Privacy Policy

This policy applies to personal data we process about you ("Data Principal") when you visit our website, create an account, purchase credits, or upload images for processing. For the purposes of the DPDP Act, BITBOUND PRIVATE LIMITED is the Data Fiduciary that determines the purpose and means of processing your personal data.

• Account and identity data: your email address, display name, an optional mobile number, and authentication identifiers, provided through our authentication provider when you register or sign in. If you provide a mobile number, we use it to pre-fill your contact details for UPI payments.
• Image data: the images you upload (Inputs) and the background-removed results we generate (Outputs).
• Transaction data: credit-pack purchases, credit balance, and ledger entries. Payment-card and banking details are collected directly by our payment partner and are not stored by us.
• Usage and technical data: job status, error codes, log data, device and browser information, and similar diagnostics used to operate and secure the Service.
• Cookies and similar technologies: strictly necessary cookies for sign-in and session management.

We process your personal data for the following purposes, on the basis of your consent and the legitimate uses permitted under the DPDP Act:

• to provide the Service: authenticate you, process your images, and deliver your results;
• to operate billing: process credit-pack purchases, maintain your credit balance, and keep an accurate ledger;
• to secure and maintain the Service: prevent abuse and fraud, debug, and ensure reliability;
• to comply with legal, tax, and accounting obligations;
• to communicate with you about your account, transactions, and support requests.

Your images are processed solely to produce the background-removed result you request. Processing uses Cloudflare's image foreground-segmentation technology, and your Inputs and Outputs are stored in Cloudflare R2 object storage using generated keys that are not publicly listable. Downloads are tied to your authenticated account.

After deletion, we retain only minimal job and billing metadata (such as the fact that a job occurred and the associated credit movement) needed for audit, support, and statutory record-keeping. The image content itself is removed.

We share personal data only with Data Processors who process it on our behalf under appropriate contractual safeguards, and only to the extent necessary:

• our authentication provider, to register and sign you in;
• our cloud infrastructure and image-processing provider (Cloudflare), to host the Service and process and store images;
• our third-party payment partners, to collect payments and process refunds;
• professional advisers and authorities, where disclosure is required by law or to protect our legal rights.

We do not sell or rent your personal data to anyone.

Some of our service providers operate global infrastructure, so your personal data may be processed or stored outside India. Where this happens, we rely on providers offering appropriate safeguards, and any such transfer is carried out in accordance with the DPDP Act and any restrictions notified by the Central Government.

• Image Inputs and Outputs: deleted 30 days after the job is created, or immediately on your request.
• Account data: retained while your account is active and deleted on account closure, subject to legal obligations.
• Transaction and tax records: retained for the period required under applicable tax, GST, and Companies Act record-keeping rules.

Subject to the DPDP Act, you have the following rights in respect of your personal data:

• the right to access a summary of the personal data we process about you and the processing activities;
• the right to correction, completion, updating, and erasure of your personal data;
• the right to withdraw your consent at any time, as easily as you gave it;
• the right to nominate another individual to exercise your rights in the event of your death or incapacity;
• the right of grievance redressal through our Grievance Officer.

To exercise any of these rights, contact us at care@bitbound.in. Withdrawing consent or deleting data necessary to provide the Service may limit your ability to use it. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

The Service is intended for users aged 18 and above and is not directed at children. We do not knowingly collect the personal data of children. If we become aware that we have collected such data without verifiable parental consent, we will delete it promptly.

We implement reasonable technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including access controls, generated non-enumerable storage keys, and protected downloads. In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required by the DPDP Act.

We use strictly necessary cookies to keep you signed in and to maintain your session. We do not use third-party advertising cookies. You can control cookies through your browser settings, although disabling necessary cookies may prevent you from signing in.

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email, and the effective date above will be updated.

In accordance with the Information Technology Act, 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the name and contact details of the Grievance Officer are published below. You may contact the Grievance Officer to report any concern, complaint, or violation relating to the service or your data.

We will acknowledge every complaint within 24 hours and make best efforts to resolve it within 15 days of receipt, as required by applicable law. Please include your registered email and enough detail for us to identify the relevant account, job, or transaction.

For general questions about the service, your account, credits, or these terms, contact our support team. For privacy-specific requests, you may also write to our privacy address.