Effective Date: April 1, 2026. This Privacy Policy ("Policy") is entered into and is effective from April 1, 2026 between CELERITY STUDIOS INDIA PRIVATE LIMITED (the “Company”) having its registered office at 3rd floor, CASP Bhavan, Baner Pashan Link Road, Pune 411021, State: Maharashtra, Country: INDIA together with its affiliates and subsidiaries, (collectively "MIXXI", "we", "us" or "our"), which expression shall unless repugnant to the context or meaning thereof be deemed to mean and include its successors and assigns, and you, the user of our Service ("User", "you" or "your").
NOW, THEREFORE, the terms of this Policy are as follows:
MIXXI is engaged in the business of providing an AI-native short-form music video remix platform that allows users to create personalized music videos through an artificial intelligence-powered platform accessible via website (mixxi.ai), mobile applications, and related services (collectively, the "Service").
THE SERVICE'S CORE FUNCTIONALITY REQUIRES PROCESSING FACIAL BIOMETRIC DATA FROM PHOTOGRAPHS YOU UPLOAD TO CREATE AI-GENERATED AVATARS ("STARS"). BY UPLOADING PHOTOGRAPHS AND CREATING AVATARS, YOU PROVIDE EXPLICIT CONSENT TO THE COLLECTION AND PROCESSING OF FACIAL BIOMETRIC INFORMATION AS DESCRIBED IN THIS POLICY. IF YOU DO NOT CONSENT TO BIOMETRIC DATA PROCESSING, YOU MAY NOT USE AVATAR CREATION AND AI VIDEO GENERATION FEATURES OF THE SERVICE. DETAILED INFORMATION ABOUT BIOMETRIC DATA PROCESSING IS PROVIDED IN SECTION 3.1(m) AND SECTION 3.6 BELOW.
"Biometric Data" means facial biometric identifiers and information derived from photographs you upload, including facial geometry, facial landmarks, facial feature measurements, facial expressions collected from User photographs for the purpose of AI avatar creation and video generation.
“Culture Graph” means MIXXI’s system for analyzing user interactions and content trends to improve the Service and personalize user experience.
"Personal Information" means information that relates to an identified or identifiable natural person, including but not limited to name, email address, telephone number, billing address, payment information, and any other information that can be used to identify a User.
"Service Providers" means third parties that are engaged by MIXXI to provide services on behalf of MIXXI or help MIXXI operate the Service or our business, including hosting, information technology, customer support, email delivery, marketing, payment processing, analytics, and other similar services.
"User Information" means any and all information collected by MIXXI from or about Users, whether provided directly by the User or collected automatically, and shall include, without limitation, personal information, technical information, usage information, user-generated content, payment information, and any other information described in Clause 3 of this Policy, in any form, whether written, oral, electronic, or otherwise.
Facial Biometric Information: When you upload photographs to create avatars under the Star layer, our AI technology analyzes and extracts facial biometric data, including facial landmarks (eye positions, nose tip, mouth corners, jawline contours), facial geometry (distances between facial features, facial proportions), facial expressions, and other biometric identifiers necessary for avatar creation and video generation;
Purpose-Limited Collection: Biometric data is collected solely for the purpose of generating personalized AI avatars that resemble your appearance and enabling AI-powered music video creation featuring your avatar;
Explicit Consent Requirement: Collection of biometric data occurs only after you affirmatively upload a photograph and initiate avatar creation, constituting your explicit consent to biometric processing;
No Third-Party Sharing: We do not sell, rent, share, or disclose your facial biometric data to any third parties, including advertisers, data brokers, brand partners, or other commercial entities except as required for provision of the Service or under applicable law.
We and our Service Providers, may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications, and other online services, including through cookies and similar tracking technologies as described below:
Cookies and Similar Technologies: Some of our automatic data collection is facilitated by cookies and similar tracking technologies. For more details on how we use these technologies and your choices, please refer to Section [9.5] below.
Data About Others: We may offer features that help Users invite their friends or contacts to use the Service, and we may collect their limited contact details (such as name and email address or phone number) so we can deliver their invitations. Please do not refer someone to us or share their contact details with us unless you have their permission to do so. If you share your, or others', details via third-party platforms (e.g., WhatsApp, other messaging applications), those third-party platforms process such information in accordance with their privacy policies, and we are not responsible for such processing.
