Privacy Policy

1. Information we collect

• Account data: email, display name, avatar and authentication records.
• Creation data: prompts, uploaded reference files, generated images and videos, selected models and settings.
• Community data: works you choose to publish, likes, comments, ratings, reports and feedback. Raw feedback is private unless you separately agree to publication.
• Technical data: IP address, browser, device, security events, page activity, performance and error diagnostics.
• Purchase data: plan, order, subscription and credit records. Creem processes card details as Merchant of Record; we do not receive full card numbers.

2. Purposes and legal bases

• Perform our contract by providing accounts, generation, storage, billing and support.
• Pursue legitimate interests in service security, fraud prevention, reliability and product improvement, balanced against your rights.
• Comply with tax, accounting, payment, safety and other legal obligations.
• Use consent where required, including optional marketing or publication of a testimonial. You may withdraw consent at any time.

3. Providers and international transfers

We share only what is reasonably necessary with service providers such as Supabase (authentication, database and storage), Creem (payments and tax), Vercel (hosting and analytics), Sentry (error monitoring), Cloudflare Turnstile (abuse prevention), and the AI model providers selected for a request. These providers may process data in other countries under their own terms and lawful transfer safeguards. Do not submit sensitive or confidential information in prompts or reference files.

4. Storage, visibility and security

Signed-in creation files are stored in cloud storage. Some generation workflows require an externally reachable, hard-to-guess file URL so the selected AI provider can retrieve an input or return an output. Such URLs are not listed publicly unless you publish a work, but anyone who obtains a valid URL may be able to access it. We use access controls, random object names and transport encryption, but no system is completely secure.

5. Retention

Account data and saved creations are kept while your account is active. Deleted accounts and user-owned storage objects are scheduled for deletion immediately, subject to backups, fraud-prevention records, payment/tax records and other information we must retain for legal or security reasons. Operational logs and IP hashes are retained only as long as reasonably needed for security, diagnostics and legal compliance. AI providers may apply their own limited retention periods.

6. Your choices and rights

Depending on your location, you may request access, correction, deletion, portability, restriction or objection, withdraw consent, and complain to your local data-protection authority. You can download or delete creations and delete your account in Profile settings. Email support for a complete data request or if self-service deletion fails.

7. Cookies and analytics

We use authentication and security cookies required for the service. Google Analytics is optional and loads only after you choose to accept analytics; you can withdraw that choice at any time in Privacy settings. Essential authentication, security, payment and product functions do not depend on optional analytics. We do not sell personal data or use cross-site behavioral advertising cookies.

8. Age requirement

The Platform is intended for adults aged 18 or older. We do not knowingly collect personal data from children. Contact us if you believe a child has provided personal data.

9. Contact

Email support@mypixelmind.com for privacy questions or rights requests.