1. Who we are
TunePixel Studio is a business run by Venkatesh Gandham, an individual, from 3-1-6/40/2/30A, Mallapur, Hyderabad, Telangana 500076, India. He is responsible for the personal data this notice describes. When TunePixel Studio Private Limited is registered, it takes over that responsibility; we will then update this notice and tell our customers.
Email: info@tunepixelstudio.com. In this notice, “we” and “us” mean the business named above.
Questions about your data, and our Grievance Officer (India): Venkatesh Gandham, Founder and CEO, privacy@tunepixelstudio.com, at the postal address above. He answers questions about how we handle personal data, and deals with complaints in the times section 11 gives. We answer questions and requests about your data within one month.
We have not yet appointed representatives in the European Union and the United Kingdom. Until we do, contact us directly.
We have not appointed a data protection officer, because the law does not require one for the work we do.
2. Our two roles
Where we decide how your data is used, we are responsible for it (the “controller” in UK and EU law; the “Data Fiduciary” in Indian law). That covers this website and its forms, our emails with you, our LinkedIn adverts and any form we run there, the accounts we set up for dealerships, our security records and our billing.
Where we handle data for a dealership, the dealership is responsible for it, and we act only on its instructions (we are its “processor”). That covers the photos a dealership sends us, the images we make from them, and what it tells us about each vehicle. The dealership’s own privacy notice explains why it uses them. If you appear in a dealership’s photo, or your car does, please contact that dealership first; we will help it answer you.
3. What we collect, and why
3.1 When you visit this website
Like any website, ours reaches you through servers that see your IP address and details of your browser, so that they can send you the pages. Cloudflare runs those servers for us. We do not keep this information ourselves.
We use no analytics tool on this website, and we do not follow you from page to page. Cloudflare shows us overall traffic figures, such as how many requests the website received and from which countries, without identifying anyone.
3.2 When you send one of our forms
| Form | What you give us |
|---|---|
| Start your free pilot | your name, work email, dealership or company, country and, if you tell us, how many cars you list a month |
| Book a call | the same, plus your role if you give it, your time zone, the two times that suit you, and any note you add |
| Contact | your name, work email, what your message is about, and the message |
With each form we also receive the page you sent it from, any campaign tags in the link you followed (for example, which advert brought you), and the time it arrived.
- The bot check. To keep our forms free of automated spam, a check from Cloudflare (Turnstile) runs when you start to use a form. It reads your IP address, details of your browser and its connection, and which website it is on, and it keeps one small item in your browser’s storage (see Cookies). Cloudflare uses these signals to tell people from bots for us, and also, on its own account, to improve its bot detection. It says it does not use them to identify, profile or target anyone. If you would rather not use the bot check, email us at info@tunepixelstudio.com instead.
- Limits on sending. To stop anyone flooding our forms or a stranger’s inbox, we count requests from each network address and to each email address for one minute. We count a scrambled version (a salted hash), never the address itself.
- The emails. Each request becomes an email to us. For a pilot or a call, you also get an email confirming what happens next. Resend sends these emails for us. Our mailboxes are hosted by Zoho.
- What our form system records. One line per request saying which form it was, whether it went through (and, if not, why, such as which fields were missing), which of our pages it came from, and any campaign tags. Never your name, your email address, your message or your IP address.
3.3 When you answer our LinkedIn advert
We show adverts on LinkedIn to people LinkedIn selects by job title, industry and country. If you use our form on LinkedIn, LinkedIn passes us what you enter: your first and last name, email, company, job title, how many cars you list a month, whether you would like a call, and which advert and country the form came from. LinkedIn fills in some of these from your LinkedIn profile, and you can change them before you send the form. LinkedIn’s own privacy policy explains how it uses its members’ data, including to choose who sees our adverts.
3.4 When you email us or talk to us
We receive what you write and anything you attach or link to, such as a shared folder of photos. If we hold a video call with you, a video-call service hosts it, and we do not record it. When we send you a download link, a file-transfer service hosts it.