Given the sensitive nature of biometric data, we provide the following detailed disclosures about our biometric processing practices:
Facial biometric data is extracted using AI-powered facial recognition and analysis algorithms when you upload photographs for avatar creation;
The technology identifies key facial landmarks, measures facial geometry, and creates a mathematical representation (biometric template) of your facial features;
Where technically feasible, initial facial analysis occurs on your device (client-side processing) before any data transmission to our servers.
For certain advanced features or older devices where on-device processing is not feasible, biometric processing may occur on our secure servers with encrypted data transmission.
Improving avatar quality, realism, and animation accuracy through technical optimization.
AI model training or machine learning purposes.
Transient Processing: Raw facial biometric data and biometric templates are processed transiently during avatar creation and are not permanently stored on our servers;
Avatar Retention: The processed avatar (output product) is retained as long as your account remains active or until you delete it;
User-Initiated Deletion: You may delete your avatar at any time through Settings > My Avatars > Delete Avatar. Deletion permanently removes the avatar and all associated facial mapping data from our active systems within seventy-two (72) hours;
Account Closure: Upon account closure, all avatars and associated facial data are deleted within ninety (90) days in accordance with Section 5.3;
No Long-Term Biometric Storage: We do not maintain long-term databases of facial biometric templates or raw facial recognition data.
Multi-factor authentication requirements for any system access to biometric processing infrastructure.
You may withdraw consent and delete your avatar at any time, though this will prevent use of avatar-based features going forward.
Users may only upload photographs of themselves. Uploading photographs of any other individual (including celebrities, public figures, or third parties) is strictly prohibited. Users are solely responsible for any content uploaded and any violation of this requirement.
We use certain User Information to train, improve, and develop our artificial intelligence models and machine learning algorithms. This section provides complete transparency about what data is and is not used for AI training:
Aggregated and Anonymized User Content: Anonymized and aggregated patterns from avatar usage (not raw photographs or biometric data) may be used to improve avatar generation quality and animation realism;
Generated MIXXIs: AI-generated videos you create may be analyzed (in anonymized form) to improve video generation algorithms, visual quality, and motion transfer accuracy;
User Engagement Data: Your interaction patterns (likes, shares, views, layer selections, remix behaviors) are used to train and improve algorhythm recommendation system;
Layer Combination Patterns: Aggregated data about which song, look, move, and world combinations are selected together to enhance content curation and recommendation accuracy;
Cultural Graph Data: Engagement signals and content relationships used to train systems that understand cultural trends and music-visual aesthetic connections.
Facial Biometric Data: Raw facial biometric information, biometric templates, and facial recognition data extracted from your photographs are NEVER used to train AI models or for any machine learning purposes;
Content Marked Private: Any content you designate as private or unpublished is excluded from AI training datasets.
No Service Degradation: Opting out does not affect your ability to use core Platform features, though personalized recommendations may be less tailored to your specific preferences;
Retroactive Removal: If you opt-out, we will make commercially reasonable efforts to remove your previously collected data from active AI training datasets, though data already incorporated into trained models cannot be extracted;
Consent Withdrawal: You may withdraw the consent provided by you at any time;
Timeline: Opt-out preferences take effect within fourteen (14) days of your selection.
Creation of Aggregated, De-identified and/or Anonymized Data: We may create aggregated, de-identified and/or anonymized data from User Information and other individuals whose information we collect. We make information into de-identified and/or anonymized data by removing information that makes the data identifiable to you. We may use this aggregated, de-identified and/or anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service, promote our business, understand cultural trends, and provide insights to business partners.
Further Uses: In some cases, we may use User Information for further uses, in which case we will ask for your consent to use your information for those further purposes if they are not compatible with the initial purpose for which information was collected.
Retention Period: We generally retain User Information to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes. The length of time for which we retain information depends on the purposes for which we collected and use it and your choices.
