Privacy Policy

Ekennis Software Service Limited (“Ekennis”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal information processed through DIHZINE Studio and related DIHZINE services.

DIHZINE Studio is an AI-powered packaging design and printing platform that enables customers to create, edit, save and download packaging designs and, where available, order printed packaging products.

This Privacy Policy explains how we collect, use, store, disclose and protect information when you visit our Platform, create an account, use AI design tools, upload files, purchase services, place orders or contact us.

For privacy-related requests or complaints, email info@dihzine.com with the subject “Privacy Request.”

Depending on the features you use, we may collect the following information.

We may use information to:

• Create and manage customer accounts.
• Generate, edit and save packaging design projects.
• Process uploaded logos, images and product information.
• Maintain design versions and prepare artwork for approval.
• Process orders, payments, refunds and invoices.
• Coordinate printing, fulfilment and delivery.
• Provide customer support and communicate order updates.
• Protect accounts, detect fraud and investigate security incidents.
• Troubleshoot errors and maintain service reliability.
• Comply with legal obligations and respond to lawful requests.
• Establish, exercise or defend legal claims.

We will not use personal information for a materially different purpose without an appropriate legal basis and any notice or consent required by law.

DIHZINE Studio is being developed and hosted using Lovable Cloud. Depending on the application's configuration, Lovable and its infrastructure providers may process customer information, account records, uploaded files, design projects, application logs and other data needed to operate the Platform.

We use this infrastructure to provide application functionality, store customer projects and support order workflows.

Lovable's processing of data submitted by users of applications built on its platform is distinct from its processing of information relating to the developer's own Lovable account and development activity.

We will use appropriate access controls and available contractual safeguards. The precise hosting region, applicable data-processing terms, subprocessors and retention arrangements must be confirmed against our actual Lovable Cloud configuration.

DIHZINE Studio plans to use the OpenAI API to provide AI-assisted design functionality.

When you request AI generation or editing, relevant prompts, product details, uploaded images or other content may be transmitted to OpenAI to fulfil that request.

OpenAI's API data policies state that API inputs and outputs are not used to train or improve its models by default, unless the customer explicitly opts in. Some API content may be retained in abuse-monitoring logs for up to 30 days by default, subject to applicable exceptions and approved data controls.

We will use the API in accordance with the applicable OpenAI terms and data controls. API credentials must be stored securely on the server side and not exposed in the customer-facing application.

We do not intend to use customer designs or unpublished brand assets for unrelated advertising or for training our own general-purpose AI models.

AI-generated content may contain errors. Customers must review packaging text, ingredients, nutrition information, regulatory declarations, logos and other design elements before approving artwork for printing.

Payments for design services and printing orders are planned to be processed through Cashfree Payments.

Cashfree may collect and process information required to complete transactions, authenticate payments, prevent fraud, comply with financial regulations and resolve payment disputes.

We may receive transaction references, payment status, amounts, timestamps and related information needed to fulfil orders, issue invoices and process refunds.

Cashfree processes information under its own applicable privacy policy and terms. Please review the Cashfree Privacy Policy.

We will not request or store your payment password, banking PIN or one-time password as part of our normal order records.

We may share information with the following categories of recipients when necessary and legally permitted:

• Lovable Cloud and infrastructure providers: to host and operate the Platform.
• OpenAI: to provide requested AI design functionality.
• Cashfree Payments: to process and verify transactions and refunds.
• Printing and delivery partners: to fulfil orders, using relevant delivery details and approved artwork.
• Professional advisers and authorities: where reasonably necessary for legal, regulatory, accounting or dispute-resolution purposes.
• Corporate transaction parties: where information must be transferred as part of a lawful merger, restructuring or business transfer.

We aim to limit information shared with each provider to what is reasonably necessary for the relevant purpose.

We do not sell personal information to third parties for money as a business practice. We do not currently intend to use separate advertising trackers or share customer data with advertising platforms for targeted advertising.

If our practices change, we will update this Policy and provide any notices, choices or consent mechanisms required by applicable law.

We understand that packaging artwork, logos, product concepts and brand assets may contain commercially valuable information.

We process this information to provide the design, editing, storage, order and support features you request.

Access to private customer projects should be limited to authorised personnel and service providers who need access for legitimate operational purposes, subject to applicable safeguards.

We will not publish your unpublished designs or use them in promotional materials without appropriate permission where required.

However, you should not assume that uploading a file creates a legally privileged relationship or guarantees absolute confidentiality. Avoid uploading trade secrets, sensitive personal information or confidential third-party information unless necessary and legally authorised.

