Privacy Policy

1. Who We Are

Real-Eye.in ("Real-Eye", "we", "us", "our") is an image intelligence platform based in India, owned and operated by Trivance Technologies LLP, a limited liability partnership registered in India. Real-Eye provides forensic image analysis, reverse image search, and takedown report generation tools. For questions or concerns regarding this policy, contact us at hello@trivance.tech.

2. Applicability

This Privacy Policy applies to all users who access or use Real-Eye through our website (Real-Eye.in) or any associated services. This policy is drafted in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, and the Information Technology Act, 2000 as applicable.

3. Data We Collect

We collect the following categories of personal data:

3.1 Account Data (via Google OAuth)

When you sign in, we receive from Google: your name, email address, and profile picture URL. We do not access your Google Drive, contacts, calendar, or any other Google service.

3.2 Image Analysis Data (Analyze Module)

When you upload an image for forensic analysis, we process and extract: file metadata (EXIF, XMP, ICC profiles), GPS coordinates (if present in image metadata), camera and device information, file hashes (SHA-256), forensic analysis results (ELA, FFT, noise, steganography, pixel statistics), and AI detection scores.

3.3 Reverse Image Search Data (Search Module)

When you use the reverse image search feature, your uploaded image is sent to third-party search APIs (see Section 6) to find matching images across the public web. Search results — including matching URLs, similarity scores, and platform names — are stored in your account. The original image is not retained after the search completes.

3.4 Takedown Reports (Report Module)

When you generate a takedown report, we compile search results, platform information, and forensic evidence into a downloadable document. Report metadata (title, platform count, status) is stored in your account. Reports are generated on-demand and stored temporarily on our servers.

3.5 Original Images

We do NOT permanently store your original uploaded images. Original images are held in temporary memory only during processing (typically under 30 seconds) and are deleted immediately after analysis or search submission is complete. Only the results and extracted metadata are retained.

3.6 Payment Data

Credit purchases are processed by Razorpay. We store transaction metadata (order ID, amount, status, timestamp) but never store your card numbers, UPI IDs, or banking credentials. All payment data is handled directly by Razorpay under their privacy policy.

3.7 Usage and Technical Data

We may collect: IP address, browser type, device information, access timestamps, and pages visited. This data is collected for security, abuse prevention, and service improvement.

3.8 Consent Records

When you accept our Privacy Policy and Terms of Service, we permanently record: your name, email, timestamp of acceptance, IP address, and the version of policies accepted. These records are maintained for legal compliance and are not deleted even if you delete your account.

4. Purpose of Processing

We process your personal data for the following specific purposes:

Account Management: To create and manage your user account, authenticate your identity, and provide access to our services.

Forensic Analysis: To perform forensic analysis on images you upload, including AI detection, deepfake detection, steganography detection, metadata extraction, and report generation.

Reverse Image Search: To search for matching images across the public web using third-party search APIs, and to present results for your review.

Takedown Assistance: To compile forensic evidence and search results into actionable takedown reports with platform-specific instructions.

Payment Processing: To process credit purchases and maintain transaction records.

Security: To prevent abuse, detect fraud, enforce rate limits, and protect the integrity of our service.

Legal Compliance: To maintain consent records and comply with applicable laws including the DPDP Act, 2023.

5. Legal Basis for Processing

Under the DPDP Act, 2023, we process your personal data based on your explicit, informed, and specific consent, which you provide when you accept this Privacy Policy and our Terms of Service before using the application. You may withdraw your consent at any time by contacting us, though this will result in termination of your access to the service.

6. Third-Party Services

We integrate with the following third-party services to deliver our functionality:

6.1 Analyze Module

AWS Rekognition (Amazon Web Services) — Scene, face, and moderation analysis. Image data is sent for analysis and processed under AWS's data processing terms.

Claude Vision (Anthropic) — AI-powered visual reasoning for forensic analysis. Image data is sent for analysis and processed under Anthropic's data processing terms.

Third-party API usage for analysis is optional and only activated when enabled by the administrator. When disabled, all analysis is performed locally on our servers and no image data leaves our infrastructure.

6.2 Search Module

Google Cloud Vision (Google LLC) — Web detection and reverse image search.

TinEye (Idée Inc.) — Reverse image search across indexed web pages.

6.3 Authentication & Payments

Google OAuth (Google LLC) — Authentication only. We receive limited profile data (name, email, picture).

Razorpay (Razorpay Software Pvt. Ltd.) — Payment processing. All payment credentials are handled directly by Razorpay and never touch our servers.

7. Data Storage and Retention

Original Images: Not stored. Deleted from memory immediately after processing.

Analysis Results: Retained until you delete your scan or your account. You may delete individual scans from your dashboard at any time.

Search Results: Retained until you delete the search or your account.

Takedown Reports: Retained until you delete the report or your account.

Account Data: Retained while your account is active. Deleted within 30 days of account deletion request.

Payment Records: Retained for accounting and legal compliance as required by Indian tax law.

Consent Records: Retained permanently for legal compliance. These records are not subject to deletion requests.

Legal Retention on Deletion: When you delete a scan, search, or your account, we strip all personally identifiable information but may retain anonymized metadata (verdict, score, file hash, timestamps) for platform integrity, abuse prevention, and legal compliance.

8. Data Security

We implement reasonable security safeguards as required under the DPDP Act, 2023, including: encryption of data in transit (HTTPS/TLS), access controls and authentication, database encryption, secure session management, rate limiting, and regular security reviews. While we take all reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure.

9. Your Rights (Data Principal Rights)

Under the DPDP Act, 2023, you have the following rights:

Right to Access: You may request a summary of your personal data being processed and the processing activities. You can download your data from the Dashboard.

Right to Correction: You may request correction of inaccurate or incomplete personal data.

Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements (consent records and anonymized metadata are exempt).

Right to Withdraw Consent: You may withdraw consent at any time by contacting us. Withdrawal will result in termination of service access.

Right to Grievance Redressal: You may file a complaint with us or with the Data Protection Board of India.

To exercise any of these rights, contact us at hello@trivance.tech. We will respond within 30 days.

10. Data Breach Notification

In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required under the DPDP Act, 2023 and DPDP Rules, 2025, within the prescribed timeframe of 72 hours of becoming aware of the breach.

11. Children's Data

Real-Eye is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete such data promptly.

12. Cross-Border Data Transfer

When third-party APIs are used (AWS Rekognition, Claude Vision, Google Cloud Vision, TinEye), image data may be transferred to servers located outside India for processing purposes. Such transfers are conducted in compliance with the DPDP Act, 2023 provisions on cross-border data transfer. No transfer is made to countries restricted by the Central Government of India.

13. Cookies and Tracking

We use essential cookies only for session management and authentication. We do not use advertising cookies, tracking pixels, or analytics services that track individual user behavior across websites.

14. Disclaimer of Liability for Third-Party Results

Real-Eye integrates with third-party services to provide image search and analysis capabilities. We do not guarantee the accuracy, reliability, or completeness of results obtained from these services. Real-Eye is not responsible for any actions taken by users based on third-party results. Users should independently verify search results before taking any legal or personal action. Takedown reports generated by Real-Eye are informational tools — we do not provide legal advice.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through a notice on our website or via email. Continued use of the service after changes constitutes acceptance of the updated policy. If the changes are material, we may require you to provide consent again.

16. Grievance Officer

In accordance with the DPDP Act, 2023, the designated grievance officer for Real-Eye is:

Garvit Sharma — Grievance Officer

Email: garvit@garvitsharma.in

If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.

17. Governing Law

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and any rules made thereunder. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in Delhi, India.