In accordance with Digital Personal Data Protection Rules, 2025, we implement automated data erasure for inactive user accounts:
Dormancy Definition: An account is considered dormant or inactive if there has been no login, content creation, engagement activity, or Platform interaction for a continuous period of three (3) years;
Automated Erasure Timeline: Personal data of dormant accounts will be automatically erased after three (3) years of continuous inactivity, except where retention is required by law or necessary for pending legal claims;
Seven (7) days before scheduled erasure (final notice).
Reactivation to Prevent Erasure: You may prevent automated erasure by logging into your account at any time before the erasure date. Account reactivation resets the dormancy period;
Scope of Erasure: Automated erasure includes all personal data, User-generated content, avatars, MIXXIs, profile information, engagement history, and account credentials;
You have explicitly requested extended retention for legitimate purposes.
Grievance and Support Records: Three (3) years after case resolution for accountability and quality assurance.
Factors Determining Retention: To determine the appropriate retention period for User Information, we consider factors such as the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of your information, the purposes for which we process your information and whether we can achieve those purposes through other means, and the applicable legal requirements.
Content Retention: User-generated content, including created MIXXIs, may remain on our active servers for thirty (30) days after you remove such content from your account. Copies of the content may be held in backups of our application databases. If you choose to cancel your account, your content will immediately become inaccessible and should be purged from our systems in full within ninety (90) days. These retention periods may be extended if required for legal purposes such as litigation holds, law enforcement requests, or specific tax/financial audits.
Creator Economy Data: Information related to the NNA Framework, creator attribution, revenue distribution, and transaction history may be retained for longer periods as necessary for financial record-keeping, audit requirements, and creator payment obligations.
Deletion of Information: When we no longer require the User Information we have collected about you, we may either delete it, anonymize or aggregate it, or isolate it from further processing.
Limitation of Security: However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your User Information. You acknowledge that you provide your information at your own risk.
MIXXI may share User Information with the following categories of parties and as otherwise described in this Policy, in other applicable notices, or at the time of collection:
We engage third-party Service Providers to perform functions and provide services on our behalf. These Service Providers have access to User Information only to perform specific tasks and are contractually obligated to protect your information in accordance with this Policy and applicable law.
Cloud Hosting and Infrastructure: Amazon Web Services (AWS), Google Cloud Platform, or similar providers for data storage, computing infrastructure, and content delivery;
AI Model Providers and Technology Partners: Third party technology providers and other AI technology partners for avatar generation, video synthesis, motion transfer, and AI-powered features;
Payment Processing: Paytm, PhonePe, Google Pay, Stripe, Razorpay, and other payment gateways and UPI wallet providers for subscription payments, transactions, and creator payouts;
Analytics and Performance Monitoring: Google Analytics, Mixpanel, Amplitude, or similar analytics platforms for usage tracking, performance monitoring, and service improvement;
Customer Support and Communications: Zendesk, Freshdesk, Intercom, or similar platforms for customer support ticket management and user communications;
Email and Marketing Automation: SendGrid, Mailchimp, Amazon SES, or similar services for transactional emails, marketing communications, and notification delivery;
Professional Advisors: Legal counsel, accountants, auditors, and consultants who assist with business operations and compliance.
All Service Providers are bound by written data processing agreements requiring them to implement appropriate technical and organizational security measures;
Service Providers processing data outside India are subject to cross-border transfer safeguards described in Section 8.
No Biometric Data Sharing: Facial biometric data is NEVER shared with third-party Service Providers, advertising networks, or any other external parties.
Payment Processors: Payment card information, UPI wallet information, and other payment data you use to purchase the Service is collected and processed directly by our payment processors, including Paytm and other UPI wallet providers, telecommunications providers for SMS voting, or similar payment gateways. These payment processors may use your payment data in accordance with their respective privacy policies.
(f) Social media platforms for sharing and distribution features.
(e) Competition participants in MIXXI RISING may have their participation, ranking, and performance publicly disclosed.
Authorities and Legal Parties: Law enforcement, government authorities, regulatory bodies, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described in Clause 4.4 above, including to comply with legal obligations, protect rights and safety, and respond to lawful requests.
(d) We may disclose your information to an acquirer, successor, or assignee as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets.
. With Your Consent: In other cases, not covered by this Policy, we will ask for your consent before sharing your User Information with third parties.
