Privacy Policy
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Full name
- Email address
- Password — hashed and stored securely; never stored in plain text
If you sign up via Google OAuth, we receive your name and email from Google. We do not receive or store your Google password.
1.2 Payment and Billing Information
When you purchase credits, we collect:
- Transaction details — credit pack selected, order amount, and currency
- Razorpay payment identifiers (payment ID, order ID, and signature)
We do not store your card numbers, UPI IDs, or bank details. Payment processing is handled by Razorpay. Payouts are handled via Stripe Connect.
1.3 Usage and Technical Data
- API usage logs — prediction requests, model invocations, timestamps, response metadata
- Credit balance and consumption records
- API key metadata — creation dates and last-used timestamps
- Device and browser information
- IP address and approximate geolocation
- Referral and navigation data — pages visited, features used, session duration
1.4 Model and Prediction Data
- Model inputs — data sent as part of a prediction request (prompts, images, audio)
- Model outputs — results generated by deployed models
- Model metadata — names, descriptions, version histories, tags, configuration schemas
We process model inputs and outputs solely to deliver prediction results. We do not use your prediction data to train our own models.
1.5 Cookies and Local Storage
We use browser localStorage to store your authentication token for maintaining your session. See our Cookie Policy for full details.
2. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Create and manage your account | Performance of contract |
| Process credit purchases and payouts | Performance of contract |
| Provide serverless GPU inference and model hosting | Performance of contract |
| Track credit balance and usage-based billing | Performance of contract |
| Send transactional emails | Performance of contract |
| Monitor platform health, detect abuse, prevent fraud | Legitimate interest |
| Analyse aggregated usage trends and improve the Platform | Legitimate interest |
| Comply with legal obligations and regulatory requests | Legal obligation |
We do not sell your personal information to third parties.
3. Information Sharing
3.1 Payment Processors
- Razorpay — to process credit purchases
- Stripe Connect — to manage revenue-sharing payouts
3.2 Infrastructure Providers
We use third-party GPU infrastructure providers to execute prediction workloads:
- RunPod
- Koyeb
- Modal
Your model inputs are transmitted to these providers solely for executing the requested computation. Providers are contractually obligated to process data only as instructed by us.
3.3 Analytics
We use Vercel Analytics to understand Platform usage. It collects anonymised, aggregated data and does not use cookies for tracking.
3.4 Legal Requirements
We may disclose your information when required by law, court order, or governmental regulation, or when necessary to protect rights, safety, or security.
4. Data Storage & Security
- All data is stored in PostgreSQL databases hosted on secure cloud infrastructure
- Passwords are hashed using industry-standard algorithms before storage
- Authentication is managed via JSON Web Tokens (JWT), transmitted over HTTPS
- API keys are generated with a secure prefix and the full key is displayed only once
- All data in transit is encrypted using TLS/SSL
- We follow the principle of least privilege for internal access to production systems
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Until you delete your account |
| Transaction and billing records | 7 years (tax and legal compliance) |
| Prediction inputs and outputs | 30 days after completion, then permanently deleted |
| API usage logs | 90 days rolling |
| API keys | Until revoked by you or account deletion |
When you delete your account, we remove your personal data within 30 days, except where retention is required by law.
6. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access — Request a copy of the personal data we hold about you
- Rectification — Request that we correct inaccurate information
- Deletion — Request that we delete your personal data
- Portability — Request your data in a structured, machine-readable format
- Objection — Object to processing based on legitimate interests
- Restriction — Request that we restrict processing in certain circumstances
To exercise any of these rights, contact us at founder@in2peta.com.
7. International Data Transfers
The Platform is operated from India. If you access the Services from outside India, your data may be transferred to and processed in India or in jurisdictions where our infrastructure providers operate. We implement appropriate safeguards to protect your data during international transfers.
8. Children's Privacy
The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete the information promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a prominent notice on the Platform. The "Last Updated" date at the top indicates when the policy was most recently revised.
10. Contact Us
Other policies