Privacy Policy
Last updated: 15 October 2026
1. The short version
- Your photos never leave your device. Yadink draws your picture inside your browser. We never receive, see or store your photos or the words you write on them.
- We collect only what we need to run accounts, sell Pro and meet the law.
- We do not sell your data or use your content to train AI.
2. What we collect
When you use Yadink without an account
- Nothing about your photos or text.
- Standard technical data any website receives (IP address, browser type, pages requested), handled by our hosting provider for security and delivery.
- Anonymous counts: we count visits and pictures saved per day and country. These counts are not linked to you, your device or your IP address.
- Picture log: each time you save a picture, your browser sends us a short receipt: a random picture ID (also shown next to the free mark and stored in the file's metadata), the date and time, your IP address, approximate country, browser type, and basic settings (size, border or on-photo, format, free or Pro). If you are signed in, it is linked to your account. It never includes your photo or your words. We keep it so that a reported picture can be traced, and to meet legal requests.
When you create an account or buy Pro
- Account: username, email address, a securely hashed password, when you confirmed your email and accepted our Terms, and your confirmation that you are 18 or over.
- Sign-in records: IP address, browser type and sign-in date for each signed-in device, kept until you sign out or the session expires (30 days).
- Billing details: name, country, state (for India, the place of supply for GST), and optionally phone number, address and GSTIN, shown on your invoices.
- Pro and purchases: whether you have Pro and how you got it, amounts, dates and invoice numbers.
- Messages you send us: name, email, message, and the IP address and country it was sent from. Kept for up to 1 year.
- Your choice about receiving updates and offers (optional).
Payments are handled by Razorpay. We never see or store your full card or bank details.
3. Why we use your data
- To provide Pro, process purchases and issue invoices.
- To send account emails: verification, recovery, purchase confirmations and account deletion.
- To prevent misuse and fraud, including tracing a reported picture through the picture log.
- To understand how Yadink is used, in total numbers only.
- To send occasional updates and offers, only if you opt in. You can withdraw any time on your account page.
- To meet legal, tax and regulatory obligations.
4. Advertising and cookies
- Free pages show two ads. One comes from Google AdSense. Google and its partners use cookies to show ads, including ads based on your visits to this and other websites. You can manage personalised advertising at Google's Ads Settings. Visitors in regions that require it are asked for consent first.
- The second ad is sold directly by us and served from our own systems, with no tracking. Advertisers receive only total counts of views and clicks.
- Accounts use a strictly necessary cookie to keep you signed in.
- With Pro, no ad code is loaded at all.
5. Who we share data with
We do not sell or share your personal data for anyone else's marketing. We use these service providers only as needed: Cloudflare (hosting, server functions, database), Razorpay (payments), Resend (account emails) and Google AdSense (ads on free pages). We share data with Indian authorities where the law requires. Some providers may process data outside India under their own security and privacy commitments.
6. How long we keep it
- Account and purchase data: while your account exists. After deletion, a minimal registration record is kept for 180 days as required under the Information Technology Rules, then removed.
- Invoices and payment records: for the period required by tax law, even after account deletion.
- Picture log: 1 year, then deleted automatically.
- Messages: up to 1 year. Anonymous daily counts: up to 3 years. Database backups: up to 30 days.
- If Yadink closes, we delete all of the above (except records the law requires us to keep, such as invoices) after the closure.
7. Your rights
Under Indian data protection law, including the Digital Personal Data Protection Act, 2023, you may ask to access, correct or delete your personal data, subject to our legal retention duties. You can download your data and delete your account yourself from your account page, or write to dzealai@gmail.com.
8. Security
We use password hashing, encrypted connections (HTTPS) and access controls. No system is completely secure.
9. Children
Accounts and purchases are only for people aged 18 or over. Younger users may use the free editor, which needs no account and collects no personal data, with the involvement of a parent, guardian or teacher.
10. Changes
We may update this policy; material changes are shown by the "Last updated" date.
11. Grievance Officer
- Name: Dr Lavkesh Bansal
- Email: dzealai@gmail.com
- Address: 5, Sahakar Nagar Market, Wadala-W, Mumbai-400031, Maharashtra, India
Complaints are acknowledged within 24 hours and resolved within the time required by law.