Privacy Policy

This Privacy Policy explains how PixelMax ("we", "us", or "our") collects, uses, stores, and protects your information when you use our AI-powered image editing service ("Service"). We are committed to protecting your personal information and your right to privacy.

By creating an account or using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you disagree with any terms, please discontinue use of the Service.

Last updated: May 10, 2026

Account Information

When you register, we collect your email address and a hashed password. We never store your password in plain text. If you use social login (e.g., Google or GitHub via OAuth), we receive your name, email address, and profile picture from those providers.

Payment Information

Payment processing is handled securely by our payment provider (Creem). We do not store your full credit card number or bank account details on our servers. We retain transaction IDs, subscription status, plan details, invoice records, and billing history for accounting and legal compliance purposes.

Credits & Usage Data

We record your credit balance, credit consumption per AI editing operation, subscription plan, credit pack purchases, and feature usage to provide and maintain the Service. This data is used to calculate your remaining credits and to detect abuse.

Uploaded & Generated Images

Images you upload for editing are temporarily stored in our cloud storage (Cloudflare R2) solely to perform the requested AI operation. Processed images are retained for a short period (up to 3 days for Lite plan users) to allow you to download results, after which they are automatically deleted. We do not use your uploaded images to train AI models.

Technical Information

We automatically collect IP address, browser type, device type, operating system, referring URL, and access timestamps for security monitoring, fraud prevention, and service diagnostics.

• Provide, operate, and improve the AI image editing Service
• Process payments, manage subscriptions, and handle credit transactions
• Authenticate you and maintain the security of your account
• Send transactional emails (e.g., account confirmation, password reset, subscription receipts)
• Display your editing history and credit balance within your dashboard
• Detect, investigate, and prevent fraudulent transactions and abuse
• Analyze aggregate usage patterns to improve features and user experience
• Comply with applicable laws, regulations, and legal processes

• Contractual Necessity: Processing required to deliver the Service you have subscribed to, including account management, credit operations, and image editing.
• Legitimate Interests: Service improvement, security measures, fraud prevention, and analytics that do not override your fundamental rights.
• Legal Obligation: Tax records, financial reporting, and compliance with applicable laws (e.g., retaining transaction records for 7 years).
• Consent: For optional marketing communications where you have given explicit consent.

We work with trusted service providers to operate our platform. Your information may be shared with:

• Cloudflare: Infrastructure, CDN, DNS, Workers runtime, D1 database, and R2 object storage for image files.
• Creem: Secure payment processing and subscription management.
• AI Model Providers: We send image data to third-party AI model APIs (e.g., Replicate, and others) solely to execute the editing operation you requested. These providers process data under their own privacy policies and do not retain your images beyond the processing request.
• OAuth Providers: Google and/or GitHub for social login authentication (only if you choose to use this feature).
• Analytics Services: Aggregated, anonymized usage statistics to help us understand how users interact with the Service.

We do not sell, rent, or trade your personal information to third parties for their marketing or advertising purposes.

• Account data is retained while your account remains active.
• Uploaded source images are automatically deleted within 24 hours after processing. Processed output images are retained for up to 3 days (Lite plan) or as specified in your plan, then permanently deleted.
• Payment and transaction records (invoices, subscription events, credit ledger entries) are retained for 7 years as required by applicable tax and accounting laws.
• Upon account deletion request, your personal data is removed within 30 days, except where retention is required by law.
• Security and access logs are retained for up to 12 months for security purposes.

We implement industry-standard security measures to protect your information, including:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Data storage with encryption at rest via Cloudflare infrastructure
• Access controls, authentication, and role-based permissions
• Idempotency keys and audit logs for all billing operations
• Hashed password storage — we never store passwords in plain text

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We encourage you to use a strong, unique password and to keep your account credentials confidential.

Depending on your location, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Right to Portability: Request your data in a commonly used, machine-readable format.
• Right to Opt-Out: Unsubscribe from marketing communications at any time via the link in any email we send.
• Right to Restrict Processing: Request restriction of processing in certain circumstances.

To exercise any of these rights, please contact us at support@pixelmax.art. We will respond to your request within 30 days.

Your information may be transferred to and processed in countries other than your country of residence, including the United States where our infrastructure and service providers are located. We rely on appropriate safeguards for international transfers, including Standard Contractual Clauses where required. By using our Service, you consent to the transfer of your information to these countries.

Our Service is not intended for users under 13 years of age (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@pixelmax.art, and we will promptly delete such information.

We use cookies and similar technologies to provide and improve our Service:

• Essential Cookies: Required for authentication, session management, and core functionality of the Service.
• Functional Cookies: Remember your preferences such as theme settings (light/dark mode).
• Analytics Cookies: Help us understand how users interact with the Service to improve it. Analytics data is aggregated and anonymized.

You can manage or disable cookies through your browser settings. Disabling essential cookies may affect your ability to use certain features of the Service.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will notify you by email (if you have an account) or by posting a prominent notice on our website. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 30 days.