Plain-English summary (not legally binding)
We collect the minimum data needed to run Febler AI for you — your account info, the videos you upload, and basic usage analytics. We use it to deliver the service, not to train models (by default) or sell to anyone.
You can access, correct, or delete your data at any time by emailing us. We comply with India's Digital Personal Data Protection Act 2023 and the IT Act 2000. Full details below.
01About This Policy
This Privacy Policy ("Policy") describes how Feblerlabs Technologies Private Limited ("Company", "we", "us") collects, uses, discloses, and protects the personal data of users ("you", "Data Principal") of Febler AI, a product operated by Echovox Studio.
This Policy is issued in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000. It should be read together with our Terms of Service.
By using the Service, you confirm that you have read this Policy and consent to our processing of your personal data as described here.
02Who We Are
Company: Feblerlabs Technologies Private Limited
Product: Febler AI (operated by EchoVox Studio)
Registered address: Bangalore, Karnataka, India
Privacy contact: privacy@echovox.in
03What Data We Collect
Data you provide directly
- Account registration data (name, email address, password hash)
- Profile information you choose to add
- Video, audio, and script content you upload or record via the Service
- In-app feedback, support tickets, or communications with our team
Data collected automatically
- Device information (OS, browser, device model)
- Usage analytics (features used, session duration, error logs)
- IP address and approximate geolocation (country/region)
- Cookies and similar tracking technologies (see Section 14)
We do not collect government IDs (Aadhaar, PAN), biometric data beyond what is present in your uploaded videos, or any special categories of sensitive personal data beyond what is strictly needed to operate the Service.
04How We Use Your Data
- Service delivery — to host your account, process your video uploads, generate AI outputs, and deliver finished reels;
- Authentication & security — to verify identity, prevent unauthorised access, and detect fraud or abuse;
- Product improvement — to debug errors, understand feature usage, and improve the Service based on anonymised insights;
- Communication — to send transactional messages and, with your consent, occasional product updates;
- Legal compliance — to comply with Applicable Law, court orders, or valid governmental requests;
- Customer support — to respond to your queries, feedback, or complaints.
We do not sell your personal data to any third party. We do not use your personal data for targeted advertising within the Service.
05Legal Basis & Consent
- Consent — informed, specific, and affirmative consent at account creation;
- Legitimate use — as permitted under Section 7 of the DPDP Act for purposes voluntarily provided by you;
- Legal obligation — where processing is required to comply with law or court order.
You may withdraw your consent at any time by updating your account settings or contacting us. Withdrawal will not affect the lawfulness of processing done before withdrawal.
06Your Video Content — Special Care
- You own your content. We do not claim ownership of the videos, audio, scripts, or other content you upload.
- We use it only to serve you. Your uploaded content is processed solely to deliver the AI editing features you request.
- Access is restricted. Only authorised personnel and automated AI systems strictly necessary for Service delivery have access.
- We do not share your videos except as strictly required to run the Service or as required by law.
- You can delete your uploaded content and generated outputs from your account at any time.
07AI Model Training
We do not use your uploaded videos, audio, or generated outputs to train our AI models by default. Your content is used only to produce your output.
We may use anonymised and aggregated technical data that cannot identify you or your content, to monitor and improve the Service.
If, in the future, we choose to introduce any form of training involving user content, we will: (1) notify you clearly and in advance; (2) offer an explicit opt-in — training will not happen without your affirmative consent; (3) allow you to withdraw that consent at any time.
08Sharing & Sub-Processors
We work with carefully selected third-party service providers who help us operate the Service. These providers act on our instructions and are prohibited from using your data for their own purposes.
| Category | Purpose |
|---|---|
| Cloud hosting & storage | Secure storage and delivery of your content and account data |
| AI model providers | Processing for transcription, captions, visual effects, generation |
| Stock media providers | Licensed b-roll sources (e.g., Pexels, Pixabay, or similar) |
| Payment processors | Processing paid subscriptions (future) |
| Analytics providers | Anonymised product analytics |
| Email & communication tools | Transactional and support communications |
| Error monitoring | Crash and error diagnostics |
09Cross-Border Data Transfers
Some of our sub-processors may be located outside India. Where your personal data is transferred to or processed in a jurisdiction outside India, we rely on the transfer mechanism permitted under the DPDP Rules, 2025.
