Privacy Policy

Cavions is a service operated by Commerzia Digital, a business based at Building No./Flat No. 5/257A8, Pallath Square, FACT Kalamassery Road, Kalamassery P.O., Kalamassery, Ernakulam, Kerala – 683104, India. References to “we”, “us”, or “Cavions” mean Commerzia Digital.

When you sign up, we collect your name, email address, and password (stored in hashed form — we never see your actual password). When you make a payment, billing details are collected and processed by our PCI-compliant payment partners; we do not store your full card or UPI credentials on our servers. When you create videos, we store your prompts, scripts, character settings, and rendered output files in our secure cloud storage so you can access them from your account.

We use your information to deliver the service, process payments, send transactional emails (receipts, render-complete notifications, account alerts), respond to support queries, and improve the product. We never sell your personal data to anyone.

We use first-party cookies to keep you logged in and to remember your preferences. We use privacy-respecting analytics to understand which features are used most — we do not use browser fingerprinting or cross-site tracking. You can disable cookies in your browser settings, though some parts of the service may stop working correctly.

We share data only with vetted service providers needed to run Cavions: cloud hosting (AWS Mumbai region), payment gateways (Razorpay, Cashfree, Stripe, NPCI / your UPI app), email delivery providers, and error monitoring tools. All such partners operate under signed data-processing agreements and are contractually bound to use your data only for the purpose of providing services to us.

Account data is retained for as long as your account is active. Generated videos are stored while your subscription is active, and for 30 days after cancellation, after which they are permanently deleted. You may request immediate deletion of your account and data at any time by writing to us.

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), you have the right to access, correct, export, or delete your personal data. You can exercise these rights from your account's Settings → Privacy section, or by emailing info@cavions.com. We respond within 30 days.

We use TLS 1.3 encryption for data in transit and AES-256 encryption for data at rest. Two-factor authentication is enforced for all staff access to production systems, and we conduct periodic third-party security reviews.

Cavions is not directed at children under 13. If we learn we have collected personal data from a child under 13 without verifiable parental consent, we will delete it immediately.

We will notify registered users by email at least 14 days before any material change to this policy.

For any privacy-related questions, write to us at info@cavions.com