Privacy Policy

We collect the following categories of personal data:

• Account data — your name, email address, and phone number when you sign in via login link or create an account.
• Order data — delivery address, garment selections, sizing, design choices, payment confirmation tokens.
• Design inputs — text prompts, uploaded reference images, and the AI-generated outputs derived from them.
• Usage data — IP address, device and browser type, pages visited, and basic interaction analytics, used to operate and improve the Service.
• Cookies and similar technologies — small identifiers stored in your browser. Essential cookies (sign-in, session security, CSRF, cart) are required for the Service to work. Functional cookies (preferences such as audio mute and cached design library) and analytics cookies (anonymous error monitoring) are only used with your consent, recorded via the cookie banner that appears on your first visit. You can change your preferences at any time by clearing your browser's storage for this site or by contacting us. We do not run third-party advertising trackers.

Under India's Digital Personal Data Protection Act 2023 (DPDP Act) and GDPR (where it applies), you have the right to access, correct, and erase your personal data, and to withdraw consent for any non-essential processing. To exercise these rights write to info@sablemonarch.com.

Children. The Service is not available to children under 13, and we do not knowingly collect their data. Users aged 13–17 may use the Service only after a parent or legal guardian confirms consent via the verification email we send them (DPDP Act, Section 9); we record who consented and when. For all users under 18 we disable profiling, personalised recommendations, behavioural tracking, targeted advertising, and photo uploads — their data is processed only to operate the Service. If you believe a child has used the Service without parental consent, contact us and we will delete the data.

• To create and manage your account.
• To accept, produce, and deliver your orders and to send transactional confirmations, production updates, and shipping notifications.
• To process payments and prevent fraud.
• To run the AI generation pipeline (your prompt is sent to a model provider so that an image can be returned to you).
• To maintain a personal design history that you can re-use across future orders.
• To debug and improve the Service, monitor uptime, and protect against abuse.
• To comply with applicable legal and tax obligations.

We process personal data on the basis of (a) your consent, given when you submit information to the Service; (b) the necessity to perform our contract with you (your order); and (c) our legitimate interest in operating, securing, and improving the Service. You may withdraw your consent at any time, subject to obligations we are legally required to fulfil (for example, retaining tax records).

We share data with the following categories of processors, each bound by their own privacy commitments:

• Our payment provider — payment processing.
• Third-party AI image-generation providers — receive your prompt and any uploaded reference image for the duration of generation.
• Cloudinary — image hosting for generated and uploaded designs.
• Resend — transactional email delivery (order confirmations, login-link sign-in).
• Neon — managed Postgres database where order and account records are stored.
• Vercel — application hosting and content delivery.
• Telegram — used internally to forward production briefs to our manufacturing partner; only the data needed to fulfil the order is sent.
• Our manufacturing partner — receives your name, delivery address, garment specs, and the design files required to produce your order.

We do not sell your personal data to advertisers.

We keep account and order records for as long as your account is active and for a reasonable period thereafter to comply with tax, accounting, and dispute-resolution requirements. Design history is kept until you delete it or close your account. You may request deletion at any time.

Under the Digital Personal Data Protection Act, 2023 you have the right to:

• access a summary of your personal data;
• request correction or completion of inaccurate data;
• request erasure of your data, subject to legal retention obligations;
• withdraw consent for any processing that is consent-based;
• nominate a person to exercise these rights on your behalf in case of incapacity;
• file a grievance with our Grievance Officer (see Section 09).

To exercise any of these rights, email info@sablemonarch.com from the address registered with your account. We will respond within thirty (30) days.

We use industry-standard safeguards including TLS for data in transit, hashed and tokenised storage of credentials, role-based access controls, rate limiting, and CSRF protection on all state-changing endpoints. No system is perfectly secure; if we become aware of a personal-data breach, we will notify affected users and the Data Protection Board of India as required by law.

Some of our processors operate servers outside India. By using the Service you consent to your personal data being transferred to and processed in those jurisdictions, subject to safeguards equivalent to those required under Indian law.

In accordance with the Information Technology Act, 2000 and the rules thereunder, the Digital Personal Data Protection Act, 2023, and the Consumer Protection (E-Commerce) Rules, 2020, the contact details of our Grievance Officer — who also handles consumer complaints — are:

• Name: Adhiraj Kashyap
• Entity: Artup Media Private Limited, D-66, Ground Floor, Hauz Khas, New Delhi, Delhi — 110016, India
• Email: info@sablemonarch.com (a support handler responds by email)

We acknowledge grievances and consumer complaints within 48 hours and resolve them within 30 days of receipt.

We may update this Privacy Policy from time to time. The “Effective” date at the top reflects the latest revision. Material changes will be highlighted on the website or sent to your registered email address.