Privacy policy.

DigiOne.ai ("DigiOne", "we") is a platform that lets creators sell digital products and lets buyers purchase them. This policy explains what personal data we collect, why we collect it, and the choices you have. It applies to creators, buyers, and visitors across digione.ai and every DigiOne-powered storefront.

For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act), DigiOne is the data fiduciary for the personal data described in this policy.

When you use DigiOne.ai, we collect:

• Account data — name, email address, and password when you register.

• Profile data — avatar, bio, and storefront details you choose to add.

• Transaction data — purchase history, payout records, and payment references. Card, UPI, and banking details are processed directly by our RBI-regulated payment partners — we never see or store your card number, CVV, or UPI PIN.

• KYC data (creators only) — identity and bank details required by law before payouts, stored encrypted.

• Usage data — pages visited, clicks, device type, browser, and IP address.

• Communications — emails or messages you send to our support team.

We use your information to:

• Provide, operate, and improve the DigiOne platform.

• Process payments, deliver purchased products, and pay out creators.

• Send transactional emails (receipts, password resets, important notices).

• Send optional marketing emails — you can unsubscribe anytime.

• Detect fraud and keep the platform secure.

• Comply with legal obligations, including Indian tax and payment regulations.

We process your personal data on the basis of the consent you give when you create an account, make a purchase, or submit a form — and for legitimate uses recognised by the DPDP Act, such as fulfilling a purchase you initiate, complying with law, and preventing fraud.

You may withdraw your consent at any time by writing to privacy@digione.ai. Withdrawal does not affect processing already carried out, and some data must still be retained where the law requires it.

We do not sell your personal data. We share data only with:

• Payment and payout partners — RBI-regulated payment gateways, to process transactions and creator payouts.

• Cloud infrastructure providers — who host the platform and storage under strict data-processing terms.

• The creator you buy from — order details needed to fulfil your purchase (your name, email, and the product bought). Creators must handle this data in line with applicable law.

• Analytics tools — to understand how the product is used.

• Law enforcement and regulators — when required by applicable law.

We use cookies and similar technologies to maintain your session, remember preferences, and analyse usage. You can disable cookies in your browser settings, though some platform features — like staying signed in — will not function correctly without them.

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where the law requires longer retention — for example, financial and tax records are kept for 7 years under Indian tax law.

As a data principal under the DPDP Act, you have the right to:

• Access — request a summary of the personal data we hold about you and how it is processed.

• Correction — have inaccurate or incomplete data corrected or updated.

• Erasure — request deletion of your personal data, subject to legal retention requirements.

• Grievance redressal — raise a complaint about how your data is handled (see below).

• Nomination — nominate a person to exercise these rights on your behalf in the event of death or incapacity.

Email privacy@digione.ai to exercise any of these rights. We verify identity before acting on requests.

We use industry-standard measures including TLS encryption in transit, AES-256 encryption at rest, row-level access controls, and encrypted storage for sensitive KYC data. See our Security Policy for the full picture. No system is completely secure — please use a strong, unique password.

DigiOne is intended for users aged 18 and above. We do not knowingly collect or process the personal data of children. If you believe a child has provided us personal data, write to privacy@digione.ai and we will delete it.

In accordance with the Information Technology Rules, 2021 and the DPDP Act, 2023, complaints about your personal data or this policy can be raised with our Grievance Officer:

• Grievance Officer: [Grievance Officer Name]

• Email: grievance@digione.ai

• Entity: DigiOne AI Tech Pvt. Ltd., Bangalore, Karnataka, India

Grievances are acknowledged within 48 hours and resolved within 15 days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

We may update this Privacy Policy from time to time. We will notify you via email or an in-app notice for material changes. Continued use of the platform after changes constitutes acceptance.