Privacy Policy

When you use our platform, we may collect the following information:

• Account Details: Email address, phone number, and login credentials (via email/password or Google Sign-In).
• Uploaded Media: Images, videos, and any assets you submit for 3D/AR generation, along with AI outputs created from them: size and scale estimates, generated 3D models, and (when you use the AI catalog builder) AI-written catalog text.
• Usage Analytics: API usage logs, cost tracking data, generation analytics, credit usage patterns, and storage metrics to optimize performance, billing accuracy, and provide usage insights.
• Billing Information: Subscription details, payment history, refund requests, and credit purchase records for account management and billing purposes.
• Security Monitoring: Real-time threat detection, login attempts, and security event logs for platform protection.
• Customer Support: Information you voluntarily provide when submitting support tickets. Support messages may be automatically categorized by an AI system so they reach the right person faster. This affects routing only, and a human reviews and answers every message.

We use real-time security monitoring and automated threat detection to protect your data and our platform.

Cookies and local storage: Pixeloa uses a small number of first-party cookies and browser storage entries strictly to operate the platform: keeping you signed in and remembering preferences such as your language. We do not use advertising cookies or third-party tracking cookies.

Public page statistics: when visitors view a published catalog or AR page, we record anonymous, aggregate view events: the event type, the platform, the approximate country (derived from the network edge, never your IP address), whether the view came from a Pixeloa page or an embedded widget, and the time. These events contain no visitor identifiers. Analytics are disabled by default for medical items, and item owners can turn analytics off per item.

Product-update email: if you opt in under Account → Privacy, we send occasional product news through Resend. Every such email carries a one-click unsubscribe, we record when and where you opted in, and bounces or spam complaints switch the opt-in off automatically. These emails contain a small tracking image and links rewritten by Resend, so we can see whether a message was opened and which links were clicked; we keep the open and click times against your account, not your IP address or device details, to tell whether our mail is still wanted. Account, billing, and security emails are sent regardless of this setting; they carry the same measurement at Resend, which we do not store against your account.

We use your data to provide, maintain, and improve our services, as well as for security, compliance, and operational purposes, including:

• Creating and managing your account with secure authentication
• Processing 3D/AR model generation via trusted third-party APIs
• AI-powered image analysis (size and scale estimation) and, when you request it, AI-generated catalog text
• Providing technical support and monitoring platform security
• Sending account-related communications, including service updates, billing notices, and security alerts. Marketing emails may be opted out of at any time.

We do not sell, trade, or share your personal information with advertisers or unrelated third parties. Pixeloa does not sell personal information as defined under applicable privacy laws.

Pixeloa may process certain information, such as email addresses, IP addresses, and usage patterns, for the purposes of security, fraud prevention, and abuse mitigation. Some of these protections are automated and rule-based (not AI): for example, accounts showing repeated abuse patterns may be automatically restricted. If your account is restricted automatically, you may contact support@pixeloa.ai and a human will review the decision.

Pixeloa may use submitted content to improve and enhance its services and underlying models. When used for this purpose, data is processed in an aggregated and anonymized manner and is no longer associated with any individual user or account. You may object to this use at any time by contacting support@pixeloa.ai.

We process personal data based on one or more of the following legal grounds: your consent, the necessity to perform our contract with you, compliance with legal obligations, and our legitimate interests in improving, securing, and operating the platform.

We may also process or disclose information where required to comply with applicable laws, regulations, or legal processes.

Pixeloa does not currently respond to "Do Not Track" browser signals.

All user data is securely stored with Supabase, our database, authentication, and file-storage infrastructure provider. We implement industry-standard security measures, including encryption, access controls, and monitoring systems, designed to protect your data. This includes real-time security monitoring, automated threat detection, intrusion prevention, comprehensive audit logging, encrypted file storage, secure authentication systems, and automated vulnerability scanning.

While we implement strong security measures, no system can be guaranteed to be completely secure, and we cannot ensure or warrant absolute security of your data.

Medical and dental items receive additional privacy protections by default (private visibility, analytics disabled, and no public QR exposure) to meet the higher standard of confidentiality required for clinical use.

