Privacy Policy
Last updated: 17 August 2026
This Privacy Policy explains how Pixator (https://pixator.app) ("we", "us") collects, uses, and shares information when you use our website and tools (the "Services"). We design the product to collect as little as practical: media is processed briefly and deleted soon after, and we do not use your media to train our own AI models.
By using the Services, you acknowledge this Policy. Related rules appear in our Terms of Service and Content Policy.
1. Who we are
Pixator is operated by Dervex. For privacy requests, email contact@pixator.app.
2. Information we collect
2.1 Account information
Sign-in is via Google or Apple only (no email/password accounts). From your chosen provider we typically receive your name, email address, and profile image. We store account data needed to operate the Services, including your credit balance.
2.2 Media you upload and generate
When you use a tool, you may upload images, video, audio, masks, or text prompts. That media is stored in short-lived object storage so we can run the job and let you download results. Uploads and results are intended to be deleted within about one hour. We do not keep a personal media library.
2.3 Tool run and billing records
For authenticated use we keep records such as which tool you ran, status, timestamps, credit charges, and technical references (for example object keys or temporary URLs). Input snapshots may include URLs or parameters needed to process the job; the underlying media files themselves are still subject to the short retention window above. We also keep a credit ledger for purchases and tool usage.
2.4 Anonymous free-edit controls
Anonymous users may get one free image edit. To enforce that limit and reduce abuse, we may process a browser visitor identifier, an HttpOnly cookie, a hashed form of your IP address, and a user-agent string. This is used for rate limiting and free-edit eligibility — not for advertising profiles.
2.5 Payments
Credit pack purchases are handled by Stripe. We receive payment status and identifiers needed to credit your account. Card details are processed by Stripe, not stored on our servers. See Stripe's own privacy documentation for how they process payment data.
2.6 Technical and security data
Like most websites, our hosting stack may process standard request metadata (for example IP address, timestamps, and basic device/browser information) for security, reliability, and abuse prevention. We do not use third-party advertising or marketing analytics pixels on the product.
3. How we use information
We use information to:
- Provide, operate, and improve the Services;
- Run AI tools and deliver results to you;
- Authenticate accounts and manage credits and purchases;
- Enforce free-edit limits and prevent fraud or abuse;
- Respond to support and legal requests;
- Comply with law and protect our rights and users.
We do not sell your personal information. We do not use your uploads or outputs to train our own machine-learning models.
4. Sharing and processors
We share information with service providers only as needed to run the Services, including:
- Cloudflare — hosting, storage (including ephemeral media), database, and related infrastructure;
- DeepInfra and model providers — AI inference; uploads and prompts are sent to them to generate outputs and may be subject to their terms and retention practices during processing;
- Stripe — payment processing;
- Google and Apple — authentication when you choose those sign-in options.
We may also disclose information if required by law, legal process, or to protect the safety, rights, or property of Pixator, our users, or others; or in connection with a merger, sale, or reorganization (with appropriate safeguards).
5. Retention
- Media files: targeted deletion within about one hour after upload or result creation (lifecycle rules on ephemeral storage). Download links expire on a similar schedule.
- Account, credit, and tool-run records: kept while your account is active and as needed for billing, support, abuse prevention, and legal obligations.
- Free-edit / abuse signals: kept as long as needed to enforce limits and security.
Exact deletion timing can vary due to processing delays, backups, or provider behavior. If you need help with a deletion request, contact us.
6. International transfers
We and our processors may store and process data in multiple countries, including outside your home country. Where required, we rely on appropriate transfer mechanisms (such as contractual safeguards offered by processors). By using the Services you understand that your information may be transferred internationally.
7. Your choices and rights
Depending on where you live (for example under GDPR in the EU/EEA), you may have rights to access, correct, delete, or export personal data, or to object to or restrict certain processing. To exercise these rights, email contact@pixator.app. We may need to verify your identity. You may also have the right to lodge a complaint with your local data protection authority.
You can stop using the Services at any time. You may also revoke access via your Google or Apple account settings. Theme preference and similar UI settings may be stored locally in your browser.
8. Children
The Services are not directed to children under 18, and we do not knowingly collect personal information from children under 18. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.
9. Security
We use reasonable technical and organizational measures appropriate to a small production service (including encrypted transport and access controls). No method of transmission or storage is completely secure; we cannot guarantee absolute security.
10. Changes
We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Continued use after updates constitutes acceptance of the revised Policy where permitted by law.
11. Contact
Privacy questions: contact@pixator.app. More channels are listed on our Contact page.