EcomFlash ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at ecomflash.jinzy.com and our iOS and Android mobile application (collectively, the "Service"). Please read this policy carefully.
Account information: When you create an account, we collect your email address and a hashed password. If you sign up via Google Sign-In or Apple Sign-In, we receive your email address and a unique identifier from those providers. We never receive or store your Google or Apple password.
Images: We store the product images you upload and the AI-generated images we produce for your account.
Usage and analytics data: We collect information about how you use the Service, including pages visited, features used, generation events, and interaction patterns. This data is collected via PostHog and Google Analytics / Google Tag Manager.
Device and technical data: We automatically collect your IP address, browser type and version, operating system, device identifiers, and referring URLs when you access the Service.
Payment information: We do not store your payment card details. Payments on the web are processed by LemonSqueezy. iOS in-app purchases are processed by Apple. iOS subscription management is handled by RevenueCat. These providers have their own privacy policies.
Communications: If you contact us via the contact form or email, we store your messages to respond to you.
We do not sell your personal data to third parties. We do not use your data for advertising targeting.
If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:
If you are located in India, we process your personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"). Under the DPDP Act, EcomFlash acts as a "Data Fiduciary" and you are the "Data Principal." Our legal bases for processing include:
You may withdraw consent at any time with the same ease with which it was given, without affecting the lawfulness of processing carried out before withdrawal.
We share your data with the following third-party service providers only to the extent necessary to provide the Service:
Essential cookies: We use a session cookie to keep you logged in. This is required for the Service to function.
Analytics cookies: We use Google Analytics (via Google Tag Manager) and PostHog to understand how users interact with the Service. These tools may set cookies and collect IP addresses and usage data. You can reject analytics cookies using the cookie banner shown on your first visit.
You may control cookies through your browser settings. Disabling essential cookies may prevent you from logging in.
Your data may be transferred to and processed in countries outside your country of residence, including the United States, where our third-party service providers operate. We take reasonable steps to ensure that such transfers comply with applicable data protection laws, including reliance on standard contractual clauses where required. Under India's DPDP Act, 2023, cross-border transfer of personal data is permitted except to countries restricted by the Central Government of India.
We retain your account data and images for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it longer. Anonymized or aggregated analytics data may be retained indefinitely.
Passwords are hashed using PBKDF2 with SHA-512 and a unique cryptographic salt per user. We never store plain-text passwords. All data in transit is protected by TLS/HTTPS encryption. We implement reasonable technical and organisational measures to protect your data against unauthorized access, alteration, or loss.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at support@ecomflash.jinzy.com. We will respond within 30 days. EEA/UK users also have the right to lodge a complaint with their local data protection supervisory authority.
Additional rights for users in India (DPDP Act, 2023):
The Service is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately at support@ecomflash.jinzy.com and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice within the Service before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
For any privacy-related questions or to exercise your data rights, contact us at support@ecomflash.jinzy.com or via the contact form on our homepage.
In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, the details of our Grievance Officer for users in India are published below:
Grievance Officer: Seema
Email: support@ecomflash.jinzy.com
Address: Net Brands Solutions, Sector 49, Noida, India
We will acknowledge complaints within 24 hours and aim to resolve them within 15 days of receipt.