Privacy policy

1. Who we are

Metabob Private Limited ("Metabob", "we", "us") is a company registered in India that operates a text-to-image generation service. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described below, and you are the Data Principal.

This policy covers metabob.in and the Metabob Studio application. It does not cover third-party sites we link to.

2. What we collect

Account data. Your name, email address and password hash when you create an account. If you sign in through a third-party identity provider, we receive your name and email from that provider.

Prompts and generated images. The text you submit and the images the model returns, together with the settings used (style family, aspect ratio, seed). These are stored so your history and downloads work.

Usage and technical data. Pages viewed, features used, approximate location derived from IP, browser and device type, and error diagnostics. We use this to keep the service working and to decide what to build next.

Payment data. If you buy a paid plan, our payment processor collects and holds your card or UPI details. We never see or store your full payment credentials — we receive only a transaction reference, the amount, and whether it succeeded.

Communications. Anything you send us by email or through the contact form.

3. What we do not do with your prompts

This is the commitment we make most prominently on our home page, so we will be precise about it here.

We do not train our models on your prompts or on the images you generate. Your prompts are used to produce your output and to populate your own history. They are not added to a training corpus, not used to fine-tune a shared model, and not sold or licensed to anyone.

Two narrow exceptions, both of which are about safety rather than model improvement: an automated classifier screens prompts and outputs against our Acceptable Use Policy, and where a submission is flagged, a small number of authorised staff may review it to decide whether to act on the account.

4. Why we process it

Under the DPDP Act we process personal data on the basis of the consent you give when you create an account and accept these terms, and for the legitimate uses the Act permits — chiefly performing the service you asked for, and complying with law.

Concretely, we use your data to operate and secure your account, generate and store your images, take payment, respond to you, detect abuse and fraud, meet legal and tax obligations, and understand aggregate usage so we can improve the product.

We do not sell personal data, and we do not use your data for advertising profiling.

5. Who we share it with

We share personal data only with service providers who process it on our instructions and under contract, in these categories:

Infrastructure and hosting — compute, object storage and content delivery for running the model and serving the application. Payment processing — to take and reconcile payments. Communication tools — to send transactional email. Analytics and error monitoring — to measure usage and diagnose faults.

We may also disclose data where we are legally required to, or to establish or defend a legal claim. If the business is ever acquired or merged, data may transfer as part of that transaction; we will tell you before it does.

6. Where it is processed

Metabob operates from India and processes personal data in India. Some of the service providers above may process data outside India. Where that happens we rely on contractual protections with the provider, and on the transfer rules set out in the DPDP Act and any restrictions the Central Government notifies under it.

7. How long we keep it

Account data — for as long as your account is open, and for up to 90 days after you close it, so the deletion can be reversed if it was a mistake.

Prompts and generated images — until you delete them, or until your account is closed and the 90 day window passes.

Payment and tax records — for the period Indian tax and companies legislation requires us to keep them, which is longer than the periods above and applies even after your account is closed.

Logs and diagnostics — typically 30 to 90 days.

8. Your rights

As a Data Principal under the DPDP Act you can ask us to:

Give you a summary of the personal data we hold about you and how we have processed it; correct or complete data that is wrong or out of date; erase personal data we no longer need for the purpose it was collected for; and you can withdraw consent at any time, as easily as you gave it. You may also nominate another person to exercise these rights on your behalf if you die or become incapacitated.

Withdrawing consent does not make our earlier processing unlawful, and it may mean we can no longer provide the service.

To exercise any of these, email help@metabob.in. We will respond within the period the DPDP Act allows. We may ask you to verify your identity first.

9. Grievance redressal

If you are not satisfied with how we have handled your data or a request, you can escalate to our Grievance Officer, appointed under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act:

Grievance Officer: Adarsh Yadav
Email: help@metabob.in
Address: 4820 Ankur Building, Prem Nagar, Mumbai, Maharashtra 400104

We acknowledge grievances within 24 hours and aim to resolve them within 15 days. If you remain dissatisfied, you may complain to the Data Protection Board of India.

10. Security

We use encryption in transit, encryption at rest for stored images, hashed passwords, access controls that limit staff access to what their role requires, and logging of administrative actions.

No system is perfectly secure, and we will not pretend otherwise. If a personal data breach occurs we will notify the Data Protection Board of India and affected users as the DPDP Act requires.

11. Children

Metabob is not intended for anyone under 18. We do not knowingly collect personal data from children. Under the DPDP Act, processing a child's data requires verifiable parental consent, and we do not currently offer a mechanism for that — so if we learn that a user is under 18, we will close the account and delete the data.

12. Changes to this policy

We will post any change here and update the date at the top. If a change materially affects your rights we will tell you by email or in the application before it takes effect.

Questions about this document can go to help@metabob.in, or by post to Metabob Private Limited, 4820 Ankur Building, Prem Nagar, Mumbai, Maharashtra 400104.