Privacy Policy

1. The short version

• • We sign you in with Google and store only your basic profile, plan, and usage.
• • On the web, your images are processed transiently and deleted automatically right after — we don't keep them.
• • On the desktop app, your images are processed entirely on your device and never uploaded to us.
• • We never use your images to train AI models, and we don't sell your data.

2. Information we collect

Account data (via Google Sign-In): your name, email address, profile picture, and Google account identifier.

Subscription & usage data: your plan, image counts, feature usage, API keys, and billing period — used to enforce plan limits and operate the Service.

Payment data: subscriptions are processed by Lemon Squeezy, our merchant of record. They collect and process your payment details; we do not receive or store full card numbers. We receive transaction and subscription-status information.

Technical & log data: IP address, device/browser type, and diagnostic logs needed for security, abuse prevention, and reliability.

Cookies & local storage: used to keep you signed in and remember preferences (see §9).

Legal and account-lifecycle records: your account identifier; account, payment, cookie, deactivation, reactivation, or deletion event; action taken; document and disclosure versions; exact disclosure text and its cryptographic hash; selected plan and recurring-payment terms where applicable; deletion schedule and status; time reported by your device; and the authoritative event time generated by our server. We do not store your full payment-card number in these records.

Sources: we receive information directly from you, automatically from your use of the Service, from Google when you sign in, and from Lemon Squeezy when it reports transaction or subscription status. We do not purchase personal-data lists.

3. Your images and files

Your images are the sensitive part, so we treat them separately. On the web app, images you upload are transmitted over an encrypted connection, processed in memory to produce your result, and deleted automatically once processing completes. We do not build a permanent library of your images, and we do not use them to train, fine-tune, or improve AI models. On the desktop apps, image processing happens entirely on your device; your images are never transmitted to us — only a small license-validation signal is exchanged, which contains no image data.

4. How we use information

• • To provide, maintain, and secure the Service and your account.
• • To process subscriptions, enforce plan limits, and prevent abuse or fraud.
• • To record and demonstrate legal acceptance and recurring-payment authorization and to resolve complaints, refunds, or chargebacks.
• • To respond to support requests and send essential service notices.
• • To diagnose failures, measure aggregate service performance, and improve features without using your images to train AI models.
• • To comply with legal obligations.

We may aggregate or de-identify account, usage, and technical data for statistics, security, and service planning. We do not attempt to re-identify data that has been properly de-identified except where necessary to test our safeguards or as permitted by law.

5. Legal bases

In Canada, we collect, use, and disclose personal information with meaningful consent or another lawful basis, only for purposes a reasonable person would consider appropriate in the circumstances. Where the GDPR applies, we process personal data to perform our contract with you, for our legitimate interests in security, abuse prevention, and service improvement, to comply with legal obligations, and with your consent where required.

6. Sharing & service providers

We do not sell your personal data. We disclose it only as needed to providers that support the Service. Depending on the service, a provider may act as our processor or as an independent controller under its own privacy terms:

• • Google — authentication (sign-in).
• • Supabase — authentication and database (account, plan, usage).
• • Modal — on-demand AI compute for web/API image processing.
• • Lemon Squeezy — payments and invoicing as merchant of record.
• • Hostinger — secure website and application hosting.

We may also disclose information: (a) to professional advisers such as lawyers, accountants, auditors, or insurers on a need-to-know and confidential basis; (b) in connection with a proposed or completed financing, merger, acquisition, reorganization, insolvency, or sale of assets, subject to appropriate confidentiality and continued protection; or (c) where we reasonably believe disclosure or preservation is required by valid legal process, applicable law, fraud or security prevention, enforcement of our Terms, or protection of the rights and safety of PixelMod, users, or the public. We review government requests and disclose only what we reasonably determine is legally required.

7. International transfers

PixelMod and its providers may process information in Canada, the United States, the European Economic Area, and other countries where our listed providers operate. Information processed outside your province or country may be subject to the laws of that jurisdiction and lawful access by its courts, law-enforcement, or national-security authorities. Where required, we use contractual and other safeguards for cross-border processing, such as the EU Standard Contractual Clauses.

8. Data retention

Uploaded images are deleted automatically after processing. We keep account, subscription, transaction-reference, usage, security, and support data only as long as reasonably necessary for the purposes described here. The period depends on the data's nature and sensitivity, operational need, fraud and security risk, applicable limitation periods, and tax, accounting, legal, or contractual requirements.

Legal-consent and payment-authorization evidence is kept while the agreement is active and afterward for applicable limitation, tax, chargeback, regulatory, and dispute periods. When full identification is no longer reasonably necessary, related identifiers may be restricted, pseudonymized, or anonymized in accordance with applicable law and our records schedule.

You may select Deactivate & delete account in your account settings. After an explicit confirmation, access is disabled immediately, future subscription renewals are cancelled, and permanent account deletion is scheduled for 30 days later. You may reactivate the account during that window; reactivation does not restart a cancelled subscription. Once deletion processing begins, it may no longer be reversible. You may also contact contact@pixelmod.io for assistance.

At deletion, operational account records linked to the authentication profile are removed. We delete or anonymize other personal information unless we must or are permitted to retain limited records for tax, billing, chargebacks, security, fraud prevention, dispute resolution, regulatory compliance, or establishment and defence of legal claims. Retained legal evidence is restricted and may be pseudonymized. Backup copies may persist for a limited period until overwritten under normal cycles; uploaded images are not placed in an account image library.

9. Cookies & local storage

We use strictly necessary cookies and browser local storage to keep you signed in, remember your session, and store preferences. We do not use them to sell your data. You can control cookies through your browser, though some features may not work without them.

10. Your rights

Depending on where you live (e.g., Canada under PIPEDA or applicable provincial law, the EU/UK under GDPR, or California under the CCPA/CPRA), you may have rights to know whether we hold personal information about you; access it and learn how it has been used or disclosed; request correction or deletion; obtain portability where applicable; restrict or object to processing; or withdraw consent. California residents also have the right not to be discriminated against for exercising applicable rights, and we do not sell or share personal information for cross-context behavioural advertising.

Submit requests to contact@pixelmod.io. We may request information reasonably necessary to verify your identity and authority. We respond within the period required by applicable law; requests governed by PIPEDA are generally answered within 30 days, subject to lawful extensions. Access is provided at minimal or no cost unless the law permits otherwise. If we cannot fulfill a request, we will explain the reason and available complaint route unless prohibited by law. You may complain to the Office of the Privacy Commissioner of Canada or the applicable provincial, territorial, or foreign authority.

11. Security

We use measures appropriate to the nature of the information, including encryption in transit, access controls, least-privilege practices, credential protection, service monitoring, and reputable providers. No method of transmission or storage is completely secure. Do not send passwords, full payment-card numbers, government identifiers, or sensitive image files by email. If a security incident creates a notification obligation, we will notify affected individuals and regulators as required by applicable law.

12. Third-party sites

The Service may link to third-party sites or services that we do not control. A link does not mean we endorse or have reviewed that party's privacy practices. Information you provide directly to a third party is governed by its policy, so review it before proceeding.

13. Children

The Service is not directed to children under 16 (or the minimum age in your jurisdiction), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

14. Changes to this Policy

We may update this Policy prospectively as our practices, providers, or legal obligations change. We will post the updated version with a new date and provide additional notice where a change is material or applicable law requires it. If a new purpose requires consent, we will request it rather than treating continued use as consent where the law does not permit that approach.

15. Contact

Privacy questions or requests: contact@pixelmod.io · pixelmod.io.