Privacy Policy

What we collect

• Account details. If you sign in, we keep your email address (from Google, from Apple, which may give us a private relay address, or from the email you give us), your name if Google or Apple shares it, and, once mobile sign-in opens, your mobile number. We do not use passwords.
• Photos and selfies. When you make a film with a face, you either upload a photo or take a live selfie. A photo of a face can be treated as sensitive information, so we use it only as described under "Photos, selfies and faces" below.
• Words and choices. Names, dedications and messages you type, the film or Moment you choose, and who the film is for.
• Films. The films we make for you, and their pictures.
• Waitlist, wishes, feedback and enquiries. Your name, email, optional WhatsApp number and what you tell us.
• Payments (when paid films open). The payment reference, amount, and the email and phone given at payment. Payments are handled by Razorpay (and PayPal for international cards where offered). We never see or store card, UPI or bank details.
• Device and usage. Anonymous product activity (which steps were opened or finished), browser type, rough country from your phone's time zone, and security records to stop spam and repeated attempts. This does not include your photos or messages.

Why we use it

Photos, selfies and faces

• Used only for your film. A photo or selfie is used to place that person's face into the one film you asked for, and to check that it follows our rules.
• Who processes it. Films are made with AI by our technology partners. Today our main partner is Higgsfield (Higgsfield Inc., USA); photos may be processed on its servers outside India. We will list any new partner here before using it.
• AI training. Under its standard terms, our AI partner may use uploaded content to improve its own models. We are moving to a business agreement that does not allow this, and will update this section when we do.
• We don't keep your photos. Sitaaro deletes the photo or selfie as soon as the film is made, or 30 days after it was added if the film is never made.
• Your voice. If you choose "Add your voice", your short recording (up to 20 seconds) is stored privately and used only in that one film and its link. It is never copied, changed into another voice, used to train anything, or shared with anyone except the people you send the film to. Record only your own voice.
• We don't keep your film. The finished film stays in the maker's My Sitaaro and is deleted 1 year after it is first downloaded, so please also save your copy. If it is never downloaded, it is deleted 1 year after it was made. If the person who made it chooses "Keep my film online", it stays until they, or anyone in it, delete it (your photos are still deleted as soon as the film is made). Anyone in the film can delete it at once with "Delete now" or their private removal link. After deletion the film's link stops working.
• Our AI partner. We ask our partner to delete the photo and the film as well. Under its policy, deleted content is removed from its servers within 30 days. Backup copies at Sitaaro clear within 30 days.
• We never sell photos, use them to identify or track anyone, or show a film publicly unless the people in it choose to share it.

Who we share with

• Technology partners who help us run Sitaaro: AI film-making (Higgsfield), hosting and database (Lovable Cloud), sign-in (Google or Apple, if you choose them), email and SMS delivery, and analytics. They may use the data only to provide their service to us, except as stated under "Photos, selfies and faces".
• Payment partners (Razorpay, and PayPal where offered).
• The people you send a film to, through the link you share. Anyone with a film link can watch it.
• Authorities, when the law or a valid court or government order requires it, or to protect someone's safety.
• A buyer or successor, if Sitaaro or Navair Technologies is reorganised or sold, under the same protections.

Where data is stored

How long we keep it

• Photos and selfies: until the film is made, or 30 days at most.
• Films: 1 year after the first download, 1 year at most if never downloaded, or less if you delete it; or, if the maker chooses "Keep my film online", until it is deleted.
• Free word links: one year.
• Voice messages (if you add your voice): kept with that link for one year, then deleted; a voice you record again replaces the old one, which is deleted.
• Account details: while your account is active, and up to 30 days after you delete it.
• Payment records: as long as tax and accounting law requires.
• Waitlist, feedback and enquiries: until you ask us to delete them, or once no longer needed.

Your rights

Children

Security

Cookies and browser storage

Grievance Officer and contact

Changes