What we keep, and what stays yours.

Rituelle is operated by Sairaj Khope (sole proprietor) trading as Rituelle, based in India. For privacy questions, deletion requests, or data access, write to privacy@rituelle.art.

This policy explains what Rituelle collects, why, where it lives, and the rights you have over it. It applies whether you visit as a guest, sign in, or pay for a subscription.

The smallest amount we can. Specifically:

• Account: the email address you sign in with. Used to authenticate you and to send the magic-link, reminder, and account emails. Lawful basis: contract (GDPR Art 6(1)(b)).
• Your sketches: the PNG images you make, the date you made them, and a few drawing metrics (stroke count, session duration). Stored so your library exists. Lawful basis: contract.
• AI-generated interpretations: the title and short interpretation Rituelle writes for each sketch, plus a private Creative Wiki the system maintains about your visual patterns. The Wiki is never shown to anyone but is used to make future prompts feel more personal. Lawful basis: contract.
• Subscription state: whether you're in trial, active, past due, or canceled — plus a customer ID issued by our payment processor. We never see your card. Lawful basis: contract.
• Error reports: when something crashes, a stack trace and a generic device signature are sent to our monitoring tool. We avoid logging personal data inside errors. Lawful basis: legitimate interest (running a reliable service).

We do not sell, rent, or hand over your data to advertisers. We don't run any tracking pixels or third-party analytics.

We use a small number of vendors. Each receives only what they need to do their job.

• Supabase (Mumbai region) — primary storage for your account, sketches, and metadata.
• Anthropic (Claude) — your sketch image is sent briefly so Claude can write the title and interpretation. Per Anthropic's commercial terms, your content is not stored by Claude or used to train any model.
• Dodo Payments — our Merchant of Record for billing. They process payment details (we never see your card) and remit applicable taxes.
• Resend — sends the auth and reminder emails. They see your email address and the message we send.
• Sentry — receives error reports.
• Vercel — runs the website and serves it from edge locations worldwide.

Some of the vendors above (Anthropic, Resend, Sentry, Dodo, Vercel) process data outside India and the EU/EEA. Where transfers leave the EEA we rely on Standard Contractual Clauses or the EU-US Data Privacy Framework, depending on the vendor's certifications. Where transfers leave India under DPDP, we ensure the receiving country is not on the central government's restricted list.

• Your account, sketches, and Creative Wiki — until you ask us to delete them.
• Billing records — retained as required by tax law (typically seven years in India).
• Error logs — 30 days, then automatically purged.
• Email reminders — opt out anytime in Settings or via the unsubscribe link in any reminder.

When you delete your account, we erase everything within 30 days, except records we're legally required to retain (billing).

Under India's DPDP Act and the EU GDPR you have the following rights. We honor them for everyone regardless of where you live.

• Access & portability: download every sketch you've made plus a manifest from Settings → Your library → Download.
• Erasure: close your account and erase everything from Settings → Your library → Delete. Or write to privacy@rituelle.art.
• Rectification: update your email by writing to privacy@rituelle.art.
• Object & restrict: opt out of reminder emails in Settings.
• Lodge a complaint: in India with the Data Protection Board; in the EU with your local Data Protection Authority.

We aim to respond to any request within 30 days. If we need longer (e.g., for complex requests) we'll tell you why.

Rituelle uses only essential cookies — one set by Supabase to keep you signed in. We do not use advertising or analytics cookies. The signed-in cookie expires when you sign out.

Rituelle is not for anyone under 16. We do not knowingly create accounts for children. If you believe a child has signed up, write to privacy@rituelle.art and we'll delete the account.

We will update this page and email signed-in account holders before any change that materially reduces your privacy. The current revision date is at the top.