CHARMEffective 4 October 2026
Who is responsible
CHARM is made and operated by Pranav Shekhawat. For privacy questions or requests, email pranavshekhawat.nift@gmail.com with “CHARM privacy” in the subject. This notice covers the official CHARM website, our desktop apps and their connected catalogue and update services.
Your photos and artwork
Images you choose in the website demo are processed in your browser. They are not uploaded, saved to our server or used to train models. Reloading or closing the page clears the demo design. The desktop app keeps your imported artwork and saved assemblies on your own device. Sending an image or recording to support is a separate choice; include only what is needed to explain your issue.
Purchases and downloads
If you purchase CHARM, we use your email, edition, currency, approximate country, payment references and payment/refund status to fulfil your order, provide receipts, recover downloads, answer support requests and prevent fraud. Razorpay processes payment information; CHARM does not store your full card number, banking password or payment authentication codes. We keep the terms and reward offer associated with an order so later website changes do not change that purchase's offer.
App update checks
In supported signed releases, connecting your purchase for updates sends the purchase email and payment ID to verify eligibility, together with the platform and processor architecture. We issue an expiring, revocable update credential, stored using macOS Keychain or Windows protected storage; the server retains its hash and associated purchase, platform, architecture and expiry records. Subsequent checks use that credential and technical app information to select eligible releases and verify continuing access. Update requests do not upload your artwork, assemblies or desktop activity and do not subscribe you to marketing. You can turn off automatic checks or disconnect the purchase in Preferences. Disconnecting stops this installation from using that credential; purchase records needed for fulfilment or legal obligations remain. Private previews with automatic delivery disabled do not connect to the update service.
Requests, support and creator rewards
We use information you submit—such as your message, reply email, public video link, reported engagement and order reference—to respond or administer a claim. Optional reply consent is separate from marketing consent. A creator reward claim does not automatically allow us to repost a video. Reposting and community testimonials require separate permission. A credited public post can identify its creator; tell us if you want a post removed from our channels.
Newsletters
Marketing emails about CHARM and future products by Pranav Shekhawat require a separate opt-in and email confirmation. Buying, trying the demo or contacting support does not subscribe you. Use the unsubscribe link in any marketing email, or email us. Unsubscribing does not stop essential purchase, security or requested support messages. We keep a minimal suppression record to avoid subscribing you again accidentally.
Optional analytics and browser storage
With your permission, we count visits and purchase-button clicks using a temporary random identifier and an approximate country code. We do not use advertising trackers or sell your personal information. “Privacy choices” in the footer lets you refuse or withdraw this permission without affecting the demo or checkout. Your browser remembers this privacy choice in local storage. Prices use the approximate country supplied by our hosting service: India uses INR, supported markets use their local currency, and other or unrecognised locations use USD. We do not request GPS location or store a currency preference. A temporary session identifier and checkout recovery details may be held in session storage. Server-created orders and verified sales are counted for transaction administration even when optional analytics is off.
Security and technical information
Our service processes network information to answer requests and detect abuse. CHARM analytics do not retain raw IP addresses; the abuse limiter uses a keyed hash. Hosting, cloud and payment providers may retain technical logs under their own security and retention policies. We use access controls and encrypted connections. No service can promise absolute security; contact us promptly if you suspect a problem with your purchase or data.
Service providers and international processing
Vercel hosts the site; Google Firebase and Cloud provide authentication, storage and application data; Razorpay provides payments; Resend delivers email. They receive information needed to provide those services, and processing may occur outside your country. Required transfer safeguards apply where the law requires them. Social media pages and external video links are opened only when you follow them, and their own privacy terms then apply. The public 3D demo loads visual models and artwork from CHARM, not your desktop files.
Unofficial websites and modified apps
Independent download sites, unauthorised resellers and modified or counterfeit apps may collect information under their own practices. Our privacy notice does not describe or endorse those practices, and we do not authorise them to collect information on our behalf merely because they use the CHARM name or logo. Use the official CHARM website and the download links it supplies. Contact our privacy address if you suspect impersonation or misuse of your purchase details. Our responsibility for our actual service providers and any obligations imposed by law remain unchanged.
Retention
Purchase and refund records are kept while needed to fulfil the licence, resolve disputes and meet applicable accounting or legal obligations. A newsletter confirmation link expires after 24 hours; this is not a promise that every pending record is automatically deleted at that time. Active subscriptions remain until you unsubscribe or request deletion. Support, request and reward records are kept only as long as reasonably needed to handle them and related disputes. Expiring technical records are scheduled for cleanup; provider logs and backups follow their own retention cycles. Contact us for a request concerning a particular record.
Your choices and rights
You can ask what personal information we hold, request a copy, correct it, request deletion, withdraw consent, or object to or restrict a use where the applicable law provides these rights. Other local rights, including portability, remain available where applicable. Email the privacy contact above; we may request proportionate proof that the record belongs to you, never a password or complete card details. We aim to respond within 30 days, or the shorter period required by law. Some financial or dispute records may need to be retained; we will explain the reason. You may also complain to the competent privacy authority available under the law that applies to you.
Children
Checkout and newsletter signup are intended for adults able to make a purchase or give valid consent. We do not knowingly collect children's information through these services. A parent or guardian who believes a child has submitted personal information can contact us for assistance and deletion where appropriate.
Changes
The effective date above identifies this notice. Material changes to how we use personal information will be explained on the website and, where required, notified directly or made subject to a fresh choice. A new notice does not retroactively authorise an unrelated use of information already collected.