We take appropriate measures to ensure that your personal data continues to receive adequate protection, including contractual safeguards with our sub-processors.
10Data Retention
| Category | Retention period |
|---|---|
| Account & profile data | Until you delete your account, plus up to 30 days in backups |
| Uploaded video & audio content | Until you delete the project, or account deletion, whichever is earlier |
| Generated AI outputs | Until you delete them, or account deletion, whichever is earlier |
| Transaction & billing records | Up to 8 years as required under Indian tax law |
| Technical logs & analytics | Up to 12 months in identifiable form; anonymised thereafter |
| Support communications | Up to 3 years from last interaction |
11Security Practices
- Encryption of data in transit (TLS 1.2+) and at rest where feasible
- Role-based access control — only authorised personnel can access production systems
- Multi-factor authentication for administrative access
- Regular security reviews, dependency updates, and vulnerability patching
- Logging and monitoring for suspicious activity
- Data processing agreements with all sub-processors
No system is perfectly secure. If you suspect unauthorised access to your account, please contact us immediately.
12Your Rights as a Data Principal
Under the DPDP Act, you have the following rights regarding your personal data:
Right to access
Request a summary of the personal data we process about you.
Right to correction
Ask us to correct inaccurate, incomplete, or outdated data.
Right to erasure
Request deletion of your personal data, subject to legal exceptions.
Right to withdraw consent
Withdraw consent you previously gave, at any time.
Right to grievance redressal
Raise complaints about how we handle your data.
Right to nominate
Nominate another person to exercise your rights in case of death or incapacity.
How to exercise your rights
Email privacy@echovox.in with your account email, a clear description of the right you wish to exercise, and any relevant context. We respond within 30 days.
13Children's Data
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact privacy@echovox.in.
14Cookies & Tracking Technologies
- Essential cookies — required for login, security, and core functionality. These cannot be disabled.
- Functional cookies — remember your preferences (language, theme). Used only with your consent.
- Analytics cookies — help us measure product performance. Anonymised where possible.
You can control cookies through your browser settings or through our in-app consent manager.
15Personal Data Breach Notification
- Notify the Data Protection Board of India within 72 hours of becoming aware of the breach;
- Notify affected users without undue delay, via email or in-app notification, with details of the breach;
- Take reasonable steps to contain the breach and prevent recurrence.
16International Users
Febler AI is operated from India. If you access the Service from outside India, you acknowledge that your data will be processed in India in accordance with Indian law.
- EU/EEA and UK residents: you may have rights to access, rectify, erase, restrict, object, and data portability.
- California residents: you may have rights to know, delete, and opt out of "sale" of personal information (we do not sell your data).
17Grievance Officer & Data Protection Contact
Grievance Officer: [To be appointed]
Privacy queries: privacy@echovox.in
Grievances: grievance@echovox.in
Address: Feblerlabs Technologies Private Limited, Bangalore, Karnataka, India
Response time: Acknowledgment within 24 hours; resolution within 15 days
18Changes to This Policy
- 14 days' advance notice before material changes take effect via email or in-app notification;
- Update the "Last updated" date at the top of this Policy;
- Where required by law, obtain fresh consent.
19Contact Us
- General support: support@echovox.in
- Privacy queries: privacy@echovox.in
- Grievance Officer: grievance@echovox.in
- Postal address: Feblerlabs Technologies Private Limited, Bangalore, Karnataka, India
Last reviewed: 1 November 2026. This Policy is made available in English. You may request a translated version in Hindi or any other 8th Schedule language by contacting us at privacy@echovox.in.