Privacy Policy

Account data

Your email address and a one-way hash of your password. We never store your password in plain text. If you sign up with a name, we store that too.

Photos you upload

The image file you upload, and the parameters of the transformation you asked for (for example “restore, colorize”). We need the file to process it — there is no way to do this without receiving the image.

Generated results

The images we produce, plus the prompt used to produce them if you choose to publish them to the public gallery.

Usage and billing data

Credit balance and transaction history, and — for paid plans — the payment metadata our payment provider returns to us (subscription status, plan, renewal date). We never receive or store your card number.

Technical logs

Standard request logs (IP address, user agent, timestamp, endpoint) used for security, abuse prevention, and debugging.

• To run the tool you asked for and deliver the result;
• To count and deduct credits, and to manage subscriptions;
• To prevent abuse, enforce our Terms, and keep the service secure;
• To answer support requests and process refunds;
• To improve model routing and result quality (in aggregate, not by reading your photos for insights).

We use a small number of vendors. Each is bound by contract to process data only on our instructions:

• fal.ai — runs the AI models. Your upload is transmitted to them for inference.
• Cloudflare R2 — stores uploaded and generated images.
• Creem — our payment processor and merchant of record.
• Neon — hosted Postgres database for accounts and credits.
• Vercel — application hosting and CDN.

We do not sell your personal data, and we do not use your photos to train models.

Uploaded and generated images: stored in Cloudflare R2 so your download link keeps working. They are retained until you delete them, delete your account, or ask us to remove them. You can request deletion at any time — see section 7.

Account data: for as long as your account exists, and for 30 days after deletion while we complete the erasure.

Billing records: retained for the period required by tax and accounting law (typically 7 years), even if your account is deleted.

Technical logs: typically 30 days.

Honest note: result images do not yet expire automatically. If you want us to add automatic expiry, tell us — it is on our roadmap. Until then, deletion on request is how it works.

Our infrastructure is hosted in the United States and the European Union depending on the vendor. If you are in the EEA or UK, your data is transferred outside your home country on the basis of Standard Contractual Clauses or an equivalent transfer mechanism.

We use one strictly necessary cookie: the session cookie that keeps you signed in (a signed JWT). We do not use advertising or cross-site tracking cookies, and we do not embed third-party analytics that track you across the web.

Depending on where you live, you can:

• Get a copy of the personal data we hold about you;
• Correct inaccurate data;
• Delete your account and associated data;
• Object to, or ask us to restrict, certain processing;
• Opt out of the “sale” or “sharing” of personal information (we do neither, so there is nothing to opt out of).

To exercise any of these, email support@pixelocraft.com from the address on your account. We respond within 30 days, and usually much faster. We may need to verify your identity first.

Pixelo is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will close it and delete the data.

Traffic is encrypted in transit (TLS). Passwords are hashed with bcrypt. Access to production data is limited to the operators who need it. No system is perfectly secure, so please use a strong, unique password.

If we change this policy in a way that materially affects you, we will notify you by email or in-app at least 14 days ahead. Questions: support@pixelocraft.com — the operator is the entity identified in our Terms of Service. Site: localhost:3111.