Privacy notice
Last updated 2 November 2026
This notice explains what personal data Ornavie collects on this website and in the Ornavie service, why we collect it, how long we keep it, who else processes it and how you can use your rights. It follows the Information Technology Act, 2000 and its rules on sensitive personal data (2011), which apply today, and the Digital Personal Data Protection Act, 2023 (the DPDP Act) and its Rules of 2025, most of which apply from 13 May 2027. We already give you the rights described below.
Who we are
For the personal data described here, Ornavie ("Ornavie", "we") collects and keeps it, decides why and how it is processed, and is its Data Fiduciary under the DPDP Act.
- Registered office
- 39, Road Number 3, Ram Das Bhatta, Bistupur, Jamshedpur, Jharkhand 831001
- Questions about personal data
- support@ornavie.in
What we collect and why
We collect only what each purpose needs. We do not sell personal data and do not use it for advertising.
| When | What we collect | Why | Basis |
|---|---|---|---|
| You send the Contact sales form | Name, shop name, city, phone or WhatsApp number, how many pieces you photograph a month | To reply to your enquiry by call or WhatsApp. If you tick the optional box, also to send you occasional news about Ornavie | Replying: you gave the details for that purpose (section 7(a) of the DPDP Act). News: your consent, which you can withdraw at any time |
| You create an account | Name, email address, password (stored only as a one-way hash), your organisation and your role in it | To give you the service, sign you in and keep your account secure | Your consent when you sign up |
| You set up your shop | Shop name, description, WhatsApp number and contact email | To show them on your catalogue so customers can reach you | Your consent; you choose what to publish |
| You use the studio | Photos you upload, the photographs and reels made from them, your approvals, credit use and requests for more credits | To make, review and publish photographs and reels, and to account for credits | Your consent and the service you asked for |
| Any request to our servers | IP address, device and browser details, time of the request, and counts of sign-in attempts | To keep the service running and secure, and to stop abuse such as repeated sign-in attempts | Legitimate use allowed by section 7 of the DPDP Act, and our duty to keep data secure |
Please upload photos of jewellery only. Do not upload photos of real, identifiable people unless they have agreed. The people shown wearing jewellery in Ornavie's photographs are generated by AI.
Data about a shop's customers
A shop can send a customer a private catalogue link with that customer's name, and customers can type a name when they shortlist pieces. We store these names, the pieces picked and when a link was opened, so that the shop can see them. For this data the shop is the Data Fiduciary and Ornavie processes it on the shop's behalf. A customer who wants to see, correct or erase it should ask the shop; we will help the shop do so. Shortlists expire after 30 days.
This website: no tracking
This website sets no cookies and runs no analytics, advertising or social-media trackers. Its pages, fonts, scripts, photographs and video are delivered by Cloudflare, which hosts this website: like any web host, it receives your IP address and browser details to send you the pages (see who else processes data). Nothing else on the page sends your details to anyone. If you press Pause motion, your browser remembers that choice on your device only; it is never sent to us.
If we ever add analytics or other non-essential cookies, we will ask for your consent first and update this notice.
Who else processes data
We use other companies only to run the service. Each processes data on our instructions and only for that purpose.
- Image and reel generation. Uploaded jewellery photos and the instructions for them are sent through OpenRouter, Inc. (United States) to the AI model providers that make the photographs. Ornavie only uses providers that OpenRouter lists as not collecting or training on the data sent to them.
- Hosting and storage. This website is delivered by Cloudflare, Inc. (United States) through its global network, which receives visitors’ IP addresses and browser details in order to serve the pages. The Ornavie service and its data, including enquiries sent from this website, are hosted by Chayan Ranpara on servers in India.
- Email. When you write to us, your message is handled by our email provider.
Some of these providers process data outside India. The DPDP Act allows this except to countries the Government of India restricts; we will stop any transfer to a restricted country.
We disclose personal data to a government authority only when Indian law requires it.
How long we keep it
- Sales enquiries: until we have answered you and for up to 12 months after our last conversation, then erased, unless you become a customer.
- Accounts, shops and their photographs: while the account is active. When you close it, we erase the photographs and shop details within 30 days. We keep your registration details (name, email address and organisation) for 180 days after closing, as the Information Technology Rules, 2021 require, and records such as invoices for as long as tax law requires.
- Security logs and sign-in counts: sign-in counts for about a day; other logs for one year, as the DPDP Rules require.
- Customers' shortlists: 30 days. Catalogue links last until the shop's chosen expiry.
Your rights and how to use them
Under the DPDP Act you can:
- withdraw your consent at any time, as easily as you gave it. We then stop processing that data, unless the law requires us to keep it. Withdrawing does not affect what was done before;
- get a summary of the personal data we hold about you, what we do with it, and who we have shared it with;
- correct, complete or update your data, and ask us to erase data we no longer need;
- nominate another person to use these rights for you if you die or cannot use them yourself;
- complain to us, and, if we do not resolve it, complain to the Data Protection Board of India (from 13 May 2027).
To use any of these rights, write to support@ornavie.in from the email address or phone number we have for you, or ask from your account. We may ask you to confirm who you are. We acknowledge every request within 48 hours and answer it within one month.
Complaints are handled by our Grievance Officer; the contact and grievances page explains the process and how to reach the Data Protection Board.
Security and breaches
We protect personal data with reasonable security safeguards: encrypted connections, passwords stored only as one-way hashes, private storage for uploaded photos, access limited to the people who need it, and logs of access. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the DPDP Rules require, with what happened, its likely consequences and what we are doing about it.
Children
Ornavie is a service for businesses and is not meant for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, write to us and we will erase it.
Changes and languages
When this notice changes, we update the date at the top. If a change affects how we use data you have already given us, we will tell you before it applies and ask again for consent where the law requires it.
You can ask for this notice in English or in any language listed in the Eighth Schedule to the Constitution of India by writing to support@ornavie.in.