Welcome to our Privacy Policy | Rickylaserart
Last Updated: May 1, 2026
Welcome to RickyLaserArt – your trusted platform for image-to-DXF conversion, SVG tools, AI-assisted line art generation, and laser engraving resources for CNC and laser cutting projects.
Your privacy matters to us. This Privacy Policy explains what personal information we collect, how we use and protect it, and what rights you have, when you use our website (www.rickylaserart.com), our web tools (including Engraving Art Studio, DXF Converter, Auto Scale DXF, Single Line DXF Converter, Laser Cut Box Generator, and other tools we may launch), our Telegram bot, our blog, and any related services (collectively, the “Service”).
By using our Service, you agree to the practices described in this policy.
1. Business Information:
Operator: Ricky Laser Art (“we”, “us”, “our”) Website: www.rickylaserart.com Location: Munshiganj, Sitapur 261001, Uttar Pradesh, India Contact Email: [email protected]
Under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), we act as a Data Fiduciary for the personal data we process about users in India. For users in the European Union or United Kingdom, we act as a Data Controller under GDPR.
2. Information We Collect
We collect only the information necessary to provide our tools and improve your experience.
2.1 Information You Provide Directly
Account Information – When you sign in with Google, we receive your email address, display name, profile picture URL, and stable Google account identifier (sub). We use this to identify your account, enforce usage quotas, and personalize your experience. Contact Information – Name and email address when you fill out contact forms, subscribe to our newsletter, or reach out to support. Uploaded Images – Photographs and image files you submit for conversion to DXF, SVG, PNG, or other formats. Communication Data – Messages, feedback, or inquiries you send us. Telegram Data – Your Telegram username and user ID when you use our Telegram bot (@RickyLaserArtBot). Newsletter Signup – Your email address if you subscribe to our newsletter (opt-in only).
2.2 Information Collected Automatically
Device Information – Browser type, operating system, screen size, and device identifiers Usage Data – Pages visited, time spent, tool interactions, conversion job metadata (job ID, timestamp, output format, image size – non-identifying) IP Address – For security, fraud prevention, and approximate geolocation Cookies and Tracking – See Section 6
2.3 Payment Information
When you make a payment, our payment processors collect your payment details directly on their secure platforms. We do not directly collect or store your full payment card or bank details. We receive only a transaction reference, the plan purchased, and the payment status.
3. How We Handle Your Uploaded Images
We understand your images and designs may be valuable intellectual property. Here’s exactly how we treat them:
3.1 Image Processing
Temporary processing – Images are processed on secure servers (currently Google Cloud Platform) to generate the requested output (line art, DXF, SVG, etc.) Automatic deletion – Uploaded images and converted output files are automatically deleted from our servers within 24 hours of processing No long-term storage – We do not permanently store your original images or converted files AI-assisted processing – Some tools (such as Engraving Art Studio) use AI services (currently the Gemini API by Google) to trace, vectorize, or generate line art from your images
3.2 What We Do NOT Do With Your Images
❌ We never sell, share, or distribute your uploaded images to third parties
❌ We never use your images to train AI models – neither ours nor any third party’s
❌ We never claim ownership of your designs or converted files
❌ We never use your images in marketing, demos, or showcases without your explicit written permission
4. How We Use Your Information
We use the information we collect for the following purposes, each tied to a specific lawful basis:
| Purpose | Lawful Basis (DPDP / GDPR) |
|---|---|
| Provide the Service (run conversions, deliver files, enforce quotas) | Contract performance |
| Bill paid plans and process refunds | Contract performance |
| Send essential service emails (login confirmations, receipts, account notices) | Contract performance |
| Send newsletter and promotional emails | Consent (opt-in) – you can unsubscribe anytime |
| Investigate abuse and protect Service integrity | Legitimate interest / Legal obligation |
| Improve our tools through anonymous, aggregated usage statistics | Legitimate interest |
| Comply with applicable law (tax, accounting, court orders) | Legal obligation |
We never sell your personal information to third parties.
5. Third-Party Services We Use
To deliver our Service, we work with trusted third-party processors. Each handles your data under its own privacy policy and applicable Data Processing Agreement (DPA).
5.1 Authentication & AI
Google Sign-In (OAuth) – for account creation and authentication Google Gemini API – for AI-assisted line art generation in Engraving Art Studio
5.2 Payment Processing
PayPal – for international one-time payments and subscriptions Razorpay – for Indian customers (UPI, cards, net banking, wallets, and subscription mandates), where available
We may add or change payment processors as the Service grows. The active processor will always be displayed at checkout. We do not directly store your card or bank details.
5.3 Hosting & Infrastructure
Google Cloud Platform – application servers, file storage, and processing infrastructure
5.4 Analytics
Google Analytics – to understand how visitors use our website (page views, traffic sources, tool usage patterns). Data is aggregated and does not personally identify you.
5.5 Advertising (Future Use)
We do not currently run advertising on our platform. If we begin to do so in the future (for example, through Google Ads or similar), we will:
Update this Privacy Policy with a clear notice Notify users via email or a prominent in-app notice at least 14 days in advance Provide a cookie consent mechanism where required by law
5.6 Telegram
Our Telegram bot operates on the Telegram platform. When you use the bot, Telegram’s Privacy Policy also applies to your interactions with the bot.