3.5 When your dealership uses TunePixel: its account
We set up one account for your dealership, in the name and work email of the person it asks us to. Your dealership gives us those details. We keep:
- that person’s name and work email, and the account’s password, which we store only as a scrambled hash we cannot reverse;
- when the account was created and last used, and whether it is active;
- a security record of important actions, such as who deleted a vehicle or created an API key, without any photo in it;
- re-edit requests the dealership sends us, with any note it adds;
- how many vehicles and images the dealership has, so that we can bill it.
3.6 Your dealership’s photos and images (we act for the dealership)
Photos of cars can contain personal data: number plates, people in the background or in reflections, papers or screens inside a car, and, in a phone photo’s hidden data, the place it was taken. A dealership may also name a vehicle by its VIN.
What we do with them, and only this:
- Make the studio images the dealership asked for. In our AI studio, TunePixel AI makes a new studio image from the photo; the photo goes to it without its hidden data (section 6 says where TunePixel AI runs). In our real-photo studio, our engine cuts the car out of the photo and places it in a studio rendered for that photo. It runs on a cloud computer in the United States, and it deletes each photo and result once it is 48 hours old: it checks every hour while its server runs, and 15 minutes after each start. For a dealership that orders 360° spins, an AI video service in the United States makes each spin from the vehicle’s delivered studio images, and the maker of the video model it runs may also process them: it stores data in Singapore, and its group companies in other countries may reach it.
- Check every image. A person checks every image against the photo before it reaches the dealership.
- Deliver it as a download link by email. None of the photo’s hidden data, including its location, is copied into the image we deliver. Each delivered file says how it was made.
- On request, remove number plates in AI studio images.
- Delete it when the dealership asks, and on the schedule in section 8.
We don’t use your photos to train AI models without your written permission. If a dealership gives us that permission, we become responsible for that use, we first remove or blur number plates and people, and we update this notice before we start. We don’t use your photos or images in our own marketing without your written permission either.
3.7 What we never do with personal data
We do not sell it. We do not use it for advertising or to build profiles of people. We make no decision about anyone by automated means alone.
3.8 Do you have to give us your details?
No law requires you to give us your details. To answer a form, we need the details it marks as required, such as your name and work email; without them we cannot reply. To set up a dealership’s account, we need the name and work email of the person it names; without them we cannot set up the account. Everything marked optional on our forms is optional.
4. Our legal reasons
Under UK and EU data protection law, we rely on these reasons:
| What we do | The reason the law allows |
|---|---|
| Deliver this website to you and keep it secure | our legitimate interest in a website that works and is safe |
| Answer your request and arrange your pilot or call | our legitimate interest in answering questions about our service; if you run your business as an individual, the steps you ask us to take before a contract |
| Keep our forms free of spam and abuse | our legitimate interest in forms that work and are safe |
| Set up and secure your dealership’s account, and provide the service to your dealership | our legitimate interest in providing the service our agreement with your dealership requires; if you contract with us as an individual, that contract |
| Bill your dealership and keep our accounts | our legitimate interest in being paid and in meeting our duties under Indian tax and company law (for example, keeping our books for 8 years) |
| Deal with legal claims, and answer authorities | our legitimate interest in defending our rights and in meeting the legal duties that apply to us; where UK or EU law itself requires it, that legal duty |
Under Indian law, we use the details you give us for the purpose you gave them, and we ask for your consent before using them for anything else. If we ever ask for your consent, you can read this notice in English or in any language listed in the Eighth Schedule to the Constitution of India, and you can give or withdraw consent through a consent manager registered with the Data Protection Board of India.
5. Your right to object
You can object at any time to our use of your personal data where we rely on our legitimate interests, for reasons about your own situation. We will then stop, unless we have compelling grounds that override your interests, rights and freedoms, or we need the data for legal claims. If we ever send you marketing, you can object to it at any time and we will stop at once. To object, email privacy@tunepixelstudio.com.
