Privacy Policy

1. Overview

PixGenia is designed to collect as little as possible. The free tools (image generator, background remover, photo editor, logo maker and image upscaler) can be used without an account and never ask for your name or e-mail address.

Accounts exist for the paid image plans. Taking out a plan creates an account from the e-mail address used at payment; you then choose a password and sign in with that address, and the account keeps your plan, your daily allowance and your saved creations across devices. The Portrait Pro pack, a one-off purchase, involves a payment and the processing of photos of your face; it is described in section 7.

This policy explains the data we process, why, for how long, who helps us process it, and the rights you have. The data controller is the publisher of PixGenia identified in our Legal Notice, reachable at support@pixgenia.com. PixGenia is operated from France and complies with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.

2. Cookies and Browser Storage

"pixgenia_uid". On your first visit we set a cookie containing a randomly generated identifier that is not derived from your identity. It is kept for up to 1 year and cannot be read by scripts. It is used to count your free daily images, to link the pages you view and the operations you run in our own visit statistics (section 3), to let you resume a Portrait Pro order on the same browser, and to recognize a browser that has already had the free trial of a plan (in that case we keep only a one-way hash of it). It is never used for advertising, never shared with third parties, and not used to follow you on other sites.

"pix_session". Set only when you sign in to an account, it keeps you signed in for up to 30 days. Our database stores only a hash of it, never the value itself. Signing out deletes it.

Browser storage. Without an account, the images shown under "My creations" and your logo history are kept in your own browser (IndexedDB and local storage) and never reach us; clearing your browser data erases them.

We set no third-party cookie. When you pay, you are taken to pages operated by Stripe (checkout and billing portal), which set their own cookies under Stripe's privacy policy. You can delete our cookies at any time in your browser settings: this resets your anonymous identifier and signs you out.

3. What We Record

Usage records. Each AI operation attempt creates a record containing: the anonymous visitor identifier, the network address (IP address; for IPv6, only the network prefix is kept), a timestamp, the tool and operation used, the outcome (success, refusal with its reason, or error) and, for account holders, the account identifier and the number of images charged to the allowance.

Visit records. Each page you view creates a record containing: the visitor identifier, the page address and language, the referring page, campaign tags present in the link (utm_source, utm_medium, utm_campaign), the approximate country and city derived from your IP address by our host, the IP address (for IPv6, only the network prefix), your browser's user-agent string, and the time spent on the page. These statistics are produced by our own code; no third-party analytics service is involved.

Account data. For an account we store: the e-mail address, a hash of the password (scrypt; never the password itself), the dates of creation, address verification and last visit, the language chosen, the Stripe customer and subscription identifiers, and the plan, its status and the end of the period paid; plus one record per signed-in session (hash of the session cookie, browser user-agent, expiry date) and single-use links for verifying the address or choosing a password (stored as hashes). To grant the free trial only once, we keep a one-way hash of the visitor identifier, of the e-mail address and of the payment card fingerprint provided by Stripe that used it (never the card number).

Purposes and legal bases. Enforcing the free quota and the per-network limit, preventing abuse and automated misuse, keeping the Service reliable and understanding which pages and tools are used: our legitimate interest in operating and protecting a free public service (GDPR Article 6(1)(f)). Providing a plan, its allowance and its account: performance of the contract (Article 6(1)(b)). For Portrait Pro, the legal bases are set out in section 7.

Retention. Usage and visit records are kept in identifiable form for at most 13 months; beyond that, the IP address, identifiers, city and user-agent are erased and only anonymous counts remain. Account data is kept for as long as the account exists: deleting your account from your account page erases the account, its sessions and its saved creations. Payment records are kept by Stripe, and by us where accounting law requires it. Trial hashes are kept for as long as the free-trial offer exists.

4. Your Prompts, Photos and Images

Without an account, the text prompts you submit and the photos you upload to the photo editor are sent to our AI provider, OpenAI, solely to produce your image, and are not stored on our servers. The images produced are returned directly to your browser and are not kept by us; if you close the page without saving an image, it is gone. The background remover and the image upscaler run entirely in your browser: your image never leaves your device.

With an account, the images you create with the image generator and the logo maker while signed in are stored with their prompt (up to its first 400 characters), in private storage that is not publicly accessible, so that you can find them again on any device. They are deleted one year after creation, or when you delete them or your account.

When the free daily limit is reached, the image you last requested may be generated and held on our side, shown to you only as a blurred preview, so that it can be released to you if you take out a plan. It is stored with its prompt for up to 7 days and then deleted; if you take out a plan and it is released, it joins your saved creations under the rules above.

OpenAI processes prompts and photos as our processor under its API terms: API data is not used to train its models, and may be retained by OpenAI for up to 30 days for abuse monitoring before deletion. For Portrait Pro, the selfies you upload and the portraits we generate are handled as described in section 7.