5.7 Newsletter Delivery
If we use a third-party email service to deliver newsletters (such as Mailchimp, Brevo, or similar), they will receive only your email address and are bound by their own privacy terms.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to keep you signed in and understand how our tools are used.
6.1 Types of Cookies
| Cookie Type | Purpose | Required? |
|---|---|---|
| Essential / Session | Keep you signed in, maintain your active session | Yes – disabling will break login |
| Analytics (Google Analytics) | Understand site usage in aggregate | No – optional |
| Preference | Remember your settings (e.g., language, theme) | No – optional |
Our session cookie is HTTP-only, marked Secure in production, and uses SameSite=Lax. We do not currently use third-party advertising cookies.
6.2 Managing Cookies
You can control cookies through your browser settings – view, delete, block, or allow specific cookies. Note that disabling essential cookies will prevent you from signing in.
7. Data Security
We keep different types of data for different periods:
| Data Type | Retention Period |
|---|---|
| Uploaded images and converted files | Deleted within 24 hours of processing |
| Account information (Google profile, email) | While your account is active; deleted within 30 days of account deletion request |
| Transaction records (invoices, payment status) | 7 years – required by Indian tax law |
| Communication records (support emails) | Up to 2 years for support and legal purposes |
| Analytics data | According to Google Analytics’ default retention (currently 14 months) |
| Newsletter subscription | Until you unsubscribe or delete your account |
After the retention period, data is securely deleted or anonymized.
8. Your Privacy Rights
Subject to applicable law (including the DPDP Act 2023, GDPR, and CCPA where they apply to you), you have the following rights:
Access – Request a copy of the personal data we hold about you Correction – Ask us to correct inaccurate or incomplete information Deletion – Request deletion of your personal data (subject to legal retention obligations like tax records) Data Portability – Receive your data in a structured, commonly used, machine-readable format Withdraw Consent – Revoke consent for processing where consent is the lawful basis (e.g., newsletter) Object / Restrict Processing – Object to or restrict certain processing where applicable Unsubscribe – Opt out of marketing emails at any time using the unsubscribe link in any newsletter, or by contacting us Grievance Redressal – Under the DPDP Act, raise a grievance about how we handle your data
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India (under the DPDP Act) or the relevant data protection authority in your jurisdiction.
9. Data Retention
We take reasonable technical and organizational measures to protect your personal data:
HTTPS / TLS encryption for all data in transit Secure HTTP-only session cookies to prevent token theft Least-privilege access – only authorized personnel can access backend systems and personal data Firewalls and access controls on our cloud infrastructure Regular security reviews of our practices and dependencies Strong authentication via Google OAuth (we do not store passwords)
While we take these precautions, no internet transmission or storage system is 100% secure. We encourage you to use strong account practices and keep your devices secure.
If you suspect your account has been compromised, contact [email protected] immediately.
In the event of a personal data breach affecting Indian users, we will notify the Data Protection Board of India and affected users as required by the DPDP Act.
10. International Data Transfers
RickyLaserArt operates from India, and our primary data processing happens in India and on Google Cloud regions we select. If you access our Service from outside India:
Your information may be transferred to and processed in India or other countries where our service providers operate For users in the EU/UK, transfers outside the EEA are made with appropriate safeguards (such as Standard Contractual Clauses where applicable) For users in India, the DPDP Act permits transfers to all countries except those specifically restricted by the Indian Government – we comply with any such restrictions as published
11. Children's Privacy
Our Service is not directed to children under 18 years of age. We do not knowingly collect personal information from children under 18.
If you are between 13 and 18, you may use the Service only with the verifiable consent of a parent or legal guardian, in compliance with the DPDP Act 2023.
If you believe a child has provided us with personal data without parental consent, please contact us at [email protected] and we will promptly delete the information.
12. Independent Tools - Separate Data
Each tool on the RickyLaserArt platform (Engraving Art Studio, DXF Converter, Auto Scale DXF, Single Line Converter, Box Generator, Telegram Bot, etc.) operates as an independent product with its own account system and data.
Account login and credits are not shared between tools unless explicitly stated Deleting your account on one tool does not delete data on other tools – you must request deletion separately for each tool you have used This Privacy Policy applies uniformly to all RickyLaserArt tools, but data is stored and managed per-tool
13. External Links
Our website, blog, and tools may contain links to third-party websites (affiliate links, referenced resources, etc.). We are not responsible for the privacy practices or content of external sites. We recommend reviewing their privacy policies before sharing any personal information.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, tools, or legal requirements. When we make changes:
We will update the “Last Updated” date at the top of this page For material changes (such as new categories of data collection, new third-party processors, or new uses of your data), we will notify you via email or a prominent in-app notice at least 14 days before the changes take effect
We encourage you to review this policy periodically.
15. Grievance Officer (DPDP Act)
In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, you may contact our Grievance Officer for any privacy-related concerns:
Name: Ricky (Founder) Email: [email protected] Address: Munshiganj, Sitapur 261001, Uttar Pradesh, India Response time: Within 30 days of receipt
16. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data:
Email: [email protected] Website: www.rickylaserart.com Address: Munshiganj, Sitapur 261001, Uttar Pradesh, India Response Time: Within 24 hours on business days