6. Who else handles your data
We use these service providers to do the work described:
- Cloudflare delivers this website and runs its forms and their bot check. (Cloudflare also uses the bot check’s signals on its own account, as section 3.2 explains.)
- Resend sends the emails our forms produce.
- Zoho hosts our mailboxes.
- Our app runs on our own computer in Hyderabad, India, which stores dealerships’ files and accounts; before it moves to a cloud hosting provider, we will update this notice.
- A cloud GPU provider in the United States runs our real-photo studio.
- TunePixel AI, which makes AI studio images, runs on AI image-generation services in the United States: a service we contract with, and the maker of the AI model it runs, which receives the photo from that service. The service’s delivery network may also hold copies of files in other countries, near where they are downloaded.
- An AI video service in the United States makes 360° spins from the delivered studio images, only for dealerships that order them. The maker of the video model it runs may also process them: it stores data in Singapore, and its group companies in other countries may reach it.
- A video-call service hosts our calls, and a file-transfer service hosts the download links we send you. Ask us which service it is, and where it processes data.
Dealerships that use TunePixel receive, under our agreement with them, the names of the providers that handle their photos and images.
We also share personal data:
- with LinkedIn, which runs its own forms and decides for itself how it uses its members’ data;
- with professional advisers, such as lawyers and accountants, when we use them; they must keep it confidential;
- with authorities, where the law requires it;
- with a buyer of our business, if we sell it, who must keep to this notice.
7. Where your data is processed
We are based in India, and we handle your data there. Our providers process it too: Zoho in India (its staff in other countries may reach it to fix errors and check spam); Cloudflare and Resend in the United States and elsewhere; our other providers in the countries section 6 names or, for the video-call and file-transfer services, that we tell you when you ask.
India has no adequacy decision from the UK or the European Union. For the United States, there is one only for organisations that have joined the EU-US Data Privacy Framework (and its UK extension). So:
- we use providers outside India only under the European Commission’s standard contractual clauses (with the UK’s addendum for UK data) or, for providers in the United States that have joined it, the EU-US Data Privacy Framework and its UK extension, and we send no dealership’s photo to a provider before that safeguard is in place for it;
- for personal data a dealership in the UK or the European Union sends us, our data processing agreement with that dealership includes the standard contractual clauses (with the UK’s addendum, or the UK’s international data transfer agreement, for UK data).
Ask us for a copy of these safeguards (we may remove commercial details).
8. How long we keep it
| Data | How long |
|---|---|
| What you send through a form, by email or through LinkedIn | while we deal with your request, then 24 months after our last contact with you; then we delete it |
| If your dealership becomes a customer: what we need for that relationship | while it is a customer, and for 24 months after its agreement ends |
| Invoices, billing records and our agreements with customers | 8 years, to meet Indian tax and company law |
| Copies of our form emails held by Resend | 30 days |
| Our form system’s records (they contain no personal details) | up to 180 days |
| Counts used to limit sending | one minute |
| Your dealership’s account | while it is open. When the dealership’s agreement ends, we close the account, keep its registration details for 180 days, as India’s Information Technology rules require, and then delete it. |
| Security records | 2 years |
| For dealerships: the photos you send us | 90 days after the image is finished (a photo that is never finished: 90 days after you upload it). While work on the vehicle is still under way, or a re-edit you asked for is open, we keep its photos until that is done. |
| Editing layers we make from a photo | 90 days after the image is finished |
| Finished images, and the vehicle’s record | 1 year after the vehicle’s last image is finished |
| Editing history | 1 year after the image is finished |
| Copies on our real-photo engine | it deletes each photo and result once it is 48 hours old: it checks every hour while its server runs, and 15 minutes after each start |
| Copies held by the AI image-generation services that TunePixel AI runs on | their own terms decide how long they keep them. We send them no dealership’s photo until we have in writing how long each of them keeps it, and until the service we contract with deletes its copies no later than 48 hours after the image is made. |
| Copies held by the AI video service and its model’s maker (spins only) | their own terms decide how long they keep them. We send them no dealership’s images until we have in writing how long each of them keeps them. |
A dealership’s agreement with us can set different periods for its photos and images. A dealership can delete a vehicle and everything made from it at any time, by asking us. We then delete it from our live systems at once; a vehicle still being worked on goes as soon as its last image finishes. Copies held by our providers are deleted as the table above says.
