Privacy policy

How the core app handles personal data

This policy explains how we collect, use, share, retain, and protect personal data when you use the Dhruvi Infinity core app and related public pages.

Last updated: 23 April 2026. This policy is drafted around UK data protection law and explains how international transfers are handled when services or infrastructure operate outside the UK.

Controller details

Dhruvi Infinity Inspiration Ltd

What data we collect

  • Account data such as email address, password hash, profile fields, and billing-linked account records.
  • Workspace content you create or upload, including planning notes, files, prompts, generated outputs, and support requests.
  • Technical and usage data such as sign-in activity, browser/device information, logs, IP-linked security records, and analytics-style event data used to operate the product.

Why we use it

  • Contract: to create accounts, deliver workspaces, process purchases, and provide customer support.
  • Legitimate interests: to secure the service, prevent abuse, monitor reliability, improve features, and investigate problems.
  • Consent: for non-essential cookies, optional marketing, and any optional features where consent is the appropriate basis.

What is required

Some data is necessary to form or perform a contract with you, including account identifiers, security credentials, and payment-related information.

If you do not provide required account or billing information, we may not be able to create your account, deliver paid features, or provide support safely.

Who receives data

We share data only where needed with payment processors, hosting and infrastructure providers, email and support tooling, AI processing providers, and professional advisers. We do not sell personal data.

International transfers

Where data is transferred outside the UK, we rely on adequacy regulations or appropriate safeguards such as the UK IDTA, the UK Addendum to standard contractual clauses, or equivalent lawful transfer mechanisms. You can request more detail or a copy of the relevant safeguard summary by emailing legal@dii.ltd.

Retention and security

We keep personal data only for as long as needed for the service, legal compliance, accounting, security, dispute handling, and backup recovery.

If a precise retention period is not practical, we use criteria such as account status, payment history, support history, and legal limitation periods. We use reasonable technical and organisational safeguards to protect the data we hold.

Cookies and similar technologies

We use cookies and similar technologies for essential site operation, authentication, security, and user experience. Some optional technologies may also support analytics or product improvement.

Where consent is legally required, we ask for it before using non-essential cookies or similar device-access technologies. Strictly necessary cookies may still be used without consent where they are essential to provide the service you requested.

Automated tools and AI

The platform uses automation and AI-assisted processing to support drafting, analysis, recommendations, and workflow summaries.

We do not currently make decisions that have legal or similarly significant effects on you solely by automated means through this core-app experience. Human review and user choice remain part of how outputs are used.

Your rights

Depending on the circumstances, you may have rights to access, rectify, erase, restrict, object, and port your personal data. If we rely on consent, you can withdraw that consent at any time, and it must be as easy to withdraw as to give.

Your right to object: where we rely on legitimate interests, you may object to that processing and we will review whether we have compelling grounds to continue.

To exercise a right, email legal@dii.ltd. You also have the right to complain to the ICO.

Updates to this policy

We may update this policy when the service, the law, or our processors change. The latest version will always be published here with the revised date.