Privacy Policy

1. Who we are

NexAI Studio is run by NexAI Labs LLP (“NexAI Labs”, “we”, “us”), Plot No. 339, GIDC, Pandesara, Surat, Gujarat 394221, India. This policy explains what personal data we collect when businesses use the Service, why, who we share it with and how long we keep it. We are the data fiduciary for this data under India’s Digital Personal Data Protection Act, 2023.

2. What we collect

• Account data: your email address and, if you sign in with Google, the name and email Google shares with us. If you sign up with a password, our sign-in provider stores it in hashed form; we never see it.
• Access requests: the email and note you send when you ask for access.
• Your content: product photos, and reference images such as model faces, poses, backgrounds and props. Face references and some product photos show real people.
• What you make: generated images and videos, the settings and instructions behind them, your approvals, rejections and comments on them, and messages you send to the in-app assistant.
• Payment records: top-up amounts, order and payment IDs, payment status and your credit balance history. To save cards for later, we share your workspace name and email with Razorpay. We never receive or store your full card number or UPI PIN.
• Technical data: server logs of requests, including IP address and browser details, used to run and secure the Service.

3. Why we use it

To create and secure your account and check it against our access list; to generate the images you ask for; to take payments and keep your credit balance and billing records; to answer support requests; to improve and develop the Service and our AI models, including training and evaluating them, using your content, the images made for you, AI records and your feedback on them; to keep the Service secure and working; and to meet our legal obligations. We do not sell your data and do not use it for advertising.

4. How AI processing works

To make an image, we send the relevant photos, references and instructions to an AI model provider (listed below). They process it on our behalf to return the result. If face masking is switched on for a product photo, faces in it are masked before it is sent. We may use your content, the images made for you and AI records to improve and develop the Service, including training and evaluating AI models. AI records are kept.

5. Who we share it with

We share data only with the service providers that run the Service for us:

• Supabase: database and sign-in.
• Resend: delivery of account emails, such as sign-up confirmation and password reset.
• Cloudflare (R2): storage for uploaded and generated images.
• Vercel: hosting and server logs.
• AI model providers that generate and analyse images and videos: Google Gemini models, directly or through an API gateway provider; and fal.ai.
• Razorpay: payments.

Some of these providers may process data outside India. We may also disclose data where the law requires it, or to protect our rights and users.

6. How long we keep it

• We keep your data for as long as we need it for the purposes in this policy, including after you close your account, unless the law requires us to delete it.
• You can delete reference images and products in the app. A deleted image that was never used in a shoot is removed from storage within about two days. An image that was used to make generated images is hidden but kept with their records, and deleting a product does not delete images already generated from it. Ask us if you want those removed too.
• Archiving a product hides it but keeps its data.

7. Cookies and local storage

We use only the cookies the Service needs: sign-in session cookies, and one that remembers whether you collapsed the sidebar. Your theme and last-used brand are kept in your browser’s local storage. We do not load analytics, advertising or tracking tools. When you open the Razorpay checkout on the top-up screen, Razorpay’s own script loads and works under Razorpay’s privacy policy.

8. Security

Data is encrypted in transit, access is limited by workspace, and only authorised NexAI Labs staff can access workspace data, to run and support the Service. No system is perfectly secure, so we cannot guarantee absolute security.

9. Your rights

You can ask to see, correct or delete your personal data, withdraw consent, nominate someone to act for you, and raise a grievance. Email rahul@nexailabs.com. We act on each request as the law requires. If you are pictured in an image a customer uploaded and did not consent, write to the same address and we will act on it.

10. Children

The Service is a business tool for people aged 18 and over. We do not knowingly collect data from children.

11. Changes

We may update this policy. We will change the date at the top and, for material changes, tell you in the Service or by email.

12. Grievance Officer

Under the Information Technology Act, 2000 and the rules made under it, and the DPDP Act, our Grievance Officer is Rahul Juneja, NexAI Labs LLP, Plot No. 339, GIDC, Pandesara, Surat, Gujarat 394221, India. Email: rahul@nexailabs.com. Phone: +91 6352915791. We acknowledge a grievance within 24 hours and aim to resolve it within 15 days. Other ways to reach us are on our Contact page.