards are applied.
12. Your Rights Under DPDP Act
You have the right to:
- Access a summary of your Personal Data and how it is being processed
- Correct inaccurate or misleading data
- Erase your Personal Data
- Withdraw consent at any time
- Nominate another person to exercise rights in case of death or incapacity
- Lodge a grievance with our Grievance Officer
- Escalate unresolved grievances to the Data Protection Board of India
How to exercise your rights: Submit a request by emailing privacy@avnilabs.ai or through Account Settings → Privacy. We will verify your identity and respond within 7 days. Complex requests may take up to 30 days; we will notify you if additional time is needed.
13. Right to Nominate
You may nominate any individual to exercise your rights under this Policy in the event of your death or incapacity.
14. Children's Privacy
Our Services are not intended for individuals under 18 years of age. We do not knowingly process children's personal data without verifiable parental consent. If such data is identified, it is deleted immediately.
15. Cookies & Tracking
We use cookies and similar technologies to improve performance, enhance security, analyse usage, and personalise user experience.
| Cookie Category | Purpose | Opt-out |
|---|---|---|
| Strictly necessary | Login sessions, security | Cannot be disabled |
| Analytics | Usage statistics and performance | Opt-out via cookie banner or browser settings |
| Personalisation | User preferences | Opt-out via cookie banner |
Non-essential cookies require your explicit opt-in consent via our cookie banner. You may update your cookie preferences at any time through the cookie settings link in the website footer.
16. Data Breach Notification
In the event of a personal data breach, we shall:
- Take immediate remedial action
- Notify affected users without undue delay
- Report the breach to the Data Protection Board of India and such other authorities as may be required under applicable law
- All breach handling shall follow the procedures prescribed under the Digital Personal Data Protection Act, 2023 and applicable rules.
17. Automated Decision Making
Where AI systems make decisions that significantly affect users, appropriate transparency and safeguards will be provided.
18. Changes to This Policy
We may update this Policy from time to time. Material changes will be notified via email, Website, or dashboard. The " Last updated" date at the top of this Policy reflects when it was last revised. Continued use indicates acceptance.
19. Grievance Redressal Officer
In accordance with the Digital Personal Data Protection Act, 2023:
Grievance Officer Details
Name: Prince Raj
Designation: Founder & Grievance Redressal Officer
Company: Avnira Technology Private Limited
Email: privacy@avnilabs.ai
Phone: 8882954335
Address: A/137-B G/F, Phase 5 Street No. 7, Aya Nagar, Delhi, India
You may file complaints regarding the processing of your Personal Data at the above contact details. Grievances will be acknowledged within 48 hours and resolved within 7 days.
If your grievance is not resolved within 7 days, you may escalate the matter to the Data Protection Board of India ( DPBI), the adjudicatory authority established under Section 18 of the DPDP Act, 2023, which operates under the Ministry of Electronics and Information Technology (MeitY). The DPBI operates as a digital-first body and complaints may be filed through its official portal once publicly notified by MeitY. For updates, refer to https://www.meity.gov.in.