ZERO-DATA RETENTION ARCHITECTURE · DPDP ACT 2023

Privacy Policy & Image Security

We believe your family archives, personal portraits, and confidential client assets belong exclusively to you. Our systems are engineered from the hardware level up to operate with zero persistent photo retention.

Last Updated: August 30, 2026·Indian DPDP & IT Act Compliant· Legal Version 2.4

Volatile RAM Only

Images exist in ephemeral memory buffers strictly during GPU transformation and are immediately purged.

Zero Model Training

We never harvest or reuse user uploads to train, fine-tune, or benchmark future generative models.

TLS 1.3 Transport

All data in transit is encrypted using 256-bit TLS 1.3 ciphers directly to secure inference nodes.

DPDP & GDPR Standard

Full statutory alignment with India's Digital Personal Data Protection Act 2023 and European GDPR standards.

TECHNICAL ARCHITECTURE BREAKDOWN

The Zero-Retention Image Lifecycle

STEP 01

Encrypted Upload

Photo stream uploaded over TLS 1.3 straight to high-speed RAM buffer.

STEP 02

Neural Inference

GPU workers execute segmentation or restoration strictly in volatile VRAM.

STEP 03

Direct Streamback

Rendered full-resolution output stream delivered back to your browser.

STEP 04

Instant RAM Flush

Buffer memory deallocated and wiped. No disk write occurs at any stage.

SECTION 01

Information We Collect

PhotoEditorAI adheres to the principle of strict data minimization. We only collect the minimal digital data required to execute payment transactions and maintain account authentication:

  • Account Identifiers: Name and email address provided during signup or support ticket generation.
  • Transactional Records: Payment transaction identifiers, credit balances, and order receipts generated via our payment processor (Razorpay). We never see or store full credit card numbers, CVVs, or UPI PINs.
  • Diagnostic Telemetry: Anonymized server telemetry (inference response latency, browser viewport size, and error codes) to maintain platform reliability and optimize GPU allocations.
SECTION 02

Information We Strictly Never Collect

We categorically reject invasive data mining practices. We do NOT:

  • Create or store biometric facial recognition embeddings or mathematical facial geometries.
  • Maintain persistent photo galleries, cloud photo archives, or unencrypted image storage.
  • Sell, license, rent, or trade your personal data or uploaded content to data brokers or advertising networks.
  • Utilize user photos to train, test, or fine-tune artificial intelligence models.
SECTION 03

Sub-Processors & Enterprise Cloud Infrastructure

To deliver sub-second inference at scale, PhotoEditorAI partners with Tier-1 enterprise cloud providers operating under strict confidentiality and zero-logging agreements:

Google Cloud Platform & Vertex AI

GPU compute and enterprise Gemini multimodal vision endpoints operating under non-retention data privacy governance.

Razorpay Software Private Limited

PCI-DSS Level 1 compliant gateway partner for secure Indian UPI, NetBanking, and RuPay card billing.

SECTION 04

Your Rights Under DPDP Act 2023 & GDPR

As a user of PhotoEditorAI, you have comprehensive rights regarding your personal information under the Indian Digital Personal Data Protection (DPDP) Act, 2023 and the General Data Protection Regulation (GDPR):

  • Right to Confirmation & Access: Request details regarding what operational account data we hold.
  • Right to Correction & Erasure: Request the deletion of your account metadata and historical support tickets.
  • Right to Grievance Redressal: Direct escalation to our statutory Grievance Officer.
  • Right to Nominate: Designate a representative to exercise data rights in the event of incapacity.
SECTION 05

Statutory Grievance Officer Details

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the details of our designated Grievance Officer are published below:

Grievance Officer: Arjun Mehta (Lead Imaging Engineer & Privacy Officer)

Entity: PhotoEditorAI.in

Email: privacy@photoeditorai.in

Office Address: Indiranagar 100ft Road, Bengaluru, Karnataka 560038, India

Resolution SLA: Acknowledgment within 24 hours; redressal within 15 business days.

Have a question about our refund policy or credit purchases?

Learn about our 7-day money-back guarantee and automatic failed edit credits.

View Refund Policy