Privacy Policy

Identity and Contact Details of the Controller

Repixart ("The Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including our website, applications, and related services (collectively, "The Product"). By accessing or using The Product, you agree to this Privacy Policy.

Purpose of the Processing

We collect and process personal data for the following purposes:

• Providing and maintaining our AI image generation services.
• Processing your transactions and subscriptions.
• Sending service notifications and updates.
• Improving and personalizing our services.
• Analyzing usage patterns and service performance.
• Preventing fraud and ensuring security.

Legal Basis for Processing

The legal bases for processing your personal data include:

• Contract Fulfillment: To provide our services to you.
• Legal Obligation: To comply with applicable laws and regulations.
• Legitimate Interests: To improve our services and protect against fraud.
• Consent: When explicitly requested for certain features (e.g., marketing communications).

Compulsory or Optional Provision of Personal Data

Some data is mandatory to provide our services effectively. Failure to provide this data may result in reduced functionality or inability to use certain features of our website. For example:

• To train a model, images must be provided.
• To create an account, an email address is required.

Recipients of Personal Data

Personal data may be accessed or shared with the following:

• Internal Teams: For general data management and service delivery.
• External Service Providers:
  • Hosting Services: Netcup (server and database), Cloudflare (training and generated content).
  • Payment Services: Stripe (billing information).
  • Email Services: Resend and Gmail (email communications).
  • AI Resource Providers: Replicate and Fal.ai (training image data, outputs, and models). These providers delete processing data (e.g., training pictures or outputs) within one hour after processing. We may then store this data on our Cloud Storage within Cloudflare (EU-based servers).

Retention Period for Personal Data

We retain personal data in accordance with the following policies:

• Account Information: Retained until account deletion.
• Training Images:
  • Deleted within one hour after model creation unless the subscription plan allows retention and the user chooses to keep the training images within our storage. In this case, retained until manually deleted or until the linked model is deleted.
• Generated Images:
  • Retention varies by subscription:
    • Basic Account: Automatically deleted after 30 days.
    • Starter/Premium Account: Automatically deleted after 60 days.
    • Ultimate Account: Automatically deleted after 90 days.
  • These periods represent the standard storage durations provided to users. At our discretion, we may extend these durations. However, all generated images will be deleted no later than 30 days after the end of an active subscription.
  • Can be manually deleted by the user or deleted upon account deletion.
• Trained AI Models:
  • Stored for the subscription duration and up to 30 days after it ends.
  • May be deleted if unused for 90 days.
• Payment Information: Retained in accordance with tax and financial regulations.

Rights of the Individual in Their Data

You have the following rights regarding your personal data:

1. Access and Copy Rights: You may access your personal data and request additional copies, which may incur a reasonable administrative fee.
2. Modification and Rectification: You can modify your data through your account settings. Ensure your data is accurate and up-to-date.
3. Right to Erasure and Opposition: You may request the deletion of your data and object to its processing under certain conditions.
4. Data Portability: You may request your data in a structured format for transfer to another service provider.
5. Post-Mortem Directives: You may provide instructions on the management of your data after your death.
6. Consent Withdrawal: You may withdraw consent at any time for processing based on your consent.
7. Exercising Rights: Contact us via your account or at [email protected].

Right to Lodge a Complaint with the CNIL

If you believe your rights have been violated or if our responses are unsatisfactory, you have the right to lodge a complaint with the CNIL:

• Address: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07
• Website: www.cnil.fr

Source of Personal Data

In addition to direct collection, we may receive personal data from third-party services at your request (e.g., Google sign-in). This may include your email address, profile picture, name, account ID, and other relevant information.

Cookies

You can check our cookies policy here.

Transfer of Personal Data Outside the EU

In some cases, data may be transferred outside the EU (e.g., to AI providers for processing). We ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the European Commission.
• Data Processing Agreements (DPAs).
• Transfers necessary for contract performance or based on explicit user consent.

Where possible, data is processed and stored within the EU, and non-EU data is deleted as soon as possible.

Contact Details of the Data Protection Officer (DPO)

We do not currently have a designated Data Protection Officer (DPO) as it is not mandatory for our operations. For any privacy-related inquiries, you may contact us at [email protected].

For more information about the identity and contact details of the controller, please refer to our Legal Notices page.