Privacy Policy

Last updated: 28 September 2026

Emaki is launching in stages. Accounts are live. Purchases and cloud voices are coming soon; the parts of this policy about them apply once they are available.

1. The short version

Your images never leave your device. Emaki builds the video inside your browser. We never receive, see or store your images or your videos.
If you use a cloud voice, the narration text is sent to our server and our voice provider to create the audio. We do not keep the text.
When a video is exported, we keep a short record of it (not the video) for 180 days, so misuse can be traced.
We collect only what we need to run your account, sell credits and meet the law.
We do not sell your data or use your content to train AI.

2. What we collect

When you use Emaki without an account

Nothing about your images, captions or narration. They stay in your browser.
Standard technical data that any website receives, such as your IP address, browser type and the pages requested, handled by our hosting provider for security and delivery.
If you use the voice marked "on this device", the voice data (about 90 MB) is downloaded from its public source to your browser. Your text is not sent anywhere.
Export record: each time a video is exported, your browser sends us a short record: a random export ID (also hidden inside the video file), the date and time, your IP address, approximate country, browser type, and basic settings (number of slides, length, size, whether it has a watermark or AI narration). It never includes your images, text or the video.

When you create an account and buy credits

Account information: username, email address, a securely hashed password, when you confirmed your email and accepted our Terms, and your confirmation that you are 18 or over.
Sign-in records: for each signed-in device, the IP address, browser type and sign-in date, kept until you sign out or the session expires (30 days).
Export records (described above) are linked to your account when you are signed in.
Billing details: name, country, state (for India, used as the place of supply for GST), and optionally your phone number, address and GSTIN, shown on your invoices.
Purchases and usage: packs bought, amounts, dates, invoice numbers, credit balance, and a record of credits used per video (number of slides, words and voice tier, but not the text).
Narration text for cloud voices: sent to our server and our voice provider to create the audio, then discarded. We keep only a one-way fingerprint (a hash) of each slide's text for 30 days, so an unchanged video can be re-exported without using credits again. The text cannot be recovered from the fingerprint.
Content-rule checks: if our automated check blocks narration text, we record the date and the type of rule involved against your account, but not the text.
Messages you send us through the contact page or email: your name, email, message and any payment details you include. Kept for up to 1 year.
Your choice about receiving updates and offers (optional).

Payments are handled by Razorpay. We never see or store your full card or bank details.

3. How your images are checked

To keep Emaki free of prohibited content, images may be checked by an automated model that runs inside your browser before a video is made. The check happens on your device; your images are still not uploaded, and we receive no copy or result of the check.

4. Why we use your data

To provide the service: creating narration audio, managing credits and purchases, and issuing invoices.
To send account emails only: verifying your email, account recovery, purchase confirmations and account-deletion confirmation.
To enforce our content rules and prevent misuse and fraud, including tracing a reported video back to an export record and blocking accounts that break our rules.
To understand how Emaki is used, in aggregate numbers (for example, videos made per day, and users by country and state), visible only to us.
To send occasional updates and offers, only if you opt in. You can withdraw at any time from your account page.
To meet legal, tax and regulatory obligations.

5. Advertising and cookies

Free pages show two ads. One comes from Google AdSense. Google and its partners use cookies to show ads, including ads based on your visits to this and other websites. You can manage personalised advertising at Google's Ads Settings, and learn more in Google's advertising policies. Visitors in regions that require it are asked for consent first.
The second ad is sold directly by us and served from our own systems, with no tracking. Advertisers receive only total counts of views and clicks.
Accounts use a strictly necessary cookie to keep you signed in.
During your ad-free period, no ad code is loaded at all.

6. Who we share data with

We do not sell or share your personal data for anyone else's marketing. We use these service providers, only as needed to run Emaki:

Cloudflare: website hosting, server functions and database.
Our cloud voice provider (Google Cloud Text-to-Speech): receives narration text to create audio.
Razorpay: payment processing.
An email delivery provider (Resend): account emails.
Google AdSense: ads on free pages, as described above.
Indian government or regulatory bodies, where required by law.

Some of these providers may process data outside India, under their own security and privacy commitments.

7. How long we keep it

Account and purchase data: while your account exists. After you delete your account, a minimal registration record is kept for 180 days, as required under the Information Technology Rules, and then removed.
Export records: 180 days.
Invoices and payment records: for the period required by tax law, even after account deletion.
Text fingerprints for free re-export: 30 days.
Contact messages: up to 1 year.
Encrypted database backups: up to 30 days.

You can delete your account from your account page. This is a two-step process: you enter your password, then confirm through a link sent to your registered email.

8. Your rights

Under applicable Indian data protection law, including the Digital Personal Data Protection Act, 2023, you may ask to access, correct or delete your personal data, subject to our legal retention duties. You can export your data and delete your account yourself from your account page, or write to dzealai@gmail.com.

9. Security

We use password hashing, encrypted connections (HTTPS) and access controls to protect your data. No system is completely secure, and we cannot guarantee absolute security of information sent over the internet.

10. Children

Accounts and purchases are only for people aged 18 or over. Younger users may use the free tool, which needs no account and collects no personal data, with the involvement of a parent, guardian or teacher. We do not knowingly collect personal data from anyone under 18.

11. If Emaki closes

If we discontinue Emaki, we will announce it at least 30 days in advance by email and on the site. Afterwards we delete personal data, except records the law requires us to keep.

12. Changes to this policy

We may update this policy. Material changes will be shown by updating the "Last updated" date above.

13. Grievance Officer

As required under the Digital Personal Data Protection Act, 2023 and the Information Technology Rules, we have designated a Grievance Officer:

Name: Dr Lavkesh Bansal
Email: dzealai@gmail.com
Address: 5, Sahakar Nagar Market, Wadala-W, Mumbai-400031, Maharashtra, India

Complaints are acknowledged within 24 hours and resolved within the time required by law.

This Privacy Policy should be read with our Terms & Conditions and Disclaimer.