Privacy Policy
What we collect, why we collect it, who else sees it, and how to make it go away.
Last updated 9 August 2026
The short version
- We collect your email, what you type into prompts, and what you generate.
- We do not train models on any of it.
- We do not sell it, and we do not run advertising.
- Deleting your account deletes your work. Really — including from backups.
- We never see your card details. Polar Software, Inc. handles payment.
Who is responsible
We are the data controller for the personal data described here. For privacy questions or to exercise any right below, write to support@pixelite.art.
What we collect, and why
| Data | Why | Lawful basis |
|---|---|---|
| Email address | To identify your account, confirm it is yours, and send receipts and service notices | Performance of a contract |
| Password (hashed) | To let you sign in. We never store it in a readable form | Performance of a contract |
| Prompts you write | To generate what you asked for, and to investigate abuse and copyright complaints | Contract; legitimate interests |
| Images you upload as references | To guide generation, and to keep your ownership statement on record | Contract; legitimate interests |
| Generated assets and their quality reports | So your work is there when you come back, and so we can refund failures | Performance of a contract |
| Credit ledger | An auditable record of every credit bought, spent and refunded | Contract; legal obligation (accounting) |
| Basic technical logs | Keeping the service up, finding bugs, spotting abuse | Legitimate interests |
We do not run advertising or third-party analytics that profile you, and there are no tracking cookies. The only cookie we set keeps you signed in.
Training — the plain answer
Your prompts, uploads and generated assets are not used to train any model. Not ours, not anyone else's. We do not sell or share them for that purpose.
What we do keep in aggregate is whether generations passed or failed our quality checks, which tells us where the pipeline is weak. That is a pass/fail count, not your artwork and not your words.
If that ever changes it will be opt-in, announced in advance, and off by default. A pre-ticked box in a quietly updated policy is not consent.
Who else sees your data
| Who | What they get | Why |
|---|---|---|
| Retro Diffusion | Your prompt and any reference image, at generation time | They run the model that draws the art. They are bound by their own terms; we do not send them your identity. |
| Polar Software, Inc. | Your email, billing country and payment details | Merchant of record. They take the payment and handle tax. We receive confirmation that you paid, never your card number. |
| Our hosting and database providers | Everything, as stored | They run the servers. Bound by data-processing agreements. |
We do not sell personal data. We will disclose it if legally compelled, and where we are permitted to tell you, we will.
Where your data lives
Our providers operate internationally, so your data may be processed outside your country, including in the United States. Where that involves personal data from the UK or EEA, transfers rely on Standard Contractual Clauses or an adequacy decision.
How long we keep it
- While your account is open: your projects and assets stay until you delete them.
- After you close your account: 90 days, so the decision is reversible, then deletion.
- Deletion reaches backups within 30 days. We say this specifically because "deleted" often means "hidden".
- Transaction records are kept for as long as tax law requires, typically six to seven years. We cannot delete these on request; they are an accounting obligation.
Your rights
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or hand it to another provider. You can also withdraw consent where we relied on it.
Write to support@pixelite.art. We will respond within 30 days. There is no charge, and we will not ask why.
You can export everything yourself at any time from the studio — every project downloads as an engine-ready folder — so you are never waiting on us to leave.
If you think we have handled your data badly, please tell us first. You also have the right to complain to your local data protection authority.
Security
Passwords are hashed. Traffic is encrypted in transit. Access to production data is limited to what is needed to run the service. Every request is scoped to your account at the database level, not just in application code.
No service is perfectly secure. If we suffer a breach affecting your personal data we will notify you and the relevant regulator as the law requires, and we will say what actually happened.
Children
This service is not for children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, write to support@pixelite.art and we will delete it.
Changes
If we change this policy materially we will email you at least 30 days beforehand. The date at the top always reflects the current version.
See also the Terms of Service and the Asset Licence.