Effective date: 18 October 2026
This Privacy Policy explains how THE WICTORY, based in Mohali, Punjab, India ("The Wictory", "we", "us"), as the provider of Bespoke (the "Service"), handles personal data. We act as the data fiduciary (controller) for account, billing and usage data. For the content you upload, we process personal data on your behalf to edit your videos.
This policy is designed to meet the Information Technology Act, 2000 and its rules, the Digital Personal Data Protection Act, 2023 as it comes into force, and, where they apply, the GDPR and US state privacy laws. Region-specific rights are described in Your Privacy Rights.
1. Data we collect
Account data. Your name, email address, a securely hashed password (we never store your password in readable form), the plan you choose, and account status.
Mobile number. If you claim the free trial, your Indian mobile number, verified by one-time password through Google Firebase. We keep it to make sure each number receives the trial only once.
Device and network signals. To make sure each person receives the free trial only once, we store a random device identifier (in a cookie), a browser fingerprint (a one-way code worked out from browser settings), a simplified form of your email address and the IP address used when you sign up, linked to your account. We keep them for as long as needed to prevent abuse of the free trial and fraud, and we do not use them for advertising.
Your content. Videos, audio, scripts, images (such as presenter photos and logos), call-to-action files and project details you upload, and the finished videos we produce. Your content may contain personal data of you and of other people who appear or are heard in it.
Payment data. When you buy a plan, the payment is handled by our RBI-authorised payment gateway partner. We receive the order and payment identifiers, the amount, the payment method type (for example UPI or card) and the payment status. We never receive or store your full card number, CVV, UPI PIN or bank login.
Usage and technical data. Credit balance and history, video processing status, and the technical data our servers record in logs to run and protect the Service, such as IP address, browser type, the pages and features you use and error information.
Communications. Messages you send to us, feedback you submit in the Service, and the details you give when you join a waitlist or ask to be contacted.
We do not use advertising or analytics trackers on the Service.
2. How we use data
We use personal data to:
- create and manage your account and authenticate you;
- process your videos and deliver the results to you;
- verify your mobile number and prevent abuse of the free trial;
- process payments, add credits, issue receipts and handle refunds;
- provide support and respond to your requests;
- send you service messages, such as email verification, password reset and important changes;
- keep the Service secure, detect and prevent fraud and misuse, and fix errors;
- comply with legal, tax and accounting obligations.
We rely on your consent (which you can withdraw), on the performance of our contract with you, on our legitimate interests in running a secure and reliable service, and on legal obligations. We do not sell personal data and we do not use your videos or scripts to train artificial-intelligence models.
3. How AI is used
To edit your video, parts of your content are processed by automated systems, including AI models from third-party providers. For example, your script and the speech transcript are used to time captions, and the spoken lines are used to choose matching B-roll. These providers process the data only to return results to us, under their business terms. See our AI-Generated Content Disclosure.
4. Sharing
We share personal data only with service providers who help us run the Service, and only as needed for their task:
- Amazon Web Services – hosting and processing (servers in Mumbai, India);
- Submagic – caption rendering and video processing;
- AI model providers (such as Anthropic and OpenAI) – script, transcript and caption text processing, and B-roll matching;
- Google – mobile verification (Firebase), email delivery and secure storage of finished videos;
- Payment gateway partner (RBI-authorised) – payments.
The full list is in our Third-Party Services Disclosure. We may also disclose data if required by law or a lawful order, to protect the rights, property or safety of users or the public, or as part of a sale or reorganisation of our business, in which case this policy will continue to apply.
Some providers process data outside India. Where personal data is transferred abroad, we rely on the provider's contractual and security commitments and on the safeguards required by applicable law.
5. Retention
We keep personal data only as long as needed:
- raw uploaded videos and source files: deleted 15 days after the video finishes processing;
- finished videos: available to download for 30 days, then deleted;
- account data: for as long as your account is open, then deleted as described in our Data Retention & Deletion Policy;
- payment and invoice records: kept for the period required by Indian tax and accounting law (generally 8 years);
- logs: kept for a limited period for security and troubleshooting.
6. Security
We protect data with encrypted connections (HTTPS/TLS), hashed passwords, access controls that limit who can reach systems and data, and separate storage for each customer's projects and videos. Payments are processed by our RBI-authorised, PCI-DSS compliant payment gateway partner. No system is perfectly secure; if a personal data breach affects you, we will notify you and the authorities as required by law. See our Security Policy.
7. Your rights
Subject to applicable law, you can ask to access, correct, update or delete your personal data, withdraw consent, and nominate another person to exercise your rights in case of death or incapacity. You can update most account details in the Service, or write to support@thewictory.net. We will respond within the time required by law. If you are not satisfied, you can contact our Grievance Officer (below) and, where applicable, the Data Protection Board of India or your local data protection authority.
8. Children
The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
9. Content about other people
If your videos include other people (for example patients, staff or customers), you are responsible for obtaining their consent and for meeting any professional confidentiality rules. Do not upload sensitive information about others unless you are entitled to.
10. Cookies and local storage
We use only the browser storage needed to keep you signed in and to make the Service work. Details are in our Cookie Policy.
11. Changes
We may update this policy. We will post the updated version here with a new effective date and notify you of material changes by email or in the Service.
12. Grievance Officer
In accordance with the Information Technology Act, 2000 and its rules, our Grievance Officer is:
Mr. Amit Chauhan THE WICTORY, MidTown Business Park, Mohali, Punjab 140603, India Email: grievance@thewictory.net
We acknowledge grievances within 24 hours and aim to resolve them within 15 days of receipt.
Contact
THE WICTORY MidTown Business Park, Mohali, Punjab 140603, India GSTIN: 03BOKPC7024R1ZQ Email: support@thewictory.net Grievance Officer: Mr. Amit Chauhan, grievance@thewictory.net