Privacy policy
Last updated 17 October 2026
Saath (साथ) is run by Zobyt Technologies Pvt. Ltd. ("we", "us"). We are responsible for your personal data under India's Digital Personal Data Protection Act, 2023. This page explains what we collect, why, who helps us process it, how long we keep it, and how you can delete it.
The short version
- We use your photos only to create the photos you ask for and to check their quality.
- We never use your photos to train any AI model.
- We never sell your personal data.
- Uploaded photos are deleted automatically 30 days after upload.
- You can delete all your photos and data at any time from the Account page.
What we collect, why and for how long
| What we collect | Why | How long we keep it |
|---|---|---|
| Photos you upload of both partners (face close-ups, full-length, together) | To create your photos and check that they look like you | Deleted automatically 30 days after upload, or earlier if you delete them |
| Heights, if you enter them, and a short written description of each person's appearance (such as hair, skin tone and apparent age) that our AI makes from your photos | To keep both of you recognisable and your height difference right in every look | Deleted together with your uploaded photos, after 30 days or earlier if you delete them |
| Face measurements: numbers our own servers compute from the faces in your photos and in each photo we create, to check that every photo looks like you | To keep each person recognisable, and to return your credit automatically when a photo does not look like you | Used only while your photo is being made and never stored. We keep only the resulting match scores, which cannot be turned back into a face |
| Photos we create for you | So you can view, download and share them | Until you delete your photos and data |
| Email address, if you add one | To send sign-in links and tell you when your photos are ready | Until you delete your photos and data |
| Payment and credit records: payment ID, amount, the email and phone number our payment partner shares with us, and credits bought, used and returned | To confirm payments, add credits, handle refunds and keep tax and accounting records | As long as the law requires, typically 8 years under Indian tax law. These records contain no photos. |
| A session cookie on your phone | To keep your private session signed in | Up to one year, or until you delete your data or clear your browser |
| Usage events, such as pages viewed and steps completed, and how you reached us (for example, the ad or website you came from), linked to a random ID stored on your phone | To see where people get stuck, improve Saath and measure our ads | 180 days |
We do not ask for your name, contacts or location. When you upload a photo, our server re-encodes it and removes the location and camera details (EXIF data) stored inside the file.
Consent
We use your photos because you agree to it. Before we create anything, you confirm that you are both over 18 and that you both agree to these photos being created. If you upload your partner's photos, you confirm that your partner has agreed too.
You can withdraw consent at any time, as easily as you gave it, by deleting your photos and data from the Account page or by writing to us. Your partner can also ask us to delete their photos. Withdrawing consent stops further use. It does not undo photos already created and downloaded.
We keep payment records even after you withdraw consent, because tax law requires it.
How your photos are processed
Your uploaded photos and the photos we create are stored in Microsoft Azure Blob Storage in Central India. They are kept in private storage and shown only to your own session, through links that expire within minutes.
Only after you buy a pack, we send your photos to Microsoft Azure OpenAI, hosted in the United States. An image model creates the photos you asked for. A vision model checks likeness and quality, and stops photos we do not allow, such as photos that seem to show a minor or a public figure.
Microsoft processes this data under Microsoft's enterprise terms, which do not permit using customer data to train models. We never use your photos to train any model, ours or anyone else's.
To check likeness, our own servers find the faces in your photos and compare them with the faces in each photo we create. This happens on our servers, not with any third party, and the face measurements are discarded as soon as the photo is finished.
Who we share data with
We use these service providers. Each gets only what it needs to do its job for us.
- Microsoft Azure OpenAI (United States): creates your photos and checks likeness and quality.
- Microsoft Azure Blob Storage (Central India): stores uploaded and created photos.
- Vercel (servers in Mumbai): runs our website and the server that receives and re-encodes your uploads.
- Neon (Singapore): our database, which stores session, order and credit records. It holds no photos.
- An email provider: sends sign-in links and “photos ready” emails.
- Dodo Payments, our merchant of record: processes payments, GST and refunds.
- Meta and Google, when advertising measurement is switched on (see below).
Some of these providers process data outside India, including in the United States. We may also share data when Indian law requires it, for example to comply with a valid order from a court or government authority.
Payments
You pay on our payment partner's checkout. We do not receive or store your card number, UPI PIN or net banking password. Our payment partner may share your email address and phone number with us along with the payment confirmation.
Cookies, analytics and advertising
We use one cookie to keep your private session signed in on your phone. We also store a random ID in your browser and use it to record our own usage events, such as which steps people complete, to improve Saath.
When switched on, the Meta Pixel and Google tags tell Meta and Google which pages you visit on Saath and actions such as completing a purchase, including the amount. They may set their own cookies. We use this to measure whether our ads work. Meta and Google handle this data under their own privacy policies. They never receive your photos.
You can limit this tracking by blocking third-party cookies in your browser, or through the ad settings in your Meta and Google accounts.
Deleting your data
Open the Account page and tap “Delete my photos and data”. This permanently deletes your uploaded photos and every photo we created, removes your email address and phone number from your account, and signs you out. Unused credits are lost, so ask for any refund you are eligible for first.
We keep payment and credit records, including the email and phone number linked to each payment, for as long as the law requires. These records contain no photos.
If you cannot open the Account page, for example because you lost your phone, email discuss@zobyt.com from the address you added, or with a payment ID, and we will delete your data.
Your rights
Under the Digital Personal Data Protection Act, 2023, you can:
- ask for a summary of the personal data we hold about you, how we use it and who we have shared it with;
- ask us to correct or update your personal data;
- ask us to erase your personal data;
- withdraw your consent at any time;
- have your complaints handled by our grievance officer;
- nominate someone to use these rights for you if you die or become unable to act because of illness or disability.
To use any of these rights, write to our grievance officer. We may ask you to confirm the request is yours, for example by writing from the email address on your account or sharing a payment ID. We commit to responding within 30 days.
If you are not satisfied with our response, you can complain to the Data Protection Board of India.
Grievance officer
- Email: discuss@zobyt.com
- Address: Zobyt Technologies Pvt. Ltd., First Floor, Moga Colony, Badshapur, Sohna Road, Gurgaon, Haryana 122001
Children
Saath is only for adults. We do not knowingly process personal data of anyone under 18, and our checks stop a photo when someone in it seems to be a minor. If you think a minor's photo has been uploaded, tell us and we will delete it.
Security
Data travels over encrypted connections, photos are kept in private storage, and each photo is shown only to the session that owns it. No system is completely secure. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.
Changes to this policy
If we change this policy, we will post the new version here with a new date and show a notice on the site when a change is significant. Questions? See our contact page.