Privacy Policy: Mimesis

Last updated: September 11, 2026

Mimesis ("Mimesis," "we," "us," or "our") is a product of Atelier Labs ("Atelier Labs," the "Company"), available at mimesis.myatelier.in (the "Service"). This Privacy Policy explains what personal information we collect, how we use and store it, who we share it with, and the choices you have.

By creating an account or using Mimesis, you agree to the collection and use of information as described in this Policy.

1. Who We Are

Mimesis is a product built and operated by an individual founder under the "Atelier Labs" brand name ("we," "us"). Atelier Labs is not currently a separately registered legal entity; Mimesis is operated as a sole proprietorship/individual undertaking based in Goa, India. For the purposes of applicable data protection law, the founder operating Mimesis is the data controller/data fiduciary for the personal information described in this Policy.

2. Information We Collect

2.1 Account Information

When you sign up via Google OAuth (processed through our authentication provider, Supabase), we receive:

  • Your name, email address, and Google profile picture
  • A unique account identifier
  • Login timestamps and session metadata

We do not receive or store your Google password.

2.2 Photos You Upload

  • Reference photos: To generate your personal model, you upload 4 photos of yourself. These are stored in our cloud storage (Backblaze B2) and are private by default, visible and accessible only to your account. No other user can view your uploaded photos.

2.3 Generated Images

  • Every image you generate is processed for you, but only images you choose to save/like are retained in your account storage. Images you don't save are not persisted beyond what's needed to briefly render them to you and are deleted from temporary storage shortly after generation.
  • Saved generated images are stored in Backblaze B2, tied to your account, and visible only to you.

2.4 Usage and Credits Data

We maintain a record of your subscription tier (Starter/Creator/Studio), credit balance, credit consumption per generation, feature usage (preset packs, upscaler), and generation history metadata, stored in our Postgres database (via Supabase).

2.5 Payment Information

Payments are processed by Paddle, which acts as merchant of record for our subscriptions. We do not store your full card number, CVV, or bank details ourselves. Paddle handles and stores that information directly under its own security infrastructure (PCI-DSS compliant) and its own privacy policy. We retain only transaction-level records on our side: plan selected, billing cycle, amount, and payment status.

2.6 Device and Log Data

We may automatically collect IP address, browser type, device type, operating system, referring URLs, and general usage/analytics data to operate and improve the Service.

2.7 Cookies

We use cookies and similar technologies for authentication (session persistence) and, where enabled, analytics. See Section 10.

3. How We Use Your Information

We use the information above to:

  • Create and manage your account and authenticate you
  • Generate images and personal models based on your uploaded photos and selected preset packs
  • Process payments and manage subscriptions/credits
  • Provide customer support
  • Maintain, secure, and improve the Service (including debugging and abuse prevention)
  • Communicate with you about your account, transactions, and (where you've opted in) product updates
  • Comply with legal obligations

We do not use your uploaded photos or generated images to train our own AI models.

As of the current version of the Service, your photos are used only as reference inputs at generation time, not for model training. If this changes in the future, we will update this Policy and seek any consent required before doing so.

4. AI Processing and Third-Party Model Providers

Mimesis generates images using third-party AI models, currently Nano Banana 2 and Nano Banana Pro, accessed via Replicate, our inference API provider. When you generate an image, your uploaded reference photos and/or prompt are transmitted to Replicate's API for the sole purpose of producing your requested output.

  • Per Replicate's published data retention policy, predictions run through their API are automatically deleted from Replicate's systems within 1 hour by default.
  • Replicate's own privacy policy governs how it handles data in that short window.
  • We do not use your photos to train our own models, and based on Replicate's standard API terms, your inputs are not retained by Replicate beyond the automatic cleanup window.

5. How We Store and Protect Your Data

  • Images: Stored in Backblaze B2, a private, access-controlled cloud storage bucket.
  • Account and usage data: Stored in Postgres via Supabase, with access controls and encryption in transit (TLS/HTTPS).
  • Internal Access: We apply role-based access controls internally.

6. Data Retention

  • Uploaded photos and saved images: Retained for as long as your account remains active, or until you delete them/your account.
  • Unsaved generated images: Not retained beyond short-term processing.
  • Account and billing records: Retained for as long as needed to meet legal, tax, and accounting obligations.
  • Account deletion: Personal data and images are deleted/anonymized within 30 days.

7. Who We Share Your Information With

We share personal information only as follows:

  • Service providers/sub-processors: Supabase, Backblaze, Replicate, Paddle.
  • Legal and safety reasons: If required by law or to protect the rights and safety of Atelier Labs or our users.
  • Business transfers: In the event of a merger or acquisition.

We do not sell your personal information or your photos to third parties.

8. International Data Transfers

Your information may be processed or stored outside your country of residence depending on where our infrastructure providers (Supabase, Backblaze, the model provider) host data. We rely on appropriate safeguards for such transfers.

9. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or export your data. You can manage most of this in your account settings. For other requests, contact us at support@myatelier.in.

For users in India: Under the Digital Personal Data Protection Act, 2023, you have specific rights to access, correct, and erase your personal data. Reach our Grievance Officer, Seamus F. Rodrigues, at support@myatelier.in.

For users in the EU/EEA/UK: You have rights under the GDPR/UK GDPR.

For users in California: You have rights under the CCPA/CPRA.

10. Cookies and Analytics

We use essential cookies for authentication and may use analytics cookies to improve the Service. We will ask for consent where required by law.

11. Children's Privacy

Mimesis is not directed at children, and you must be at least 18 years old to create an account. We do not knowingly collect personal information from anyone under this age.

12. Uploading Photos of Other People

You may only upload photos of yourself, or of other individuals who have given you explicit permission. You are responsible for ensuring you have the right to upload any photo you submit.

13. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified via email or in-product notice.

14. Contact Us

Support / Grievance email: support@myatelier.in

Feedback email: feedback@myatelier.in

Operated by: Seamus F. Rodrigues, operating as Atelier Labs / Mimesis, based in Goa, India