Privacy Policy

1. About DICE

DICE (Digital Identification & Certification Ecosystem) is a business platform designed to help companies identify products, read product labels, interpret ingredient information, and assess the benefits and risks of ingredients used across products. By combining product identification, label analysis, and AI-based review, DICE helps businesses understand compliance requirements, identify regulatory gaps, and manage certification, conformity, and market-access workflows more efficiently.

Our AI-powered system can help interpret product information such as declarations, ingredient lists, usage intent, and packaging details, making it easier for businesses to recognize what a product contains, what it is intended to do, and which regulatory standards may apply. This includes understanding ingredients, their benefits, possible side effects or risks, and where they may affect compliance, safety, or labeling obligations.

DICE is intended for use by businesses and professional users. It is operated by Sanyog Conformity Solutions Pvt. Ltd., based in India.

2. Information We Collect

We collect only the information needed to operate the app and provide the services you request:

What we do not collect: DICE does not collect your contacts, health data, precise location, browsing history, or advertising identifiers, and it does not record microphone audio. Card and bank details you enter for a payment are handled by our payment provider (see Section 7) — DICE does not store your full card numbers.

3. How We Collect Information

• Directly from you — when you register, complete your business profile, create applications, upload documents or photos, make a payment, or type into AI features.
• Automatically from your use of the app — such as your push-notification token, basic device information, and basic in-app activity needed to provide the service. DICE does not use analytics, advertising, or tracking software, and does not track you across other apps or websites.
• From sign-in providers you choose — if you sign in with Google or Apple, we receive basic profile information (such as your name and email address) from that provider to create or access your account.

4. How We Use Information

We use the information we collect to:

• create and manage your account;
• run certification, conformity, and application workflows;
• manage your documents and applications;
• support inspection and testing workflows;
• send you notifications related to your activity and account;
• process your payments and orders; and
• provide optional AI-powered features when you choose to use them (see Section 5).

We do not sell your personal data to third parties.

5. AI-Powered Features

Some features in DICE are optional and powered by artificial intelligence — for example, classifying products, analyzing compliance requirements and risks, and answering your questions. When you use one of these features, the information needed to process your request is sent to OpenAI, a third-party AI service provider, which processes it and returns a result.

What information may be sent to OpenAI

Depending on the AI feature you use, the information sent may include:

• relevant business profile information (company name, business role, company size, industries, target export markets, certifications of interest, and country);
• the questions and product details you type (such as product names, descriptions, HS codes, markets, and trade or risk context);
• product photographs you choose to submit to the AI Quality Analyzer; and
• the text of a document you choose to submit for AI analysis.

This information is sent only to generate your result for the feature you are using. Information is not sent to OpenAI when you are not using an AI feature, and OpenAI does not automatically receive all of your data or all of your documents.

OpenAI processes this information as a separate company under our agreement with it. We do not control how OpenAI handles data beyond that agreement, and we make no additional representations here about how OpenAI retains, anonymizes, or otherwise uses that information.

6. How We Share Information

We share information only as needed to provide the service, and in the following ways:

• Service providers / infrastructure — cloud hosting and encrypted file storage, and email and SMS/notification delivery, provided by Amazon Web Services.
• Authentication providers — Google and Apple, when you choose to sign in with them.
• Payment provider — Razorpay, to process your payments.
• AI provider — OpenAI, only when you use an AI feature and only after you give permission (see Section 5).
• Certification-related recipients — where required to process your request, information may be shared with relevant government or regulatory bodies (such as BIS, FSSAI, and WPC) and with accredited testing laboratories that require product and company information to perform testing.

We do not sell your personal data. Where we share information with third parties, those third parties are expected to provide appropriate protection for that information, consistent with applicable privacy requirements and the commitments described in this policy.

7. Third-Party Services

DICE relies on the following third-party services. Each receives only the information needed for its role:

8. Data Security

We take reasonable measures to protect your information. We protect information in transit using encrypted HTTPS/TLS connections. Uploaded files are stored in encrypted cloud storage, and sensitive credentials are encrypted at rest. Access to production systems is restricted to authorized personnel, and access is controlled through authentication.

No method of transmission over the internet or method of electronic storage is completely secure. While we work to protect your information, we cannot guarantee its absolute security.

9. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this policy — including providing the service and maintaining legitimate business, certification, financial, accreditation, compliance, security, and dispute-resolution records. We keep your account and profile information for as long as your account is active.

When you delete your account (see Section 10), we handle information as follows:

• Deleted — personal content you own, such as your AI conversation history, notifications, saved items, push-notification registrations, scheduled meetings, standalone contact enquiries, and private files you uploaded that are not part of a certification or compliance record (the underlying files are removed from storage).
• Anonymized — records we keep for legitimate business or compliance reasons but that no longer need to identify you, such as your profile, sign-in credentials, and personal information contained within records we must retain.
• Retained — shared organization records and records we are required to keep for business, financial, accreditation, or compliance reasons, such as certification and application records, invoices and payment records, support history, and documents that form part of a certification record or that are under a legal hold.

Shared organization data is not deleted when you delete your account, because it may belong to other members of your organization. Records we retain for the reasons above are kept, and the personal information within them is removed or anonymized where possible.

10. Account Deletion

You can delete your DICE account at any time from within the app, under Profile → Delete Account.

When you delete your account:

• we permanently delete the personal content you own, as described in Section 9;
• we anonymize your profile and sign-in credentials so they no longer identify you;
• we anonymize personal information contained within records we retain for legitimate business or compliance reasons; and
• we preserve shared organization records and certain certification, financial, audit, and compliance records that we are required or permitted to keep.

If you need help deleting your account or have questions about what happens to your data, contact us using the details in Section 15.

11. Your Privacy Choices & Rights

• Access and correction — you can view and update your profile information in the app, and you can request a copy of your personal data.
• Deletion — you can delete your account at any time from Profile → Delete Account (see Section 10).
• AI consent — you can allow, review, or withdraw your consent for AI-powered features at any time in Settings → AI Features & Privacy.
• Communications — you can manage notification permissions on your device, and withdraw consent for non-essential communications.

To exercise any of these rights, contact us using the details in Section 15.

12. Children's Privacy

DICE is a business application intended for businesses and professional users. It is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us using the details in Section 15 and we will take appropriate steps to address it.

13. International Data Processing

DICE is operated from India. Because we use third-party services to provide the app — including those listed in Section 7 — your information may be processed or stored on servers located outside your country, including outside India. Where information is processed in this way, we take steps consistent with this policy to protect it.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the app or in our practices. When we do, we will revise the "Last updated" date at the top of this page. Where changes are material, we will provide an appropriate notice. We encourage you to review this policy periodically.

15. Contact Us

For privacy-related questions or requests, contact us: