Skip to main content

Privacy Policy

Last updated: September 18, 2026

This Privacy Policy explains how Pixelto AI ("Pixelto," "we," "us," or "our") processes information when you access or use pixelto.com and related services (collectively, the "Service").

1. Scope

This Policy applies to information processed through the Service, including account creation, image generation and editing, support requests, purchases, and use of our website.

2. Information We Process

Depending on how you use the Service, we may process:

  1. Account and authentication information, such as your name, email address, profile image, authentication identifiers, language, and account preferences.
  2. Service and device information, such as feature usage, session events, timestamps, IP address, browser and device information, visitor identifiers, and anti-abuse signals.
  3. AI request information, such as prompts, style selections, reference images, generation parameters, and information needed to process and deliver a result.
  4. Transaction information, such as subscription and payment status, plan identifiers, credit usage, and billing metadata supplied by payment providers. We do not store complete payment card numbers.
  5. Support and report information, such as the name, email address, messages, attachments, links, account or generation references, rights or authorization information, and other evidence you provide when contacting support or submitting a Content Policy report.
  6. Cookie and similar technology information, including information needed for login, preferences, security, PostHog product analytics, Google Analytics, and Google AdSense.

3. How We Use Information

We use information to:

  1. Provide, maintain, and protect the Service.
  2. Authenticate users, manage accounts, and process payments, subscriptions, and credits.
  3. Process image generation or editing requests and deliver results.
  4. Prevent abuse, fraud, security risks, and violations of our Content Policy.
  5. Respond to support requests and Content Policy reports, investigate reported content or conduct, take enforcement action where appropriate, and send necessary service notices.
  6. Understand website visits, acquisition sources, registration and creation flows, feature use, and purchase outcomes to identify product issues and improve usability. Product analytics uses visitor identifiers or internal account identifiers and selected non-content event attributes.
  7. Display advertising and measure website visits and use.

4. AI Content Handling

Your prompts, reference images, and generated outputs are used only to complete your request, protect the Service, and address necessary troubleshooting.

Pixelto does not use your prompts, reference images, or generated outputs to train AI models, improve products, publicly display content, or market the Service.

To complete a generation or editing request, we may transmit the content necessary for that request to the applicable third-party model provider. That provider may process the received information under its applicable terms and privacy practices. We do not separately provide your AI content to a provider for the purposes listed above.

5. Temporary Reference Image Handling

Most model providers support data_url delivery. For those requests, a reference image is sent directly as image/base64 data and is not stored on Pixelto servers.

When a model provider requires a reference image URL, we temporarily store the image in Cloudflare R2 only to complete that request. The R2 lifecycle policy automatically deletes those temporary files after 24 hours.

6. When We Share Information

We may disclose necessary information to service providers that help us provide the Service, including:

  1. AI model providers that process a request for your selected model.
  2. Providers of cloud storage, authentication, security, email, and infrastructure services.
  3. Payment providers that process payments, subscriptions, and billing.
  4. Google Analytics and Google AdSense for website analytics and advertising.
  5. PostHog for product analytics and, when enabled, masked session replay. We send selected page, device, source, interaction, and transaction-status attributes using pseudonymous visitor or internal account identifiers. We do not send raw prompts, uploaded or generated image content, authentication credentials, full payment details, or support messages to PostHog. Learn more about PostHog privacy practices.

We may also disclose information when required by law; to protect users, the Service, or our rights; to enforce our Terms and policies; or in connection with a reorganization, merger, or asset transfer.

Service providers process information only as needed to provide their services and may be subject to their own terms and privacy policies.

7. Retention and Account Deletion

We retain information only for as long as needed to provide and protect the Service, meet applicable obligations, and handle necessary operational matters.

When you delete your account, we delete your account and associated user content through our deletion process. Analytics records held by service providers are handled separately under their configured retention settings and our privacy-request process. Contact us to request deletion of identifiable analytics records; provider-side deletion may take time to complete.

8. Security

We use reasonable technical and organizational measures to protect information. No internet transmission or electronic storage method can be guaranteed to be completely secure.

9. Cookies, Advertising, and Your Choices

PostHog uses first-party identifiers to distinguish visits and associate usage with an account after sign-in. When session replay is enabled, inputs and page text are masked, image and media regions are blocked, and network bodies, headers, console content, and canvas recording are excluded. No recording system is intended to capture your private creation content. Product analytics is separate from advertising. This policy provides information about processing; it does not itself constitute consent where consent is required. For analytics-related access, objection, or deletion requests, contact [email protected].

We use cookies and similar technologies to support login, preferences, and security, and we use Google Analytics and Google AdSense to measure website use and display advertising. Google and its advertising technology partners may place or read cookies, use web beacons, and process IP addresses, device identifiers, browser information, and usage information for purposes such as ad delivery, measurement, personalization, security, and fraud prevention. Learn more about how Google uses information from sites that use its services.

Where required in the European Economic Area, the United Kingdom, or Switzerland, Google's consent management platform asks whether you consent to advertising-related purposes and vendors before personalized advertising is enabled. Depending on your choices and applicable requirements, Google may serve personalized, non-personalized, or limited ads.

You may manage some account information or delete your account in account settings. You may also control cookies through your browser settings, use the "Cookie preferences" link in the site footer to review or change an applicable consent choice, and manage Google analytics and advertising preferences through Google Ads Settings. Limiting certain cookies may affect parts of the Service or your advertising experience. For assistance, contact [email protected].

10. Access, Correction, and Deletion Requests

Where applicable law provides these rights, you may request access to, correction of, or deletion of information we hold about you by contacting [email protected]. To protect account security, we may need to verify your identity before acting on a request and may limit or decline a request where permitted by applicable law.

11. Adults Only

The Service is for users who are at least 18 years old. We do not provide the Service to people under 18.

12. International Processing

Information may be processed in countries or regions other than the one where you live in order to provide the Service.

13. Changes and Contact

We may update this Policy from time to time and will update the "Last updated" date on this page. Continued use of the Service after an update means you accept the updated Policy to the extent permitted by applicable law.

For questions about this Privacy Policy, contact [email protected].