Explore products
Legal

Privacy Policy

Last updated 28 October 2026 · Stuffle Labs LLP

This policy explains how Stuffle Labs LLP (“Stuffle”, “we”) handles personal data when you use our websites, applications, browser extension and APIs (the “Services”). We act as the data fiduciary (controller) for that data. We process it under India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, and we respect equivalent rights for users in other countries.

1. What we collect

Account data. When you sign in through Stuffle ID we receive your name, email address and profile picture, plus any details your sign-in provider shares. If you belong to an organisation, we also store your role in it.

Content you create. This is whatever you put into a Product. For example:

  • practice sessions in Vaak, including voice audio processed to produce transcripts and feedback;
  • animations and projects in Lottify;
  • plans in Planner;
  • documents in Dodox;
  • agents and workflows in agOS.

Payment data. Razorpay processes payments. We receive the payment and subscription identifiers, the amount, the status and the billing contact details needed for invoices. We do not receive or store full card numbers or UPI PINs.

Usage and device data. We collect:

  • basic technical logs, such as IP address, browser type, pages requested, errors and timestamps, to run and secure the Services;
  • with your consent where required, product analytics on how features are used.

Support data. This is what you send when you contact us.

Browser Assistant. API keys and model settings you enter are stored locally in your browser. They are not sent to Stuffle. Page content you ask the assistant to work on goes to the model you have selected.

2. Why we use it

We use personal data only to:

  • provide, maintain and secure the Services, and keep you signed in;
  • process payments, send receipts and manage subscriptions;
  • produce AI features you ask for, such as feedback, generated animations or answers;
  • respond to support requests and send important service messages;
  • understand and improve how the Services are used, with your consent where required;
  • meet legal, tax and accounting obligations, and prevent fraud and abuse.

We do not sell personal data. We do not use your content to train our own AI models.

3. Who we share it with

We share data with service providers only as needed to run the Services:

  • Razorpay, for payment processing;
  • Microsoft Azure, to run the hosted AI models behind AI features;
  • PostHog, for product analytics in products that ask for your consent;
  • infrastructure and email-delivery providers that host or deliver parts of the Services.

These providers may only use the data to provide their service to us. We also disclose data when the law requires it, or to protect the rights, safety or property of users or Stuffle.

4. Where it is stored

Our Services are operated from India. Some providers, including AI model providers, may process data in other countries. Where that happens, we rely on the provider’s contractual and security safeguards, and we transfer data only as Indian law permits.

5. How long we keep it

We keep account data and content while your account is active. When you delete content or your account, we remove it from active systems within a reasonable period. Backups are overwritten on a rolling basis. We keep payment and invoice records for as long as tax and accounting law requires.

6. Security

We use encryption in transit, access controls and monitoring to protect data. No system is completely secure. If a breach affects your personal data, we will notify you and the authorities as the law requires.

7. Your rights

You can ask to:

  • access a summary of your personal data and how we process it;
  • correct, complete or update it;
  • erase it, unless we must keep it by law;
  • withdraw consent, without affecting processing that happened before;
  • nominate someone to exercise these rights for you in the event of death or incapacity.

Many of these are available in each Product’s settings. Otherwise, email support@stuffle.io. We may need to verify your identity before acting on a request.

8. Children

The Services are not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.

9. Cookies

See the Cookie Policy.

10. Changes

We will post any update here and change the date above. If a change is significant, we will tell you in the Product or by email.

11. Contact and grievance redressal

Email: support@stuffle.io. Post: Stuffle Labs LLP, 27C, Royal Apartments, Sigma IV, Greater Noida, Gautam Buddha Nagar, Uttar Pradesh 201310, India.

Grievance Officer: Mohit Nagar, Founder, support@stuffle.io. We acknowledge grievances and resolve them within the timelines set by applicable law. If you are not satisfied with our response, you may approach the Data Protection Board of India.