Privacy Policy

1. Who we are

PixelPrompt ("we", "us", "our") operates the website imageprompt.cloud and provides AI-powered image-to-prompt generation services. For privacy-related enquiries, contact us at elaboussi.ayoub@gmail.com.

2. What data we collect

We collect the following categories of personal data:

• Account data — your email address and name, collected when you sign up via Clerk.
• Usage data — records of when you use our tools, stored to enforce plan limits. We store timestamps and tool identifiers, never the content of your prompts.
• Billing data — subscription status, plan ID, and billing dates. Payment card details are handled exclusively by Lemon Squeezy and are never stored on our servers.
• Technical data — IP address, browser type, and access logs, collected automatically by our hosting provider (Vercel).

3. How we use your data

We use your data to:

• Provide and operate the PixelPrompt service
• Enforce plan-based usage limits
• Process payments and manage subscriptions
• Send essential transactional emails (receipts, subscription confirmations)
• Detect and prevent abuse or fraudulent activity
• Comply with legal obligations

We do not use your data for advertising, profiling, or sell it to third parties.

4. Content you submit

Images and text inputs you submit are processed transiently in memory solely to generate prompts. They are never stored, logged, retained, shared with third parties, or used to train any AI model. Once the prompt is generated, all submitted content is discarded immediately.

5. Third-party services

We use the following third-party services to operate PixelPrompt:

• Clerk — authentication and user management. Privacy policy at clerk.com.
• Supabase — database hosting (EU region). Privacy policy at supabase.com.
• Vercel — hosting and infrastructure. Privacy policy at vercel.com.
• Lemon Squeezy — payment processing and subscription management. Privacy policy at lemonsqueezy.com.
• Cloudflare — AI inference infrastructure. Privacy policy at cloudflare.com.

Each of these providers processes data in accordance with their own privacy policies and applicable data protection law.

6. Legal basis for processing (UK GDPR)

We process your personal data on the following legal bases:

• Contract — processing necessary to provide the service you signed up for.
• Legitimate interests — fraud prevention, security, and service improvement.
• Legal obligation — compliance with applicable UK law.

7. Data retention

We retain your account data for as long as your account is active. Usage records are retained for 13 months to support billing disputes and plan enforcement. If you delete your account, we delete your personal data within 30 days, except where retention is required by law.

8. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, email us at elaboussi.ayoub@gmail.com. We will respond within 30 days.

9. Cookies

We use only essential cookies required for authentication (set by Clerk). We do not use tracking, advertising, or analytics cookies. No cookie consent banner is required as we only use strictly necessary cookies.

10. International transfers

Some of our third-party providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions recognised by the UK ICO.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice on the website. The "last updated" date at the top of this page reflects the most recent revision.

12. Contact

For any privacy-related questions or requests, contact us at elaboussi.ayoub@gmail.com.