Privacy Policy

Effective date: 2026-08-19 Document version: draft

Pixverax LLC ("Company", "we", "us") operates Pixverax at pixverax.com. This Privacy Policy explains how we collect, use, share, and retain personal data.

1. Controller

Legal name: Pixverax LLC (LLC)
State of formation: Delaware (file no. PENDING)
Registered address: 8 The Green, Suite A, Dover, DE 19901
Business address: 8 The Green, Suite A, Dover, DE 19901
Privacy / legal contact: legal@pixverax.com
Support: support@pixverax.com

2. Data we collect

Account data (email, name, authentication identifiers)
Billing and transaction metadata (processed by payment providers; we do not store full card numbers)
Generation inputs/outputs and task metadata needed to deliver the Service
Technical logs (IP address, user agent, approximate location derived from IP)
Consent records (document slug, version, timestamp, IP, user agent, context)

3. Purposes and legal bases

We process data to provide the Service, authenticate users, bill and prevent fraud, improve reliability, comply with law, and respond to rights requests. Where GDPR/UK GDPR applies, bases include contract, legitimate interests, legal obligation, and consent where required (for example, non-essential cookies).

4. Sub-processors

We use the following categories of sub-processors to operate the Service:

Vercel for hosting, serverless compute, workflows, sandbox processing, and AI Gateway
Supabase for the primary PostgreSQL database in the United States
Cloudflare R2 solely for object storage in the United States
fal.ai and other model providers enabled by us for prompts and reference media needed to generate outputs
Stripe and PayPal for payments and billing; full card numbers do not pass through our systems
Resend for transactional email
Sentry for error monitoring, with controls intended to exclude prompts and direct identifiers

Each provider processes data only as necessary to provide its contracted service. The current provider list may change when we replace a vendor or enable a disclosed service with equivalent safeguards.

5. International transfers

Our database, application compute, and object storage are primarily located in the United States. If personal data from the European Economic Area, United Kingdom, or Switzerland is transferred to the United States or another country without an adequacy decision, we rely on applicable safeguards such as the European Commission Standard Contractual Clauses, the UK Addendum, and, where applicable, a provider's participation in the EU-U.S. Data Privacy Framework and related extensions.

6. Retention

Account and billing records: retained as required for tax, dispute, and anti-fraud obligations
Free-tier artifacts: about 30 days
Paid-tier artifacts: about 12 months after relevant entitlement ends
Consent and audit evidence: retained to demonstrate compliance and defend disputes

7. Account closure (anonymization)

When you request account closure, we anonymize rather than physically delete every record (see also account center → Privacy & data):

Generated artifacts and upload materials in object storage are physically deleted
Prompts and generation task parameters are erased
The users row is retained in anonymized form (irreversible email hash, cleared name, anonymized_at set)
Orders, payments, refunds, disputes, consent records, and audit logs are retained where needed for tax, dispute, anti-fraud, and compliance obligations

8. Your rights

Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to certain processing, and to withdraw consent. You can self-serve a DSAR export from the account center (account, orders, credit ledger, artifact inventory), or contact legal@pixverax.com. We aim to respond within 24 hours for acknowledgment and within applicable statutory timelines for fulfillment.

9. CCPA / CPRA

California residents may have rights to know, delete, and correct personal information, and to opt out of certain sharing. Where enabled for this site, use the "Do Not Sell or Share My Personal Information" link in the footer or contact legal@pixverax.com.

10. Children

The Service is not directed to children under the configured minimum age. We do not knowingly collect personal data from children below that age.

11. Contact

legal@pixverax.com · support@pixverax.com · +1-302-000-0000 8 The Green, Suite A, Dover, DE 19901