AI Photography Catalogue Software — by Onion Labs Technologies Private Limited
This Privacy Policy explains what personal data we collect when you use Repixel, why we collect it, who we share it with, how long we keep it, and the rights you have. It forms part of our Terms and Conditions. If the two conflict on a privacy matter, this Policy applies.
Repixel (the "Service") is operated by Onion Labs Technologies Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at Gala No. 5, Italian Compound, Dindoshi Village Link Road, near Ambedkar Chowk, Goregaon East, Mumbai, Maharashtra 400063, India ("Onion Labs", "we", "us").
For account and registration data we collect directly from you, we act as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"). For personal data that may appear inside the images you upload (for example, a model's face), we process it on your instructions to provide the Service, and you are responsible for having the right to upload it (see §5).
We do not use your content to train AI models, and we do not sell your personal data.
We process your data to perform our contract with you, to comply with legal obligations, for the legitimate uses permitted under Section 7 of the DPDP Act, and — for analytics and marketing — on the basis of your consent, which you can withdraw at any time.
To generate an image, we send your uploaded images and the instructions for that image to an AI model provider (Google, and for some text-analysis steps, models accessed through OpenRouter). These providers process the data to return a result to us. Image generation runs on Google's paid commercial AI services, whose terms do not permit Google to train its models on the data we send. Text-analysis requests sent through OpenRouter are handled by the model provider OpenRouter selects, under that provider's data policy; these requests contain your images and short instructions, never your account or billing details.
If you upload photographs of identifiable people, including models, you confirm that you have their consent (and, for anyone under 18, the consent of a parent or guardian) to use their image for this purpose. Our Terms prohibit uploading images of real persons without authorisation and prohibit generating adult content.
We share personal data only with service providers who help us run the Service ("Subprocessors"), under contracts that require them to protect it, and only as needed for the purposes below:
| Provider | Purpose |
|---|---|
| Supabase | Authentication, database and file storage |
| Google Cloud | AI image generation (Vertex AI / Gemini), backend hosting and job processing |
| OpenRouter (and the model providers it routes to) | Image-to-text analysis (e.g. describing a background or pose) and the support assistant |
| Cloudflare | Image storage (R2) and bot protection (Turnstile) |
| Vercel | Website hosting, and cookieless, aggregated page-performance statistics |
| Razorpay | Payment processing |
| Zoho Invoice | Generating and storing tax invoices |
| Resend | Sending service emails |
| PostHog | Product analytics — only if you consent (§8) |
If you use a team account, the team owner can see your usage of the team's credits and the activity reports provided in the Team Dashboard. We may also disclose data where required by law, a court order or a government authority, or in connection with a merger, acquisition or sale of our business, in which case this Policy continues to apply to it.
Some of our Subprocessors store or process data outside India. Where that happens, we transfer data in accordance with the DPDP Act and subject to appropriate safeguards, and never to a country that the Government of India has restricted.
You can change your choice at any time from Cookie settings in the app's account menu, or by clearing this site's data in your browser.
| Data | How long |
|---|---|
| Account data | While your account is active. After you cancel your subscription or close your account, 90 days (so you can reactivate), then deleted. |
| Uploaded photos and generated images you save | While your account is active, until you delete them; then as for account data above. |
| Temporary working copies (uploads in progress, unsaved results) | Deleted automatically, normally within 7 days. |
| Generation and usage records (including prompt text) | Up to 12 months. |
| Support conversations | Up to 12 months. |
| Analytics data (if you consented) | Up to 12 months. |
| Payment, credit and invoice records | 8 years, as required by Indian tax and company law. |
| Backups | Deleted data may remain in encrypted backups for up to 30 days before it is overwritten. |
You can ask us to delete your data sooner (§11). We will act on the request within 30 days, except for records we are legally required to keep.
We use encryption in transit (HTTPS), access controls, private storage with time-limited links, and server-side checks on every request. No system is perfectly secure; if a breach affects your personal data, we will notify you and the Data Protection Board of India as the DPDP Act requires.
Under the DPDP Act you have the right to:
If you are in the European Economic Area or the United Kingdom, you also have the rights given by the GDPR, including data portability, the right to object to processing, and the right to complain to your local data protection authority.
To exercise any right, email legal@onionlabs.ai from your account's email address. We will respond within 30 days.
The Service is for businesses and is not intended for anyone under 18. We do not knowingly create accounts for, or collect personal data directly from, children. If you believe a child has given us personal data, contact us and we will delete it.
If we make a material change, we will notify you by email or within the Service before it takes effect, and update the effective date and version above.
Privacy questions and requests: legal@onionlabs.ai
Grievance Officer: Rohit Zutshi · grievance@onionlabs.ai
Onion Labs Technologies Private Limited, Gala No. 5, Italian Compound, Dindoshi Village Link Road, near Ambedkar Chowk, Goregaon East, Mumbai, Maharashtra 400063, India.
The Grievance Officer will acknowledge a complaint within 48 hours and aim to resolve it within 30 days.