Legal
Privacy Policy
This policy describes how RiFinder Technologies Pvt. Ltd. handles your data across Vani.ai, Chhavi, Chhavi Studio, and Sarvatraa. We take your privacy and your clients' privacy seriously.
Last Updated
March 12, 2026
1. Data We Collect
Photos & Visual Content
When you upload photos to Chhavi or Chhavi Studio, we store the image files securely on encrypted cloud infrastructure. We do not share your raw image files with third parties. You retain full copyright ownership of all content you upload.
EXIF & Camera Metadata
Photographs often contain embedded metadata including camera make and model, lens information, shutter speed, aperture, ISO, GPS coordinates, and timestamp. Vani.ai may use this metadata to power search, gallery organization, and creator workflows.
Account Information
Name, email address, profile photo, studio name, nominee details, and contact details you voluntarily provide when creating a RiFinder account.
Personal Life Data (Sarvatraa)
If you use Sarvatraa, financial records, health reports, personal notes, documents, task data, digital asset records, and legacy planning information are stored on your behalf. This data belongs entirely to you and is never sold.
Client & Studio Data (Chhavi Studio)
If you use Chhavi Studio, client names, contact details, booking information, gallery activity, invoices, and delivery records are stored on your behalf for studio operations.
Usage & Analytics Data
Page views, feature interactions, session duration, device type, browser, and operating system are collected via privacy-respecting analytics to improve our products.
2. AI Processing (Vani.ai)
How Vani.ai Processes Content
Vani.ai may analyze uploaded photos to power semantic search, face matching, EXIF intelligence, and gallery curation in Chhavi. In Sarvatraa, it may parse bank statements, health reports, notes, and conversational logs to turn messy inputs into structured private records.
Model Training
By default, your personal files, health data, financial records, photos, and client data are NOT used to train shared AI models. If you opt into a voluntary training program, we will clearly confirm your consent before using any specific content.
Face Recognition & Biometrics
Face recognition is an opt-in feature. Biometric data derived from client faces for gallery delivery is processed solely for that purpose, never sold, and handled according to applicable biometric privacy laws.
Data Retention for AI Features
AI-processed embeddings used for search and matching are retained while your account or relevant gallery is active. Deleting source content removes associated embeddings within a reasonable processing window.
4. Data Sharing & Disclosure
We Never Sell Your Data
RiFinder does not sell, rent, or broker your personal data, health data, financial records, photo content, or client information to third parties.
Service Providers
We use vetted sub-processors such as cloud hosting, payment processing, and email delivery under data processing agreements that prohibit them from using your data for any purpose other than providing services to us.
Legal Obligations
We may disclose information if required by applicable law, court order, or government request, and will notify you where legally permitted.
5. Your Rights
Access, Correction & Deletion
You may access, correct, or delete your personal data from account settings where available. Deletion requests are processed within a reasonable period according to applicable law.
Data Portability
Export your account data, including photos, metadata, studio records, invoices, documents, health logs, financial records, and AI embeddings, in standard formats where technically supported.
GDPR & Indian Data Protection Act
Users in the EU have rights under GDPR Articles 15-22. Indian users have rights under the Digital Personal Data Protection Act 2023. Contact [email protected] to exercise any right.
6. Security
Encryption
All data is encrypted in transit and at rest. Payment processing is handled by PCI-DSS compliant providers. We never store raw card numbers.
Access Controls
Strict internal role-based access controls ensure only team members who need access to specific systems can access them. Access is logged and audited.
7. Contact
Privacy Officer
Email: [email protected] Response time: within 5 business days RiFinder Technologies Pvt. Ltd., India