Publicly Available Information: Certain information you provide may be publicly accessible, including your username, profile information, created MIXXIs that you choose to publish, and your participation in public competitions and events.
Access or Update Your Information: If you have registered for an account with us through the Service, you may review and update certain account information by logging into the account through the Service.
Opt-Out of Communications: You may opt-out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us at the email address provided in Clause 13. Please note that if you choose to opt-out of marketing-related emails, you may continue to receive service-related and other non-marketing emails, including account notifications, transaction confirmations, and security alerts.
Cookies and Browser Controls: Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of the Service.
Do Not Track Signals: Some browsers may transmit "do-not-track" signals. Web browsers may incorporate or activate these features differently, making it unclear if users have consciously activated them. As a result, at this time, we do not take steps to respond to such signals.
Manage Subscription Tier: You may change your subscription tier (Free, Pro A, Studio A) at any time through your account settings. Changes to paid subscriptions will be effective according to the terms of your subscription agreement.
Control Content Visibility: You may control the visibility of your created MIXXIs and choose whether to publish content publicly or keep it private through your account settings.
Manage Creator Profile: If you participate in the creator economy, you may update your creator profile information and manage your Premium Asset catalogue through the creator dashboard.
Delete Your Content or Close Your Account: You may delete certain content through your account. Content removed from your account may remain on our active servers for thirty (30) days, and copies may be held in backups thereafter. If you wish to request that your account be closed, please contact us at the email address provided in Clause 13. Upon account closure, your content will become immediately inaccessible and should be purged from our systems within ninety (90) days, subject to the retention requirements described in Clause 5.
To exercise these rights, please contact us using the contact information provided in Clause 13.
We implement a layered consent framework that provides you with granular control over different data processing purposes. You may manage your consent preferences at any time through Settings > Privacy & Data Control.
Enforcement of Terms of Service and community guidelines.
You have individual control over the following optional processing purposes:
Purpose: Processing your viewing history, engagement patterns, layer selections, and preferences to provide personalized content recommendations and layer combination suggestions;
Purpose: Sending promotional emails, notifications, and offers about new features, Premium Assets, MIXXI RISING competitions, subscription upgrades, and special events;
Opt-Out Effect: You will continue to receive essential service-related communications (account notifications, security alerts, transaction confirmations) but no marketing content;
Purpose: Sharing aggregated (non-identifiable) behavioral data and engagement patterns with brand sponsors for campaign performance measurement;
Opt-Out Effect: Your data will not be included in aggregated datasets shared with brand partners; you may still see branded content but it will not be personalized based on your behavior;
Current Status: [Enabled by default - toggle in Settings]
Purpose: Processing additional data including video submissions, voting activity, public display of your content, rankings, and payment information for prize distribution;
Re-Consent Option: You may re-enable any previously withdrawn consent at any time.
Third-Party Platforms: The Service may contain links to websites, mobile applications, social media platforms, and online services operated by third parties, including WhatsApp, social media sharing platforms, payment processors, and commerce partners. These third-party services are not under our control, and we are not responsible for their privacy policies or practices.
Limitation of Responsibility: If you choose to use third-party services in connection with the Service, including sharing MIXXIs via WhatsApp or making payments through Paytm or other processors, you do so at your own risk. We encourage you to review the privacy policies of these third-party services before providing them with your information.
Third-Party Content: The Service may display content, including branded content, advertisements, and Premium Assets created by third parties. Our inclusion of such content does not imply endorsement of those third parties or their practices.
MIXXI is committed to compliance with applicable laws.
Consent: By using the Service and providing User Information, you consent to the collection, use, storage, sharing, and disclosure of your information as described in this Policy and in accordance with applicable law. Where requied by law, we will obtain your explicit consent for specific processing activities.
Right to Withdraw Consent: You may withdraw your consent to the processing of your User Information at any time by contacting us as specified in Clause 13. Please note that withdrawal of consent may affect your ability to use certain features of the Service or may require us to terminate your account.
Grievance Redressal: In accordance with the Information Technology Act, 2000 and applicable rules, MIXXI has appointed a Grievance Officer to address your concerns regarding User Information. The Grievance Officer's contact details are provided in Clause 13.