5. Who Processes Your Data

We do not sell, rent or trade any data. We run no advertising and embed no third-party marketing, analytics or social tracking scripts on the site.

The following providers process data on our behalf, each only on our instructions and only to deliver the Service: Vercel Inc. (United States) — hosting, server functions and file storage (saved creations, held previews, Portrait Pro files); Neon, Inc. (United States, database hosted in the AWS us-east-1 region) — our database: usage and visit records, accounts and subscription status, the index of saved creations, and orders; OpenAI, L.L.C. (United States) — image generation and editing (prompts and uploaded photos); Stripe Payments Europe, Ltd. (Ireland) — payment of plans and of Portrait Pro, subscription management, invoices and the billing portal (Stripe receives the e-mail address and card details you enter on its pages; we never receive your card details); Resend (United States) — transactional e-mails: account e-mails (address verification, choosing or resetting a password, plan and purchase confirmations) and Portrait Pro delivery.

Transfers outside the European Union rely on the EU–US Data Privacy Framework for providers certified under it, and otherwise on the European Commission's Standard Contractual Clauses included in each provider's data processing terms.

6. Your Rights

Under the GDPR and similar laws, you have the right to access, rectify, erase, and restrict the processing of your personal data, the right to data portability where processing is based on contract or consent, the right to withdraw consent at any time, and the right to object to processing based on legitimate interest.

Without an account, the data we hold is pseudonymous and we may be unable to link records to you specifically; where identification is impossible, some rights may not technically apply (GDPR Article 11). For an account, we identify you by its e-mail address, and you can delete the account yourself from your account page. For Portrait Pro orders we can identify your order from the order number in your delivery e-mail. To exercise your rights or ask any privacy question, contact us at support@pixgenia.com. You also have the right to lodge a complaint with your local data protection authority; in France, this is the CNIL (cnil.fr).

7. Portrait Pro: Photos of Your Face

Data processed. When you use Portrait Pro we process: the 2 to 4 selfies you upload (images of your face), the style you choose, the previews and portraits generated from your selfies, the text and time of the consent you gave, your confirmation that you are 18 or older, your anonymous visitor identifier and IP address, your language, and — if you buy the pack — the e-mail address and country you enter at checkout, the Stripe session and payment identifiers, and the amount paid. We never receive or store your card details: they are handled by Stripe. We do not run face recognition, do not compute or store any face template or biometric signature, and never compare faces.

Purposes and legal bases. Generating your previews and your pack, delivering it and sending you the download link: performance of a contract (GDPR Article 6(1)(b)). The processing of images of your face specifically: your explicit consent, given by ticking the consent box before any upload (Article 6(1)(a) and, to the extent such images could be considered special-category data, Article 9(2)(a)); you can withdraw it at any time by asking us to delete your order, without affecting processing that already took place. Keeping the order record for accounting and to handle refunds and disputes: legal obligation (Article 6(1)(c)) and legitimate interest (Article 6(1)(f)). Preventing abuse and enforcing the daily preview quota: legitimate interest.

Processors and transfers. Your selfies are sent to OpenAI, L.L.C. (United States) to generate the images; OpenAI is certified under the EU–US Data Privacy Framework, which the European Commission recognizes as providing adequate protection, and processes the images as our processor under its API data-usage terms (no training on API data). Selfies, previews and portraits are stored on Vercel (hosting and object storage; Vercel Inc. is certified under the EU–US Data Privacy Framework and Standard Contractual Clauses also apply), and the order record in our Neon database (section 5). Payments are processed by Stripe Payments Europe, Ltd. (Ireland), and the delivery e-mail is sent through Resend (United States, Standard Contractual Clauses). Each processor acts only on our instructions and only to deliver the Service.

Retention. Your selfies are deleted within 24 hours after your portraits have been generated (or 24 hours after upload if no generation follows). Previews and the portraits of a paid pack are deleted 30 days after purchase, when the download link expires; previews of an unpaid order are deleted within 30 days. The order record (order number, e-mail, amount, payment identifiers, consent record) is kept for 1 year for accounting, refund and dispute purposes, then deleted; the usage record follows section 3. You may ask for earlier deletion of the selfies, previews and portraits at any time; the download link then stops working.

No training, no reuse. Neither we nor our providers use your selfies or your portraits to train, fine-tune or improve any model, and we never use them for any purpose other than producing and delivering your order. Portraits are labelled "AI-generated image" and keep their C2PA content credentials.

Where the tool is not available. Portrait Pro is not offered to visitors located in the U.S. states of Illinois and Texas, whose biometric-privacy laws require procedures we do not operate.

Your rights over these data are those of section 6; because an order is identified by its number, we can act on requests concerning a specific order. Write to support@pixgenia.com with the order number from your delivery e-mail.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates the latest revision. Material changes will be reflected here before they take effect.