Privacy Policy

1. Who We Are

NPCGen ("we", "our", "us") operates the website npcgen.app — a web-based bulk personalized image generator. Our service allows users to upload image templates and CSV data files to generate thousands of personalized images. We are based in Mumbai, Maharashtra, India.

For privacy inquiries, contact us at madhur@hypegen.net.

2. Data We Collect

2.1 Account Data

• Email address (required for registration)
• Name (optional, used for personalization)
• Password (stored as a secure hash — never in plain text)
• OAuth identity data if you sign in via GitHub or Google (profile ID, email)

2.2 User-Uploaded Content

• Image templates you upload for meme/image generation
• CSV files containing variable data for batch generation
• Generated output images (stored temporarily for download)

2.3 Usage Data

• Pages visited, features used, and time spent on the service
• IP address, browser type, and operating system
• Batch job history (template used, row count, status)

2.4 Payment Data

Payment processing is handled entirely by Cashfree Payments. We do not store your card number, UPI ID, or other payment credentials. We receive only a transaction status and subscription tier confirmation from Cashfree.

3. How We Use Your Data

• To provide and operate the NPCGen service
• To process your image generation jobs
• To manage your account and subscription
• To send transactional emails (job completion, billing, password reset)
• To improve performance and fix bugs using aggregated analytics
• To comply with legal obligations under applicable Indian and international law

We do not sell your data to third parties. We do not use your uploaded CSV data or image content for training machine learning models.

4. Data Retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Uploaded templates: Retained for the duration of your subscription. Deleted within 30 days of account closure.
• CSV files: Deleted from our servers within 24 hours of job completion.
• Generated images: Available for download for 7 days, then automatically deleted.
• Usage logs: Retained for up to 12 months for debugging and abuse prevention.

5. Third-Party Processors

We use the following sub-processors to operate our service:

6. Your Rights

Under India's Digital Personal Data Protection Act 2023 (DPDPA) and GDPR (for EU residents), you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Erasure — request deletion of your account and associated data
• Data portability — receive your data in a machine-readable format
• Withdraw consent — opt out of non-essential communications at any time

To exercise any of these rights, email madhur@hypegen.net. We will respond within 30 days.

7. Cookies

We use only essential cookies required for authentication (session token) and security (CSRF token). We do not use advertising cookies or third-party tracking cookies. Analytics are collected through Vercel Analytics, which is privacy-first and does not use cookies or fingerprinting.

8. Children's Privacy

NPCGen is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, contact us immediately and we will delete it.

9. Security

We implement industry-standard security measures including HTTPS encryption, hashed passwords (bcrypt), JWT authentication with short expiry, and access controls on all stored data. However, no method of transmission over the internet is 100% secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the site. Your continued use of NPCGen after changes are posted constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or to exercise your data rights, contact: