Privacy Policy
Effective 27 October 2026
This policy explains what personal data Voxelis collects when you use https://voxelis.in and OmniSplat (https://omnisplat.voxelis.in), why, who else handles it, how long we keep it and what you can do about it. We are the Voxelis team: Aarsh Joshi, Samarth Hannure and Darshan Bari, three founders working in India and not yet a registered company. We decide why and how your data is used (a "data fiduciary" under India's Digital Personal Data Protection Act, 2023). We aim to follow that Act and the Information Technology Act, 2000 with its Reasonable Security Practices Rules, 2011.
Contact and grievance officer: Aarsh Joshi, founder@voxelis.in.
1. What we collect, and why
| Data | Why |
|---|---|
| Account: username, a salted hash of your password (never the password), your role, whether we have approved the account, and when it was made | Sign you in; review new accounts before they can run jobs |
| Sign-in with Google, GitHub, Discord or GitLab: the provider's user id for you, your email address if the provider says it is verified, and your login or username there. We get no password, contacts, repositories or messages | Let you sign in with that provider; make your username |
| Your jobs: the photo or video you upload, your text prompt, the quality choice, the original file name, the job name you give, the video part or frame you pick | Run your job and show your history |
| Results: 3D model files, a viewing copy, a frame image, edits you save, status, time of each step, and technical error details | Give you results, fix problems, and measure and plan the service |
| Spoken prompts: if you press the microphone on the text form, your recording. We do not keep the recording or the words heard; only the text you leave in the description box is kept, as your prompt | Let you describe an object by speaking |
| Share links: when a link was made, when it ends, and a hash of its secret (not the secret itself), kept with the job | Let you send one result to someone else |
| Chat assistant connections: which assistant you connected and when, kept so you can see and disconnect it | Let a chat assistant act for you |
| Logs: for a failed sign-in, password change or account deletion, the username tried and your IP address. Our hosts also keep ordinary request logs, which include IP addresses | Security, and stopping password guessing |
| Job cost estimates: an estimate of what each job cost in GPU time, seen by our team and by you for your own jobs | Keep the free beta affordable |
Uploads can contain personal data, such as faces. For the quick video option we detect faces on our own cloud workers only to choose a good frame. We store no face data or templates. If you upload other people's faces, you need their consent (see our Terms).
Failure alerts. If many jobs fail, a short message goes to our team. It holds counts, routes and short error texts only: no names, prompts, job ids or uploads.
The demo account. Anyone can open the read-only demo. Its example results are chosen by our team. Opening the demo creates no data about you beyond ordinary logs.
We do not run analytics or advertising, we do not build advertising profiles, and we take no payments. We do not sell your personal data. We do not use your content to train AI models.
2. Why we use it (your consent)
We use your data because you give it to us to get a service you asked for: when you sign up, upload, press record, make a share link or connect an assistant, you consent to that use. You can withdraw consent at any time by deleting the data or your account (section 6); the service then cannot work for you. We also use limited data without asking where the Act allows, for example for security and to meet legal duties.
3. Who else handles your data
These companies help us run the service. They receive only what is needed.
- Modal (modal.com, United States): runs the website's server and the GPU workers, and stores accounts, uploads and results. It receives all the data above.
- Cloudflare (cloudflare.com): hosts the voxelis.in sites and a proxy in front of omnisplat.voxelis.in. It sees your IP address and everything you send or download.
- Google Fonts (Google): the voxelis.in pages load their font from Google, so your browser sends your IP address to Google.
- Sarvam AI (sarvam.ai, India): only if you use the microphone. It receives the recording and returns the words and their English translation.
- Google, GitHub, Discord, GitLab: only if you sign in with them. They learn that you signed in to Voxelis. Their own privacy policies apply to what they hold.
- Chat assistants (OpenAI, Anthropic, Google and others): only if you connect one. It can read your job names, prompts and results as you ask it to, and its provider then handles that data under its own terms.
- Hugging Face and GitHub: our workers download AI models from Hugging Face and our code lives on GitHub. No user data is sent to them.
We may also have to share data if a court or authority lawfully requires it.
4. Where it is stored
Your data is stored and processed on Modal's cloud in the United States. If you are in India or elsewhere, your data crosses borders to get there. The Act currently allows this except to countries the Indian government restricts.
5. How long we keep it
Nothing is deleted automatically yet. This is what we do:
- You can delete at any time a finished job (with its files and share links) from its page, and your whole account with all its jobs from the account page.
- We may delete finished jobs older than 90 days, and accounts that were never approved and have been inactive for 90 days. We do this by hand, from time to time, so a job can stay longer than 90 days. Keep your own copies.
- Accounts stay until you or we delete them.
- Logs kept by Modal and Cloudflare follow those companies' own retention settings. After you delete your account, ordinary logs that contain your username or IP address can remain until they age out.
- Data made before 22 October 2026 also exists on an older storage space that we have switched off. We keep it for now and will delete it when we no longer need it. Ask us if you want your data removed from it.
- When you ask us to delete something, we do it within 30 days.
6. Your rights
Under the Digital Personal Data Protection Act, 2023 you may:
- access a summary of the personal data we hold about you and who we shared it with;
- correct or complete data that is wrong;
- erase your data (section 5 has the quick way);
- complain to us (grievance redressal) and, if we do not solve it, to the Data Protection Board of India;
- nominate another person to use these rights for you if you die or cannot act.
Email founder@voxelis.in and tell us your username, and we will reply within 30 days. We may ask a question to check you are who you say you are. There is no charge.
7. Cookies
We use two cookies, both strictly necessary: a session cookie that keeps you signed in (7 days; HttpOnly, SameSite=Lax, Secure), and, only while you sign in with Google, GitHub, Discord or GitLab, a sign-in state cookie that lasts 10 minutes. No analytics, advertising or tracking cookies are used.
8. Children
OmniSplat is for people 18 and older. We do not knowingly collect data from children. If you think a child has given us data, tell us and we will delete it.
9. Security
Passwords are stored only as salted hashes. Everything except a health check, the sign-in pages, the demo and share links needs a signed-in account. Sessions are signed and end when you change your password or delete your account. Repeated wrong passwords are blocked for a while. Members see only their own jobs. Share links are secret, can expire and can be cancelled, and search engines are asked not to index them. No system is perfectly safe. If a breach affects your data, we will tell you and the Data Protection Board as the law requires.
10. Changes
We may update this policy. The new version will be posted at https://voxelis.in/privacy with its date, and for important changes we will also show a notice on the website.
11. Contact
Aarsh Joshi, Voxelis, India. founder@voxelis.in.