Privacy Policy

Last updated: April 6, 2026

dMaya is a product of Contemy Creatives Private Limited ("we," "us," or "our"). We operate the website dmaya.ai and the dMaya design platform (the "Service"). This Privacy Policy explains what information we collect, how we use it, and what choices you have.

By using dMaya, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Account Information

When you create an account, we collect your email address and a password (which is hashed and stored securely). You may optionally provide a phone number. We do not collect your real name unless you provide it voluntarily.

Design and Project Data

When you use dMaya, we store the designs you create, including screen content (HTML/CSS/JavaScript), design tokens, component registries, project configurations, and chat conversation history with the AI. This data is necessary to provide the Service and is stored on our servers.

Billing Information

Payments are processed through our third-party payment provider (Dodo Payments). We do not store your credit card number, bank account details, or other payment credentials on our servers. Our payment provider handles this data under their own privacy policy. We store records of your subscription plan, credit balance, credit transactions, and top-up purchase history.

Usage Data

We collect information about how you use the Service, including which AI models you select, credit consumption per action, number of screens generated, and general feature usage patterns. This helps us improve the product and manage resource allocation.

Collaboration Data

When you invite team members or share preview links, we store project membership records (invited email addresses, roles, invitation status) and comment threads (including comment content and author information). Preview links are accessible to anyone who has the link without requiring an account.

Local Storage

We use browser local storage to save your theme preferences (light or dark mode). This data stays on your device and is not transmitted to our servers.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the dMaya platform
  • Process your AI design requests through third-party AI model providers
  • Manage your account, subscriptions, and credit balance
  • Enable team collaboration and project sharing
  • Send transactional emails (account verification, password resets, billing notifications)
  • Respond to support requests and inquiries sent to hello@dmaya.ai
  • Monitor for abuse, fraud, and security threats
  • Analyze aggregate usage patterns to improve the product

We do not sell your personal information. We do not use your design content for advertising purposes.

3. AI Model Providers and Third-Party Services

When you use dMaya to generate or edit designs, your prompts and conversation context are sent to third-party AI model providers through OpenRouter. The AI models available include models from Google (Gemini) and Anthropic (Claude). These providers process your prompts to generate design output.

We send the minimum information necessary for design generation: your text prompts, relevant conversation history, and project context (such as existing screen content and design system configuration). We do not send your email address, password, billing information, or other account details to AI providers.

Each AI provider has its own privacy policy and data handling practices. We encourage you to review them. We select providers that do not use customer inputs for model training by default.

4. Data Sharing

We share your information only in the following circumstances:

  • AI providers: Prompts and project context are shared with AI model providers to generate designs, as described above.
  • Payment processing: Billing information is shared with Dodo Payments to process subscriptions and top-up purchases.
  • Team members: When you invite someone to a project, they can see the project content, screens, and comments. They can see your email address as the project owner.
  • Preview link viewers: Anyone with a preview link can view the design screens in that project. They cannot see your account information, comments, or conversation history.
  • Legal requirements: We may disclose information if required by law, legal process, or government request.

We do not share your information with advertisers, data brokers, or any other third parties for marketing purposes.

5. Data Security

We take reasonable measures to protect your information. Passwords are hashed using bcrypt before storage. Authentication uses JSON Web Tokens (JWT). All data is transmitted over HTTPS. Credit transactions use atomic database operations to prevent data inconsistencies.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights and Choices

  • Access and export: You can export your designs as HTML/CSS/Tailwind code at any time. Your design content belongs to you.
  • Account deletion: You can request deletion of your account and associated data by contacting us at hello@dmaya.ai. We will process deletion requests within 30 days.
  • Email communications: Transactional emails (billing, security) cannot be opted out of while you maintain an account. We do not currently send marketing emails.
  • Data correction: You can update your account information through your profile settings.

7. Data Retention

We retain your account data and design content for as long as your account is active. If you delete your account, we will delete your personal data and design content within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our terms).

Credit transaction records and billing history may be retained for up to 7 years for accounting and tax compliance purposes.

8. Children

dMaya is not intended for use by anyone under the age of 16. We do not knowingly collect information from children under 16. If we learn that we have collected information from a child under 16, we will delete it promptly.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. Our servers and AI model providers may operate in different jurisdictions. By using dMaya, you consent to the transfer of your information to these locations.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

hello@dmaya.ai