Privacy Policy

Last updated: July 13, 2026

This policy explains what personal data PixFits (“we”, “us”) collects when you use the Service, why, who it is shared with, and the choices you have. It applies together with our Terms of Use. For anything in this policy, you can reach us at contact@pixfits.com.

1. Data we collect

Account data. Your email address and, depending on how you sign in, data from the sign-in provider: your name and profile picture from Google, or your Telegram ID and username from Telegram. Telegram sign-ins are assigned a service-internal email alias. We never see or store your passwords for third-party sign-in providers.
Content. The prompts you write, the images or other files you upload as inputs, and the media generated for you.
Billing data. Payments are processed by third party payment providers. We receive order and subscription status (what you bought, when, and for how much) but never your card or bank details, which go directly to the provider.
Usage and technical data. Your generation history (jobs, models used, credits spent), and server logs including IP address and browser information, used for security, rate limiting, and debugging.
Attribution data. If you arrive via a referral link or a campaign link, we store the referral code and campaign parameters in your browser for up to 30 days and associate them with your account when you sign up, so we know how you found us and can credit referrers.

2. How we use your data

To provide the Service: run generations, store and show you your results, meter credits.
To manage billing, subscriptions, and the referral program.
To secure the Service: authentication, rate limiting, fraud and abuse prevention, content moderation.
To support you and respond to your requests.
To comply with legal obligations.

Where the GDPR or similar laws apply, we rely on performance of contract (providing the Service), legitimate interests (security, abuse prevention, service improvement), and legal obligation as our legal bases. We do not sell your personal data, and we do not use it for third-party advertising.

3. AI processing — where your content goes

To generate media, your prompts and uploaded inputs are transmitted to our serving providers, which runs the model you selected. Depending on the model, providers may route the request to the model’s operator (for example Google or OpenAI). Your content is processed by these providers solely to fulfil your generation request, under their API terms. We do not train AI models on your content, and we do not permit our providers to do so under the API terms we use.

We share data only with the processors needed to run the Service:

Database, authentication, and file storage (your account data, jobs, uploads, and generated media) services.
Downstream model providers — prompts and inputs, to run generations (see section 3).
Google / Telegram — only if you choose them for sign-in, under their own privacy policies.

We may also disclose data when required by law, to protect the rights and safety of users or others, or as part of a business transfer, in which case this policy continues to apply to the transferred data. Some of these providers process data outside your country, including in the United States; where required, transfers are protected by safeguards such as standard contractual clauses implemented by the providers.

5. Cookies and local storage

We do not use advertising or third-party tracking cookies, and we do not run third-party analytics on the Service. We use your browser’s local storage for what is strictly necessary: keeping you signed in, remembering your theme preference, and holding referral/campaign parameters for up to 30 days (see section 1). Because none of this is used for tracking or advertising, no cookie consent is required.

6. Retention and deletion

Account data, content, and generation history are kept while your account is active.
Billing records are kept as long as required by tax and accounting law.
Server logs are kept for a short period for security and debugging.
You can delete individual generated assets from the Service at any time. To delete your account and associated data, email contact@pixfits.com from your account email; we will delete your data within 30 days, except what we must retain by law.

7. Your rights

Depending on where you live (for example under the GDPR or CCPA), you have the right to access, correct, export, restrict the processing of, object to the processing of, and delete your personal data, and the right to complain to your local data-protection authority. To exercise any of these rights, email contact@pixfits.com. We will respond within the time required by applicable law and may need to verify your identity first.

8. Security

Data is encrypted in transit, access to production systems is restricted, and payment data never touches our servers. No system is perfectly secure; if a breach affects your personal data, we will notify you and the relevant authorities as required by law.

9. Children

The Service is for adults. We do not knowingly collect data from anyone under 18; if we learn that we have, we will delete it.

10. Changes to this policy

We may update this policy as the Service evolves. For material changes we will give notice through the Service or by email before they take effect. The “Last updated” date above always reflects the current version.

11. Contact

Privacy questions and requests: contact@pixfits.com