This policy explains what personal data Lens (lens.witsauce.com) collects, why, who sees it, and what choices you have. It is written to meet India's Digital Personal Data Protection Act, 2023 (DPDP Act), and we apply the same care to users in other regions, including the EU and UK.
1. Who is responsible for your data
Witsauce Studio (trade name WITSAUCE), a sole proprietorship registered in India, GSTIN 06ABZPW4306P1ZM, is the data fiduciary (the "controller") for personal data processed through Lens.
Registered address: 109, 8 Marla, Ram Nagar, Sonipat, Haryana, 131001
Contact: hello@witsauce.com
2. What we collect
Account data
- Email address, and your name if you sign in with Google
- Profile details you choose to add: company name, industry, role, company website, company size
Usage data
- Brands you search and analyse, modules you run, brands you unlock, and exports you request
- Your plan and credit balance, and how many free analyses you have used this month
Payment data
- Order records: pack bought, amount, GST, billing state, GSTIN if you give one, Razorpay payment and order IDs, and payment status
- Razorpay handles your card, UPI or bank details. We never receive or store them.
Technical data
- IP address, browser and device type, pages visited, and product analytics events
- Error and performance logs
3. Why we use it
- To create your account and provide Lens, including free analyses, unlocks and exports
- To process payments, issue receipts and meet tax and accounting rules
- To keep the service secure, prevent abuse and fix errors
- To understand how the product is used and improve it
- To reply to your messages and send service emails, such as receipts and export links
Our legal bases are your consent and the need to provide the service you asked for. For users in the EU and UK, we also rely on legitimate interests (security and product improvement) and legal obligations.
We do not sell your personal data. We do not use it for third-party advertising.
4. AI processing
To generate a report, we send the brand name you entered and public information about that brand to AI providers (currently Anthropic, and in some configurations OpenAI). We do not send your email address or payment details to these providers. Please do not type personal or confidential information into brand search fields.
5. Who we share data with
We use trusted service providers who process data on our behalf:
| Provider | What for |
|---|---|
| Google (Firebase, Google Cloud) | Sign-in, database, file storage, background jobs |
| Vercel | Hosting |
| Razorpay | Payment processing |
| Resend | Sending emails such as receipts and export links |
| Upstash | Caching and rate limiting |
| PostHog and Google Analytics | Product analytics |
| Sentry | Error monitoring |
| Anthropic, OpenAI | AI report generation (brand names and public data only) |
We may also disclose data when the law requires it, to protect our rights or users, or in a business transfer. We will tell you if that happens.
6. Where data is processed
Our providers may process data on servers outside India. Where the law restricts transfers to certain countries, we follow those restrictions.
7. How long we keep data
- Account and usage data: for as long as your account is active
- Order and payment records: as long as tax and accounting law requires
- Analytics and logs: for the period set in each provider's settings, normally not longer than needed for the purpose above
- Deleted accounts: see section 9
8. Security
We use access controls, encrypted connections and security rules on our database to protect your data. No system is perfectly secure, so please use a strong password and tell us promptly if you suspect misuse.
9. Your rights and how to use them
You can ask us to:
- give you a copy of your personal data and a summary of how it is processed
- correct or update your data (you can also edit profile details on your Account page)
- delete your account and personal data
- withdraw consent you gave us
- nominate someone to exercise your rights if you die or cannot act
- if you are in the EU or UK, also object to or restrict processing, and receive your data in a portable format
To delete your account or exercise any right:email hello@witsauce.com from the address on your account, with the subject "Data request". We will confirm your identity, and complete deletion within 30 days. Order and payment records we must keep by law will be retained, separated from your profile where possible.
10. Children
Lens is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
11. Cookies
We use cookies and similar technologies, explained in our Cookie Policy.
12. Grievance Officer
If you have a concern or complaint about how we handle your data:
- Name: Piyush Wadhwa
- Role: Grievance Officer, Witsauce Studio
- Email: piyush@witsauce.com
We will acknowledge your complaint within 3 business days and aim to resolve it within 30 days. If you are not satisfied, you may approach the Data Protection Board of India, or if you are in the EU or UK, your local data protection authority.
13. Changes to this policy
We may update this policy. We will change the "Last updated" date, and for material changes we will notify you by email or in the product.