DIHZINE Studio is planned to operate without separate non-essential analytics or advertising trackers.

Essential cookies or similar technologies may still be used for login sessions, authentication, security and necessary application functionality.

Lovable's own development and hosting services may process technical telemetry, diagnostics or operational logs under their applicable policies. These platform-level processes are distinct from our decision not to deploy separate analytics or advertising trackers on the customer-facing application.

If we introduce analytics, session recording, advertising pixels or other non-essential tracking, we will update this Policy and implement any required consent and preference controls before activating them.

Because our technology providers may operate infrastructure in different countries, information may be processed or stored outside India or outside the country where a customer resides.

The actual processing locations depend on the providers, selected regions and technical configuration.

Where international transfers are subject to legal restrictions, we will implement the transfer mechanisms, contractual safeguards, notices or other requirements applicable to the relevant processing.

We will not claim that data is stored exclusively in India unless our actual configuration and provider commitments support that statement.

We retain information for as long as reasonably necessary to provide the Services, manage accounts and orders, maintain records, resolve disputes, prevent fraud and comply with applicable law.

Retention may differ by information type:

• Account records: while an account is active and for a reasonable period afterward where necessary.
• Design projects and uploaded files: according to the saved-design functionality, disclosed retention settings and operational needs.
• Order and invoice records: for periods required by applicable tax, accounting and other laws.
• Payment references: as needed to reconcile payments, refunds and disputes.
• Support records: for a reasonable period needed to resolve requests and maintain records.
• Security logs and backups: for periods appropriate to security, recovery and legal requirements.

When information is no longer required, we will take appropriate steps to delete it, anonymise it or securely dispose of it, subject to legal retention requirements and technical limitations.

Deleting a project from our application may not immediately remove every copy held in provider systems, logs or backups. Some records may need to be retained by service providers or by us for a limited period or for legal reasons.

We aim to use appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

Measures may include access controls, secure transmission, role-based permissions, restricted access to project files, monitoring of security events and backup procedures.

No online platform can guarantee absolute security. We will assess and address security incidents in accordance with our applicable legal obligations, including any required notifications.

Depending on your location and applicable law, you may have rights to:

• Request access to personal information.
• Correct inaccurate or incomplete information.
• Request deletion, subject to lawful exceptions.
• Withdraw consent where processing is based on consent.
• Obtain a copy of certain information where applicable.
• Object to or request restrictions on certain processing.
• Raise a grievance with us or a competent authority.

To submit a request, email info@dihzine.com with the subject “Privacy Request”. Include enough information for us to identify the relevant account or project, but do not send passwords, full payment-card details or unnecessary sensitive information.

We may verify your identity or authority before acting. We will respond within the time limits prescribed by applicable law.

Certain records may need to be retained for tax, accounting, security, contractual or legal purposes. Where we cannot fully comply with a request, we will explain the applicable limitation where required by law.

We intend to process personal data in accordance with applicable Indian data-protection law, including the Digital Personal Data Protection Act, 2023, and applicable rules and provisions in force at the relevant time.

Where required, we will provide appropriate notices, identify the purposes of processing, establish lawful grounds for processing, provide consent-withdrawal mechanisms where applicable, and maintain grievance-handling procedures.

The exact obligations and commencement dates must be verified for the relevant processing activity before launch and as the law evolves.

Where applicable, we will comply with the privacy rights and obligations imposed by relevant local laws, which may include the GDPR, UK GDPR and applicable US state privacy laws.

Depending on the law and circumstances, rights may include access, correction, deletion, portability, objection, restriction, withdrawal of consent and opting out of certain regulated data-sharing activities.

We will provide additional notices, legal-basis information, transfer safeguards or opt-out mechanisms where required.

The availability of the Platform in another country does not mean that every service is available there or that every local regulatory requirement has been met automatically.

DIHZINE Studio is intended for users who are legally permitted to use the Services.

We do not intend to collect children's personal data where parental consent or other safeguards are required and have not been implemented.

If you believe a child has provided personal information inappropriately, contact info@dihzine.com. We will assess the request and take appropriate action under applicable law.

The Platform may rely on third-party services or link to external websites. These services may process information under their own privacy policies and terms.

This Policy governs our handling of information through DIHZINE Studio and does not independently govern information collected by third parties acting outside our control.

We may update this Policy to reflect changes in our Services, technology, providers, business practices or legal obligations.

The revised version will be published with an updated “Last Updated” date. Where required, we will provide additional notice or obtain consent before implementing material changes.

For privacy questions, requests or complaints, please contact:

We will review and respond to privacy grievances within the time limits required by applicable law.