Legal

Privacy Policy

Effective date: March 20, 2026

1. Introduction

Pixshop (“Pixshop”, “we”, “us”, or “our”) operates the AI photo studio at pixshop.art. This Privacy Policy explains what personal data we collect when you use our service, how we use it, and the choices you have.

If you have questions about this policy, contact us at pixshop@1nano.tech.

2. Information We Collect

Account information. When you sign in, Clerk (our authentication provider) collects your email address, display name, and profile photo from your chosen identity provider (e.g. Google). We receive and store the Clerk user ID and basic profile fields needed to operate your account.

User content and biometric data. Photos you upload — selfies and reference images — are stored in Vercel Blob storage and linked to your account. These files are processed by AI models to generate your requested output images. When you upload a photo of your face, Pixshop processes facial geometry and likeness data as part of generating AI images. Depending on your location, some of this information may constitute biometric data or sensitive personal data under applicable law. By uploading a photo, you expressly consent to this collection and processing as described in this policy. We do not sell or profit from your biometric data. All facial data is deleted automatically after 30 days per Section 6.

AI processing data. To generate images, we send your uploaded photos to the Google Gemini API. Google processes these images according to their own privacy and data-use policies.

Payment information. Billing is handled by Stripe. We receive a Stripe customer ID and subscription status but do not store raw card numbers or sensitive payment data on our servers.

Automatically collected data. When you use Pixshop, we and our service providers automatically collect: IP address, browser type and version, device identifiers, operating system, referring URLs, pages visited, and timestamps of activity. This data is used for security, abuse prevention, and aggregate service analytics. We do not collect precise geolocation data.

Usage and generation logs. We store records of generation requests, credit usage, and account activity in our database to operate the service and provide support.

3. Cookies & Local Storage

We use cookies set by Clerk solely for authentication session management. We do not use advertising cookies, third-party tracking cookies, or analytics cookies tied to your identity. A small amount of localStorage may be used to preserve UI state (e.g. theme preference) and is never transmitted to our servers or shared with third parties.

4. How We Use Your Information

To provide, operate, and maintain the Pixshop service
To manage your account, credits, and subscription
To process photo generation requests using AI models
To communicate with you about your account or support requests
To enforce our Terms of Service and safety policies
To detect and prevent fraud, abuse, and security incidents
To improve the service using anonymized, aggregate analytics
To comply with legal obligations

Legal bases for processing (EEA/UK/Swiss users). We process your personal data under the following legal bases: (a) Performance of a contract — processing necessary to provide the Pixshop service you have requested; (b) Legitimate interests — security, fraud prevention, and anonymized analytics to improve the service; (c) Legal obligation — retaining billing records as required by law. Where we rely on legitimate interests, you may object to that processing by contacting us.

Automated decisions. Some actions affecting your account are made automatically, including credit deduction upon generation, safety filter rejections, and subscription enforcement. If you believe an automated decision was made in error, contact us at pixshop@1nano.tech and we will review your case.

Email communications. We may send you transactional emails related to your account (receipts, security alerts, service notices). If we send promotional emails, you can opt out at any time via the unsubscribe link in the email or by contacting us at pixshop@1nano.tech.

5. Third-Party Services

Pixshop relies on the following sub-processors and third-party services:

Clerk — authentication, user identity, and session management
Google Gemini API — AI image generation and processing
Stripe — payment processing and subscription billing
Vercel — hosting, serverless functions, blob storage, and anonymized analytics
Neon — serverless PostgreSQL database

Each provider operates under its own privacy policy and data processing agreements. We only share the minimum data necessary for each provider to perform its function. Integrated third-party services operate under separate privacy frameworks not covered by this policy.

6. Data Retention

Media files (uploaded photos and generated outputs) are automatically deleted after 30 days. Database records — including generation history and credit logs — are retained while your account is active and destroyed when no longer necessary for service operation, unless retention is required by law. If you delete your account, all associated personal data is cascade-deleted from our database and any remaining media files are removed. Stripe may retain billing records as required by financial regulations.

7. Your Rights & Choices

Account deletion. You can delete your account at any time through the Pixshop app. This triggers a full removal of your personal data from our systems.
Data access & export. To request a copy of your personal data, email us at pixshop@1nano.tech.
Cookies. Because we only use essential authentication cookies, no cookie opt-out mechanism is needed. You can clear cookies at any time through your browser settings, which will sign you out.
EEA, UK & Swiss residents (GDPR). You have the right to access, rectify, erase, restrict processing of, or port your personal data. You may also object to processing based on legitimate interests. To exercise any of these rights, contact us at pixshop@1nano.tech. If you are unsatisfied with our response, you may lodge a complaint with your local data protection authority.
California residents (CCPA/CPRA). You have the right to know what personal information we collect and how it is used, request deletion, request correction of inaccurate data, and opt out of the sale or sharing of your personal information. Note: we do not sell your personal information. To exercise these rights, contact us at pixshop@1nano.tech. We will respond within 45 days and will not discriminate against you for exercising your rights.

8. Data Security

All data is transmitted over HTTPS. Access to our infrastructure is restricted to authorized personnel. We do not store raw payment card data. We implement physical, technical, and administrative safeguards to protect your personal data. While we take reasonable precautions, no system is completely secure and we cannot guarantee absolute security.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law.

9. Children's Privacy

Pixshop requires all users to be at least 18 years of age. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

10. International Data Transfers

Pixshop is operated from the United States. Your data is processed primarily in the US by our cloud providers (Vercel, Neon, Google, Stripe, Clerk). If you access the service from outside the US, your data may be transferred to and processed in the US or other countries where our providers operate. For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission, or on the adequacy mechanisms provided by our sub-processors' respective data transfer programs.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of Pixshop after a change takes effect constitutes acceptance of the updated policy.

12. Contact

For privacy questions or requests, contact us at pixshop@1nano.tech.