Privacy Policy
Effective date: 2026-06-04
1. Who We Are
BITBOUND PRIVATE LIMITED ("we", "us") operates AI Image Studio and is the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act") for the personal data described in this Policy. This Policy explains what we process, why, and the rights you have.
2. Data We Collect
Account data (name, email, hashed credentials); the prompts and other inputs you submit; the images you generate; billing and transaction records for Credit purchases (full card details are handled by our payment processors, not stored by us); and technical data such as IP address, device information, and service logs.
3. Purposes and Legal Basis
We process personal data with your consent (Section 6 of the DPDP Act) and for certain legitimate uses (Section 7): to provide and secure the Service, run generations, manage Credits and payments, provide support, prevent fraud and abuse, and comply with law. You may withdraw consent at any time by contacting us; withdrawal does not affect processing already performed.
4. Processors and Sharing
We engage Data Processors to process data on our behalf: a model provider (Replicate) that runs generations on your prompts, payment processors for purchases, and cloud hosting and object storage for the Service and your images. We do not sell personal data. We may disclose data where required by law or lawful order.
5. Cross-Border Transfers
Personal data may be processed outside India, including by the model provider and hosting providers. Under Section 16 of the DPDP Act, transfers are permitted except to countries restricted by the Central Government; we apply contractual safeguards to such transfers.
6. Retention and Deletion
We retain account data and images while your account is active. When you delete your account, or when data is no longer needed for its purpose, we erase it unless retention is required by law (for example, tax and accounting records).
7. Security
We apply reasonable security safeguards as required by the DPDP Act: encryption in transit, access controls, and isolation of stored images so they are served only to their authenticated owner. In the event of a personal data breach we will notify the Data Protection Board of India and affected users as required by law.
8. Your Rights
Under the DPDP Act you may request access to your personal data (Section 11), correction and erasure (Section 12), grievance redressal (Section 13), and you may nominate a person to exercise your rights (Section 14). To exercise any right, email [email protected].
9. Children
The Service is intended for users aged 18 and over. We do not knowingly process the personal data of children, and we do not offer the Service to minors, for whom the DPDP Act requires verifiable parental consent.
10. Cookies and Tracking
We use essential cookies to keep you signed in and to remember preferences such as language. We do not use third-party advertising cookies. You can manage cookies in your browser settings; disabling essential cookies may break sign-in.
11. Grievances
Privacy grievances are handled by our Grievance Officer, SUBHASH KUMAR THAKUR, [email protected]. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
12. Changes
We may update this Policy. Material changes will be posted on this page with a new effective date.
13. Contact and Entity Details
BITBOUND PRIVATE LIMITED, CIN: U47912HR2026PTC144339. Registered office: D-107, Puri 81 High Street, Sector 81, Ballabgarh, Faridabad, Haryana, India, 121001. Privacy questions: [email protected]. Support: [email protected].