Privacy Policygalleri5 AI Studio
galleri5 Technologies Private Limited ("galleri5," "we," "us," "our"), the operator of galleri5 AI Studio (the "Service"), describes in this Privacy Policy how we collect, use, store, share, and protect personal information, and the rights you have over it. It applies to all Users worldwide and forms part of our Terms of Use.
galleri5 complies with the (Indian) Information Technology Act, 2000 and the rules thereunder regarding the collection, use, and retention of personal data, and with applicable data-protection laws.
We collect the following categories of information:
Purposes. We use personal information to provide and operate the Service, perform the generations you request, maintain your generation history for your access, provide support, secure the Service and prevent abuse, process payments, and comply with legal obligations.
Lawful Bases. Where applicable, our lawful bases are performance of our contract with you, our legitimate interests in operating and securing the Service, your consent where required, and compliance with law.
galleri5 does not use your Inputs or Outputs to train, fine-tune, or develop any artificial-intelligence model. We do not sell your personal information or your content, we do not use Your Content for marketing or promotional purposes, and we do not share your content with other Users.
Routing. To generate Outputs, we transmit your Inputs to independent third-party AI providers ("Third-Party Providers") acting as processors, which return Outputs to us. The provider used depends on your request.
Provider Policies Govern. Each Third-Party Provider handles data under its own privacy and retention policies, which vary by provider and by service tier. Whether a provider retains or uses Inputs or Outputs — including to train or improve its own models — is determined by that provider's policies and tier, not by galleri5. We use standard API services and encourage you to review the applicable provider policies.
Service Providers. We may also share data with service providers who support our operations, including cloud-hosting providers and Razorpay or another authorised payment processor. Payment providers process payment data under their own privacy policies and applicable law. We also disclose information where required by law or to protect rights and safety.
The Service runs on reputable third-party cloud infrastructure that provides our hosting, storage, compute, and certain generation capabilities. These providers offer enterprise-grade security and access controls, which we rely on alongside our own measures. Where content is processed within a provider's managed environment, it is handled in accordance with that provider's applicable terms, as described in Section 4.
Secure Storage. Your Content is stored securely on reputable cloud infrastructure, encrypted in transit and at rest, with access controls designed to protect it against unauthorised access.
Accessible Only to You. Your Content is maintained for your own visibility within your Account and is not made available to other Users. galleri5 personnel access it only where necessary to operate, support, or secure the Service, or where required by law.
Our Security Commitment. We use encryption, access controls, and other technical and organisational measures designed to protect your information and keep it safe. While no online service can promise absolute security, we work continuously to safeguard your data and to keep our protections strong.
Retention. We retain your Content for as long as your Account is active or as needed to provide the Service, so you can access your history, unless and until you request deletion.
Deletion on Request. You may delete your Content, or request deletion of your Content and Account, at any time through your Account settings or by contacting us. On a valid request, we aim to respond within 30 days and remove the relevant data from our active systems within a reasonable period, except for limited copies required by law or held in routine backups, which are purged on a rolling schedule.
Provider-Level Deletion. Deletion from galleri5's systems does not by itself require Third-Party Providers to delete data they may have retained under their own policies; where you need provider-level deletion, contact us and we will assist where reasonably able.
The Service is global, and your data may be processed in countries other than your own, including wherever our third-party providers and cloud infrastructure regions operate. Where required, we rely on recognised safeguards, such as standard contractual clauses, for international transfers.
Your Rights. Depending on your location — including under the EU/UK General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act, 2023 (DPDP Act) — you may have rights to access, correct, export, delete, or restrict processing of your personal data, to object to certain processing, and to withdraw consent. You may exercise most of these in your Account settings, or by contacting us at privacy@galleri5.com.
Complaints. You may also have the right to lodge a complaint with your local data-protection authority. In compliance with the Information Technology Act, 2000 and applicable rules, you may raise grievances relating to the processing of your personal information with our Grievance Officer at grievance@galleri5.com.
The Service is not intended for, and may not be used by, persons under 18. We do not knowingly collect personal data from anyone under 18; if we learn that we have, we will delete it.
We may update this Privacy Policy from time to time and will give notice of material changes. For privacy questions or to exercise your rights, contact our privacy team at privacy@galleri5.com. Our registered office is 7th Floor, Lexington Towers, Tavarekere Main Road, Chikka Adugodi, S.G. Palya, Bengaluru, Karnataka 560029, India.