We retain personal data only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Account data may be retained during active subscriptions and for a limited period following account inactivity, after which it may be deleted in accordance with our data retention policies. Security and abuse-prevention records (for example the email address and IP address associated with blocked or repeated sign-up activity) are kept for up to 24 months after the last related activity, including after an account is deleted, so that bans cannot be evaded by deleting and re-registering, and are then removed automatically; records tied to an active ban or an open manual review are kept until it is resolved.

Your information may be transferred to and processed in countries outside of your jurisdiction, including the United States, where data protection laws may differ. Where required, we rely on appropriate safeguards for such transfers, such as standard contractual clauses.

If a data breach affects your personal data, we will notify affected users and applicable regulators without undue delay, consistent with applicable law.

How long we keep things: account details, uploads, generated models, and API keys last for the life of your account and are deleted when you delete it (a public model shared by another account's published item is kept only while that item references it). Billing records stay with Stripe under Stripe's own retention after your account is gone. The credit ledger, the audit trail, the marketing-email send log, support messages, and sales inquiries are kept for record-keeping, but your identifying details and any free text are removed from them when you delete your account, and the marketing send log is anonymized automatically after 24 months in any case. Public-page statistics are anonymous aggregates and are deleted with the item. Abuse-prevention records are kept for up to 24 months after the last related activity, as described above. Backups are purged within 30 days.

To deliver key features, Pixeloa uses trusted third-party tools and APIs, including third-party AI vision services (currently Google) for image analysis, 3D generation providers such as Meshy, Supabase for data storage and authentication, Stripe for payment processing, Cloudflare for hosting, content delivery, storage of published 3D models, bot verification on sign-in, sign-up and the public contact and sales-inquiry forms (Cloudflare Turnstile), and aggregate site-traffic measurement (Cloudflare Web Analytics, which sets no cookies and does not identify individual visitors), and Resend for transactional email and, if you opt in, product-update email. Our how-it-works page embeds a YouTube video in privacy-enhanced mode, which sets no cookies until you press play. These services help us with:

• AI-powered image analysis and AI-assisted content generation you request
• Generating high-quality 3D models from your uploaded content
• Rendering your models in augmented reality experiences
• Providing secure login, authentication, and data storage
• Real-time cost tracking and usage analytics

We share only the data necessary for these services to function and choose partners who meet high privacy and security standards. We maintain detailed audit logs of all API usage for transparency and cost tracking. We do not sell your personal information to advertisers or unrelated third parties.

While we carefully select our service providers, Pixeloa is not responsible for the privacy practices, security measures, or performance of third-party services.

Upon deletion, all personally identifiable data associated with your account will be permanently removed by our automated deletion system, and any residual copies (such as system backups) are purged within 30 days, except where longer retention is required by law. However, Pixeloa may retain anonymized, aggregated, or non-identifiable data derived from user content for the purpose of improving and maintaining our services.

EU and UK residents: you also have the right to lodge a complaint with your local data protection supervisory authority.

California residents: California law may provide additional rights, including the right to know, correct, and delete personal information and the right to opt out of its sale or sharing. Pixeloa does not sell or share personal information as defined by California law, and we honor access, correction, and deletion requests for all users regardless of location. We will never discriminate against you for exercising a privacy right. To make a request, contact support@pixeloa.ai.

Pixeloa is intended for users who have reached the age of majority in the place where they live.

• Minors (below the age of majority): May only use the platform with the involvement and consent of a parent or legal guardian, who agrees to be responsible for all use of the platform and any associated charges.
• Children (under 13): We do not knowingly collect personal information from children under the age of 13. If we become aware that such data has been collected without verified parental consent, we will take steps to delete it.

This policy may evolve as our platform grows. We'll notify users of any major changes via email or through a platform notice.

Have questions or concerns about your data?

Reach out to us anytime at: support@pixeloa.ai

Translations of this Privacy Policy are provided for convenience only. In the event of any conflict or ambiguity between the English version and any translation, the English version governs.