Privacy Policy

Coreframe Compute Labs Private Limited (“Coreframe”, “we”) is the data fiduciary for the personal data described here, under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). We follow these principles:

• We collect only information necessary to deliver our services.
• We do not use your data for purposes beyond what is stated here.
• We do not sell or share your data with third parties for their marketing.
• We do not use your files to train AI models unless you choose to let us.
• We retain data only as long as stated here or required by law.

When you create an account, use our services or contact us, we collect:

• Your name, email address, country (and state, in India) and company or studio name, and your organisation’s GSTIN if you give it
• Your mobile number. It is required, and we verify it with a one-time code sent on WhatsApp, because Indian regulations (CERT-In) require a verified contact number for anyone using our compute services
• Payment information (processed by Razorpay; we never store raw card numbers) and your wallet, top-up and invoice history
• GPU session records: start and end times, minutes used, the workstation used and the IP address you connected from
• Device identifiers (for desktop client authentication)
• CFD: the geometry (STL) and case details you submit, and the meshes, results, reports and case files we produce
• Studio: the floor plans (DXF), reference images and prompts you upload or type, and the images we generate for you
• Free tools: the file you upload is read and then deleted; if you create a share link, we keep the report (not the file) and any email you give for 90 days
• Records of the choices you make, such as WhatsApp marketing consent, with the time and IP address

When you visit our website without signing in, we may collect anonymised traffic data (browser type, approximate IP location, pages visited) to improve our service.

• Providing our services: running your GPU workstation sessions, CFD jobs and Studio images, and showing your results in your account
• Billing, invoicing (GST-compliant), wallet management and checking your billing country
• Sending transactional messages by email and WhatsApp (sign-in codes, OTPs, quotes, results, session alerts, low balance warnings)
• Meeting legal obligations, including CERT-In record keeping and tax law
• Responding to support requests
• Improving our platform and detecting fraud and abuse

We do not use your files, drawings or results to train or improve AI models, unless you opt in for a particular file (for example, the optional “let Coreframe learn from this file” box in Studio). Where you opt in, the file is used internally only.

We send transactional messages related to your account and jobs. Marketing messages on WhatsApp (for example Studio tips and offers) are sent only if you tick the optional box to receive them, and you can turn them off at any time in your account or from the link in the message. We do not send unsolicited marketing email without your consent. Contact us to opt out of non-essential communications.

We do not sell your data. We share it only with service providers strictly necessary to operate the platform, under contract and only for that purpose:

• Razorpay: payment processing (Privacy Policy)
• Resend: transactional email delivery
• WhatsApp: delivery of verification codes and messages to your mobile
• Google: if you use “Sign in with Google”, your Google profile email and name are shared with us via OAuth
• YouTube: we publish our own videos to our YouTube channel through the YouTube API Services, and read aggregate statistics (views, watch time, subscriber counts) for that channel only. We do not collect, store or use any data about YouTube viewers or your YouTube account through these services. YouTube’s use of data is governed by the YouTube Terms of Service and the Google Privacy Policy
• Computing infrastructure providers: the machines that run CFD jobs. Each job runs on a machine started for it alone and deleted when the job ends
• An outside AI service: for Studio Plus and Pro ray-traced renders only, the plan, prompt and any reference image needed to make that image. All other Studio images are made on our own machines
• Government or regulatory authorities, if legally required

All payment processing is handled by Razorpay, a PCI-DSS compliant payment gateway. Coreframe stores only the last 4 digits of a card and a payment token reference, never full card numbers or CVV codes.

We use TLS 1.2+ encryption for all data in transit. Sensitive credentials and tokens are stored encrypted at rest. Your CFD jobs and Studio projects open only when you are signed in to your account. GPU workstations are wiped and restored to a clean image after every session, unless you choose a persistent workstation, whose disk is kept for you alone until you remove it. In the event of a personal data breach, we will notify affected users and the Data Protection Board of India as the DPDP Act requires, and in any case tell affected users within 72 hours of our becoming aware of the incident.

• Account data is kept while your account is active.
• Your content (workstation project files, CFD uploads and results, Studio projects) is kept in your account until you delete it or close your account. We do not delete it on a timer. You can delete a Studio project yourself; for anything else, ask us.
• If you ask us to delete your data or close your account, we delete your personal data and content within 30 days of the request, except what the law requires us to keep.
• Tax invoices and billing records are kept for as long as GST and tax law require.
• Records of who used our compute services, when and from where (session logs and the subscriber details CERT-In requires) are kept for the periods set by the CERT-In directions: logs for at least 180 days, and subscriber records for five years after your account ends.
• Files uploaded to our free tools are deleted as soon as they are read; shared reports are kept for 90 days.

Under the DPDP Act and other applicable law, you have the right to:

• Access a summary of the personal data we hold about you and how we use it
• Correct, complete or update inaccurate information
• Request erasure of your data, subject to what the law requires us to keep
• Withdraw consent you have given, such as for marketing messages
• Nominate another person to exercise your rights if you die or become incapacitated
• Have a grievance about your data handled by our Grievance Officer (section 12)

To exercise any of these rights, email us at admin@coreframecloud.com.

Our services are for people aged 18 and over. We do not knowingly collect personal data from children.

We keep your files while your account is active, but no storage is immune to failure. Please keep your own backups of important project files and results. Anything saved only on a workstation, outside your persistent drive, is wiped at the end of the session.

We may update this policy from time to time. Material changes will be notified by email or in the app at least 15 days before they take effect. Continued use of our services after the effective date constitutes acceptance.

For any question or complaint about your personal data, contact our Grievance Officer. We acknowledge complaints within two business days and aim to resolve them within 15 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Grievance Officer, Coreframe Compute Labs Private Limited
No 32/2, 34/1, Kadabisanahalli, Vartur, Bengaluru, Bengaluru Urban, Karnataka 560087, India
GSTIN: 29AANCC8401D1ZO

admin@coreframecloud.com · WhatsApp +91 63668 89488

This policy forms part of our Terms of Service.