9. How we protect it
- Passwords are hashed, and sign-in sessions are held in a cookie that scripts cannot read; while the app is open, the page also keeps the session token in memory.
- New accounts must change their temporary password, and a deactivated account stops at once.
- Each account sees only its own vehicles.
- Uploads are checked by what they contain, not by their file name.
- Our processing engine is never exposed to browsers.
- Only the people at TunePixel who check images or run our systems can open a dealership’s photos, and they must keep them confidential.
No system is completely secure. If a breach puts your personal data at risk, we will tell you, and the authorities, as the law requires.
10. Your rights
In the UK and the EU you can ask us to:
- show you the personal data we hold about you and give you a copy;
- correct it;
- delete it;
- limit how we use it, or object to how we use it (section 5);
- give it to you in a form you can take elsewhere.
Where we rely on your consent, you can withdraw it at any time.
In India, you can ask us for a summary of the personal data we hold about you and how we use it, and for the names of the other businesses we have shared it with and what we shared; to correct, complete, update or delete it; to withdraw any consent you gave, as easily as you gave it; and to name someone to act for you if you cannot. Write from the email address we have for you, or tell us which form you sent and when. Our Grievance Officer answers within one month.
In Australia, the Privacy Act 1988 does not currently apply to us, because we are a small business, but we follow the Australian Privacy Principles as if it did. You can ask to see and correct the personal information we hold about you. We handle it in India, and our providers handle it in the countries section 6 names.
In California, we do not sell or share personal information, and we handle it for dealerships only as their service provider.
To use any of these rights, email privacy@tunepixelstudio.com. It is free. We may ask you to confirm who you are. We reply within one month (in the UK and the EU, we can extend that by two more months for a complex request, and we will tell you why). If you are asking about a dealership’s photos, we pass your request to that dealership and help it answer.
11. How to complain
Please tell us first: use our contact form and choose “Data, privacy or a complaint”, email privacy@tunepixelstudio.com, or write to us at the postal address in section 1. We acknowledge every complaint no later than one day after we receive it, and we resolve it, and tell you what we have done about it, no later than 7 days after we receive it. A complaint asking us to remove content is resolved no later than 36 hours after we receive it.
You can also complain to a regulator:
- United Kingdom: the Information Commissioner’s Office, ico.org.uk/make-a-complaint.
- European Union: the data protection authority in the country where you live or work, or where you think the problem happened.
- India: please write to our Grievance Officer first; the Digital Personal Data Protection Act 2023 asks you to use our grievance route before going to the Data Protection Board of India. You can complain to the Board once the Act’s complaint provisions apply, from 13 May 2027.
- Australia: if you are not satisfied with our answer, you can contact the Office of the Australian Information Commissioner, oaic.gov.au. Because the Privacy Act does not currently cover us, it may not be able to investigate.
12. Children
Our website and service are for businesses. They are not meant for anyone under 18, and we do not knowingly collect personal data of anyone under 18 for ourselves. A dealership’s photo may show a child by chance; we ask dealerships to leave people out of their photos.
13. Cookies
This website sets no cookies of its own; the bot check on our forms keeps one small item in your browser’s storage. The details are on our cookies page.
14. Changes to this notice
When we change this notice, we change the date at the top and keep the earlier version, which you can ask us for. If a change matters to how we handle a dealership’s data, we tell the dealership by email first.