Last updated: 26 May 2026
This notice is issued by Creativehorns LLP (the "Data Fiduciary") under Section 5 of the Digital Personal Data Protection Act, 2023 (India) ("DPDP Act"), in respect of the personal data of users of PixelAPI (pixelapi.dev) and Lensora ("Data Principals"). It supplements our Privacy Policy.
Creativehorns LLP, a limited liability partnership registered in India, having its registered office at B4, Arunav, Sri Malani Colony, Tadbund, Hyderabad – 500009, Telangana, India. Contact: [email protected] (fallback: [email protected]).
| Category of personal data | Specified purpose (Section 4 DPDP Act) |
|---|---|
| Email address, name (if supplied) | Account creation, authentication, transactional communication, grievance redressal |
| API usage logs, IP address, device identifiers | Billing, rate-limiting, fraud and abuse prevention, security incident detection |
| Payment data (processed by Razorpay / PayPal) | Processing payments. We do not store card numbers; tokenised references are held by our payment processors as Data Processors on our behalf |
| Uploaded image, audio, or video files; AI-generated outputs | Processing your request through our AI pipeline. Inputs are deleted within 60 seconds of job completion. Outputs are accessible for 24 hours and then permanently deleted from our servers |
| Provenance metadata embedded in AI-generated outputs (per-job UUID, "AI-generated · PixelAPI" identifier) | Statutory compliance under Rule 3(3)(a)(ii) of the IT Rules, 2021; identification of source account in the event of a grievance under Section 8 of this Notice |
| Support tickets and grievance correspondence | Servicing your request, statutory record-keeping, defending against legal claims |
We process the categories above on the lawful basis of consent (Section 6 DPDP Act) and, for billing and statutory record-keeping, on the basis of legitimate use (Section 7, in particular Section 7(b) for compliance with law). By creating an account or using PixelAPI / Lensora, you consent to this processing for the specified purposes.
We share personal data only with the following categories of Data Processors, each operating under a written processing agreement and only to the extent necessary for the purpose stated:
We do not sell personal data, do not use it for advertising or behavioural profiling beyond our own service, and do not transfer it for use in training third-party machine-learning models.
Some of our Data Processors (Cloudflare, Google, PayPal) operate infrastructure outside India. Such transfers are made in accordance with Section 16 of the DPDP Act and to jurisdictions in respect of which the Central Government has not notified a restriction at the time of this Notice. AI inference (image, audio, video generation) is performed on our own infrastructure located in India.
Under Chapter III of the DPDP Act you have the right to:
You also have the duties set out in Section 15 of the Act, including the duty not to file a false or frivolous grievance, the duty not to suppress material information, the duty not to impersonate another person, and the duty to furnish only verifiably authentic information when exercising the right to correction.
PixelAPI is not intended for use by individuals under the age of 18. We do not knowingly process the personal data of children. If you become aware that a child has provided us with personal data, write to [email protected] and we will delete it without undue delay in accordance with Section 9 of the DPDP Act.
We may update this Notice from time to time. Material changes will be communicated to registered users by email at least 30 days before they take effect, except where the change is required by law and a shorter notice is necessary.