The Service uses cookies, web beacons, pixels, local storage, and similar tracking technologies. This section provides detailed information about our use of these technologies
Types of Cookies We Use
Your cookie preferences are stored for 12 months and can be modified anytime in Settings.
In-App Controls: Settings > Privacy > Cookie Preferences provides toggle controls for each cookie category;
Browser Controls: Most browsers allow you to refuse cookies or delete existing cookies through browser settings. Note that disabling cookies may affect Service functionality;
Do Not Track Signals: We honor browser "Do Not Track" (DNT) signals for non-essential cookies where technically feasible. When DNT is enabled, we disable Performance, Functionality, and Advertising cookies;
We are not responsible for third-party cookie practices. We encourage you to review their privacy policies.
Cookies never contain facial biometric data, photographs, or biometric templates. Biometric processing is handled separately through secure API calls, not cookie-based technologies.
Effective Date of Modifications: Any modifications to this Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your continued use of the Service after the effective date of any modified Policy indicates you are acknowledging and agreeing that the modified Policy applies to your interactions with the Service and our business.
Review of Policy: We encourage you to review this Policy periodically to stay informed about our information practices and the choices available to you.
Grievance Officer. For complaints or grievances regarding User Information under Indian law, please contact our Grievance Officer:
Name: Yashanshu Bhardwaj Email: grievance@mixxi.ai Postal Address: 3rd floor, CASP Bhavan, Baner Pashan Link Road, Pune 411021, Maharashtra, India
The Grievance Officer will acknowledge receipt of your complaint within forty-eight (48) hours and endeavor to resolve the complaint within one (1) month from the date of receipt, or such other period as may be prescribed by applicable law.
For matters specifically related to data protection, privacy rights under the Digital Personal Data Protection Act, and data processing practices, you may contact our Data Protection Officer:
Monitoring compliance with Digital Personal Data Protection Act, 2023 (“DPDP Act”) and this Privacy Policy;
Governing Law: This Policy shall be governed and construed in accordance with the laws of India, without regard to its conflict of law provisions.
Jurisdiction: Any disputes arising out of or relating to this Policy or the processing of User Information shall be subject to the exclusive jurisdiction of the courts in Mumbai, Maharashtra, India.
Dispute Resolution: In the event of any dispute, controversy, or claim arising out of or relating to this Policy, the Parties shall first attempt to resolve the matter through good faith negotiations. If the dispute cannot be resolved through negotiation within thirty (30) days, either Party may pursue resolution through the courts having jurisdiction as specified in Clause 13.2.
Entire Agreement: This Policy, together with our Terms of Service and any other agreements or policies referenced herein, constitutes the entire agreement between MIXXI and you with respect to the subject matter hereof and supersedes all prior commitments, understandings, and communications in this regard.
Severability: If any term or provision of this Policy shall be declared by a final adjudication by a court of competent jurisdiction to be illegal, invalid, or unenforceable for any reason, such adjudication shall not alter the validity or enforceability of any other term or provision of this Policy. The invalid or unenforceable term or provision shall be deemed replaced by a term or provision that is valid and enforceable and that comes closest to expressing the intention of the original term or provision.
No Waiver: The failure of MIXXI to exercise or enforce any right or provision of this Policy shall not constitute a waiver of such right or provision. Any waiver of any provision of this Policy will be effective only if in writing and signed by MIXXI.
Assignment: You may not assign or transfer your rights or obligations under this Policy without MIXXI's prior written consent. MIXXI may assign or transfer its rights and obligations under this Policy without restriction, including in connection with a merger, acquisition, sale of assets, or other business transaction.
Language: This Policy is executed in the English language. In the event of any conflict between the English version and any translation, the English version shall prevail.
Survival: All provisions of this Policy which by their nature should survive termination shall survive termination, including but not limited to provisions relating to data retention, security, dispute resolution, governing law.
Counterparts: This Policy may be executed in several counterparts (physical or electronic form), each of which shall be deemed an original, but all of which together shall constitute one and the same instrument.
IN WITNESS WHEREOF, by using the Service, you acknowledge that you have read and understood this Privacy Policy and voluntarily accept the terms and obligations set forth herein as of the Effective Date.