Privacy Policy

Identity and Contact Details of the Controller

Repixart ("The Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including our website, applications, and related services (collectively, "The Product"). By accessing or using The Product, you agree to this Privacy Policy.

Purpose of the Processing

We collect and process personal data for the following purposes:

• Providing and maintaining our AI image generation services.
• Processing your transactions and subscriptions.
• Sending service notifications and updates.
• Improving and personalizing our services.
• Analyzing usage patterns and service performance.
• Preventing fraud and ensuring security.

Legal Basis for Processing

The legal bases for processing your personal data include:

• Contract Fulfillment: To provide our services to you.
• Legal Obligation: To comply with applicable laws and regulations.
• Legitimate Interests: To improve our services and protect against fraud.
• Consent: When explicitly requested for certain features (e.g., marketing communications).

Compulsory or Optional Provision of Personal Data

Some data is mandatory to provide our services effectively. Failure to provide this data may result in reduced functionality or inability to use certain features of our website. For example:

• To train a model, images must be provided.
• To create an account, an email address is required.

Recipients of Personal Data

Personal data may be accessed or shared with the following:

• Internal Teams: For general data management and service delivery.
• External Service Providers:
  • Hosting Services: Netcup (server and database, within Europe based storage), Cloudflare (training and generated content - within Europe based storage, and mail redirection).
  • Payment Services: Stripe (billing information).
  • Email Services: Resend and Gmail (email communications).
  • Email Marketing: Brevo (email marketing). Only for users who have subscribed to our newsletter.
  • AI Resource Providers: Replicate and Fal.ai (training image data, outputs, models, and input of upscale image generation) and Kling AI (video generation outputs for text-to-video and image-to-video, and input of image-to-video). We may share data with these companies, or they may have access to it solely for the purpose of performing our services to our users under the terms of our contract with them. For more information, please review their privacy policies: Replicate, Fal.ai, and Kling AI.
• By accepting our Privacy Policy, and using our services, you also agree to the privacy policies of our necessary partners in order to provide our services to you.
• Notably, if you refuse that we share your data with Kling AI, please refrain from using our video generation services as it is not possible to generate videos without sharing your data with them.

Retention Period for Personal Data

We retain personal data in accordance with the following policies:

• Account Information: Retained until account deletion.
• Email when subscribed in our newsletter: Retained until unsubscribed.
• Training Images:
  • Deleted as soon as operationally possible (usually within one hour after the training is completed) unless the subscription plan allows retention and the user chooses to keep the training images within our storage. In this case, retained until manually deleted or until the linked model is deleted.
• Other Uploaded Images: (for upscale, image-to-video, etc, but not for training models)
  • Deleted as soon as operationally possible.
• Generated Images:
  • Retention varies by subscription:
    • Basic Account: Automatically deleted after 30 days.
    • Starter/Premium Account: Automatically deleted after 60 days.
    • Ultimate Account: Automatically deleted after 90 days.
  • These periods represent the standard storage durations provided to users. At our discretion, we may extend these durations. However, all generated images will be deleted no later than 90 days after the end of an active subscription.
  • Can be manually deleted by the user or deleted upon account deletion.
• Trained AI Models:
  • Stored for the subscription duration and deleted within 90 days after it ends.
  • May be deleted if unused for 90 days.
• Payment Information: Retained in accordance with tax and financial regulations.

Rights of the Individual in Their Data

You have the following rights regarding your personal data:

1. Access and Copy Rights: You may access your personal data and request additional copies, which may incur a reasonable administrative fee.
2. Modification and Rectification: You can modify your data through your account settings. Ensure your data is accurate and up-to-date.
3. Right to Erasure and Opposition: You may request the deletion of your data and object to its processing under certain conditions.
4. Data Portability: You may request your data in a structured format for transfer to another service provider.
5. Post-Mortem Directives: You may provide instructions on the management of your data after your death.
6. Consent Withdrawal: You may withdraw consent at any time for processing based on your consent.
7. Exercising Rights: Contact us via your account or at [email protected].

Right to Lodge a Complaint with the CNIL

If you believe your rights have been violated or if our responses are unsatisfactory, you have the right to lodge a complaint with the CNIL:

• Address: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07
• Website: www.cnil.fr

Source of Personal Data

In addition to direct collection, we may receive personal data from third-party services at your request (e.g., Google sign-in). This may include your email address, profile picture, name, account ID, and other relevant information.

Cookies

You can check our cookies policy here.

Transfer of Personal Data Outside the EU

In some cases, data may be transferred outside the EU (e.g., to AI providers for processing). We ensure appropriate safeguards are in place, or situations such as:

• Adequacy decisions by the European Commission.
• Data Processing Agreements (DPAs).
• Transfers necessary for contract performance or based on explicit user consent. (Article 49 GDPR)

For the training images of our users, where possible, data is processed and stored within the EU, and non-EU data is deleted as soon as possible.

For the image-to-video generation of our users, image data will be shared with Kling AI in order to create the requested video trough our own provider.

To be clear, to provide our AI-powered services, we work with third-party AI providers outside the EU. These providers may access or be shared your data as part of our service delivery when necessary (image input for image-to-video generation, training images for model training). These countries may have different data protection standards. If you do not consent to this transfer, we will be unable to provide the image-to-video generation service, as well as the creation of personalized models, and other AI-powered services that require personal data input from the user (notably images), as it is essential to the functionality of those services.

You can still use our services that does not require personal data input from the user, such as text-to-image generation from 'vanilla' models (meaning not from your trained models) as no personal data will be shared with third-party, non-EU providers.

Contact Details of the Data Protection Officer (DPO)

We do not currently have a designated Data Protection Officer (DPO) as it is not mandatory for our operations. For any privacy-related inquiries, you may contact us at [email protected].

For more information about the identity and contact details of the controller, please refer to our Legal Notices page.