Privacy Policy

Last updated: July 24, 2026

This Privacy Policy explains how Adeveda Enterprises Private Limited ("Mixar," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use our websites, the Mixar application, our design tools, and related services (collectively, the "Service"). It also explains the privacy rights available to you and how to exercise them.

By using the Service, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the Service.

1. Scope

This Policy applies to personal information we process in connection with the Service, including our websites, mobile and desktop applications, APIs, design tools, and related online offerings.

This Policy does not apply to:

Third-party websites, applications, or services that may be accessible through or linked from the Service, even if they are integrated with it (e.g., third-party AI providers you connect via BYOK);
Personal information relating to our employees, contractors, and job applicants, which is governed by a separate notice available on request.

2. Information We Collect

2.1 Information you provide to us

Category	Examples
Account data	Name, email address, and profile details you provide when you register or sign in (including via Google sign-in)
Content	3D models, textures, files, prompts, and other materials you upload to, or generate using, the Service ("Content")
Billing data	Your subscription plan and transaction history. Full payment card details are collected and processed directly by our payment processor, Dodo Payments; we do not store full card numbers on our own systems
API keys (BYOK)	If you choose to "Bring Your Own Key" to connect a third-party AI provider, we store that key in encrypted form to operate the corresponding feature.
Communications	Information you provide when you contact support, report a bug, or otherwise reach out to us

2.2 Information we collect automatically

Usage data — features used, actions taken, and generation activity within the Service.
Device and log data — browser and device type, operating system, app version, IP address, and timestamps.
Cookies and similar technologies — see our Cookie Policy. We use Google Analytics to understand how the Service is used.

We do not knowingly collect more personal information than is reasonably necessary to provide and improve the Service.

3. How We Use Your Information

We use personal information to:

Provide, operate, secure, and maintain the Service, and personalize your experience within it;
Process your inputs and deliver AI-generated outputs, including routing requests to third-party AI providers where you choose to use them (BYOK);
Process payments, manage subscriptions, detect fraud, and enforce billing terms;
Communicate with you about your account, security notices, updates, and support requests;
Analyze and improve the Service, diagnose technical issues, and understand aggregate usage trends;
Comply with legal obligations and enforce our Terms of Service and Acceptable Use Policy.

3.1 Use of Content for model training

We do not currently use your Content (uploads, prompts, or generated outputs) to train or fine-tune Mixar's underlying AI models. We may use limited, aggregated, or de-identified usage data for quality assurance, debugging, and product improvement, in a form that does not identify you or reveal your Content to other users.

If this practice changes in the future, we reserve the right to update this Policy in advance by providing clear notice, and, where required by applicable law, obtaining your consent or offering an opt-out before any such use begins.

4. Ownership of Content and AI-Generated Outputs

Your Content remains yours. As between you and Mixar, you retain all rights, title, and interest in the Content you upload to the Service, subject to the limited license below.
License to operate the Service. You grant Mixar a worldwide, non-exclusive, royalty-free license to host, store, process, transmit, and display your Content solely as necessary to provide, maintain, and improve the Service for you (including generating outputs you request).
AI-generated outputs. Ownership of outputs generated using the Service is governed by our Terms of Service. Because outputs may be produced using third-party AI models (including via BYOK), your rights in a given output may also be subject to that provider's terms, and you are responsible for ensuring your use of any output complies with applicable law and third-party rights.
Nothing in this Policy transfers ownership of your Content to Mixar beyond the limited operating license described above.

5. Third-Party AI Providers and BYOK

If you connect your own API key for a third-party AI provider ("BYOK"):

We store your key using industry-standard encryption, both in transit (TLS) and at rest. Mixar personnel do not have routine access to your key in plaintext.
Your key is used solely to route your requests to the corresponding third-party provider on your instructions.
Once your Content or prompts are transmitted to a third-party provider via BYOK, that provider's own privacy policy and terms govern their handling of your data. Mixar is not responsible for the data practices of third-party AI providers you choose to connect.
You may disconnect or delete a stored BYOK key at any time through your account settings; upon deletion, we remove the stored key from our active systems, subject to standard backup retention cycles described in Section 9.

6. How We Share Your Information

We do not sell your personal information. We may share personal information to the following persons or for the following reasons:

Service providers who process data on our behalf under contracts requiring appropriate confidentiality and security safeguards - for example, cloud hosting providers, payment processing (Dodo Payments), analytics (Google Analytics), and email delivery providers.
Third-party AI providers you choose to connect (BYOK) - solely to fulfill your requests, as described in Section 5.
For legal reasons - to comply with applicable law, respond to lawful requests from public authorities, or protect the rights, safety, and property of Mixar, our users, or the public.
In a business transfer - in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to this Policy or a materially equivalent one.

We maintain a current list of categories of service providers and sub-processors and will make it available on request.

7. International Data Transfers

Mixar is based in India, and your information may be processed in India, the United States, or other countries where we or our service providers operate. Where we transfer personal information across borders, we use appropriate safeguards required under applicable law, such as the European Commission's Standard Contractual Clauses, equivalent mechanisms, or contractual protections consistent with India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

8. Cookies and Analytics

Please see our Cookie Policy for full details on the cookies and similar technologies we use.

We use Google Analytics to understand Service usage. Depending on your jurisdiction, the sharing of information with analytics providers like Google may be treated as a form of "sale" or "sharing" under certain U.S. state privacy laws, even though we do not sell personal information for monetary consideration. Where applicable, we provide a mechanism to opt out of such sharing. To the extent our use of analytics tools constitutes "sharing" under applicable law, you may opt out at [insert opt-out link / "Do Not Sell or Share My Personal Information" mechanism]. We will not discriminate against you for exercising any of these rights.

9. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service, and thereafter as necessary to:

Comply with legal, tax, or regulatory obligations;
Resolve disputes and enforce our agreements;
Maintain security and backup integrity.

You may request deletion of your account at any time. Following a verified deletion request, we will delete or anonymize your personal information within 30 days, except where continued retention is required by law. Residual copies may persist briefly in encrypted backups until they are cycled out per our standard backup schedule.

10. Questions or Concerns

If you have any questions, doubts, or concerns about this Policy or how your personal information is handled, please reach out to us at support@mixar.app. We may need to verify your identity before processing certain requests.

11. Children's Privacy

The Service is not directed to children under 16, or the age required by your jurisdiction. We do not knowingly collect personal information from children below the applicable age. If you believe a child has provided us with personal information, please contact us at support@mixar.app so that we can investigate and delete it as appropriate.

12. Security

We implement technical and organizational measures designed to protect personal information, including:

Encryption of BYOK API keys and other sensitive credentials at rest, and TLS encryption in transit;
Access controls limiting internal access to personal information on a need-to-know basis;
Regular review of our security practices.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you and relevant authorities as required by applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last updated" date and, for material changes, provide additional notice (such as an in-app notification or email) where appropriate.

14. Governing Law

This Policy is governed by the laws of India, without regard to conflict-of-law principles. Any disputes arising out of or relating to this Policy will be subject to the exclusive jurisdiction of the courts at New Delhi, India, without prejudice to any mandatory consumer protection or data protection rights you may have in your own jurisdiction.