Privacy Policy

• Controller: the independent developer who operates PixJelly.
• Privacy contact: hello@pixjelly.com
• Data Protection Officer: not applicable.

2.1 Information you provide

• Google sign-in: when you sign in with Google we receive your Google account ID, email address, name and profile picture. Our database stores only the Google account ID. Your name, email and picture are kept in an encrypted session cookie on your device so we can show who is signed in; we do not store them in our database.
• Images and instructions: the photos you add, the marks and text you draw on them, and the prompts you write. What happens to them depends on the tool — see Section 3 and Section 5.
• Feedback: the message you send through the in-app Feedback form (up to 500 characters), an optional contact email, and the page you sent it from. Our replies are stored with it.
• Payment information: when payments are enabled, purchases are processed by our merchant of record, Waffo Pancake. We receive the order and transaction details (product, amount, status, order ID) but never your full card number — card data is handled by Waffo Pancake and is not stored on our servers.

2.2 Information we collect automatically

• Credit ledger: your credit balance and a record of each generation request (request ID, model, cost, status and time) so that credits are charged correctly and refunded when a request fails. The images themselves are not part of this record.
• First visit source: the first time you visit, we store in a cookie where you came from — the referring website’s domain (for example chatgpt.com or google.com), any utm_source / utm_medium / utm_campaign tags in the link, the page you landed on and the time. We keep only the domain and the page path, never full URLs, and no other link parameters. If you later sign in, this source is saved with your Google account ID.
• Free AI edits without signing in: if you use AI redraw or the annotate editor without signing in, we count uses per day using a keyed hash (HMAC) of your IP address and of a random browser ID stored in your browser. We never store your raw IP address for this purpose. While you wait in the free queue we keep a record of your place: the two hashed keys, the tool, and when you joined, were last seen and started.
• Bot check: before a free AI edit without signing in, Cloudflare Turnstile runs a check in your browser and we confirm the result with Cloudflare. We keep whether the check passed, any error codes and the hashed IP key; we do not keep the check token or your raw IP address.
• Server and security logs: our hosting provider records technical request data such as IP address, user agent, time and the page or API requested. We also limit how many generation requests one IP address can make per hour, using a short-lived in-memory counter.
• Analytics: we use Vercel Web Analytics to count page views, referrers and campaign tags. It does not use cookies.
• Safety check records: every request that runs on our servers is checked by an automated content safety system (Section 3). For each check we keep a record with a one-way hash of the prompt or image, the safety scores, the decision, the time and, if you are signed in, your Google account ID. We do not keep the prompt text or the image in these records.

Some tools never send your photo to us. Free background removal, White Background and Quick erase run entirely in your browser: the model files are downloaded to your device and your photo stays there.

Other tools need a server. Image editing, Text to Image, Image to Image, AI redraw and the Standard and HD background removal tiers send your image and instructions to the providers listed in Section 5 to produce the result.

Before a server-side request starts, we send your prompt (including any text you add to the image) and each photo you upload to OpenAI’s moderation model; before a result is delivered, we send the result image too. If something does not pass, the request is not started, or the result is not delivered and its credits are refunded.

We do not use your images, prompts or results to train AI models. What our providers say about training (their published terms, checked October 24, 2026):

• KIE, which runs the image models on our behalf, does not publish a training policy. Its terms give it a licence to use submitted content to operate and improve its service, and it does not say which model provider terms apply to the requests it sends.
• OpenAI does not train on data sent to its moderation endpoint, which we call directly.
• For API customers, OpenAI does not train on API data by default; Recraft does not use API content for training; ByteDance’s BytePlus ModelArk does not use customer content to train its models without the customer’s authorisation; and Google does not use content sent to its paid Gemini API to improve its products. For models run through KIE, KIE is the customer of these providers, not us.
• Photoroom’s privacy policy and API documentation say images sent through its API are not used for training. Its security page says images from self-serve API accounts may be used for training unless the account opts out in its settings.
• Vercel, our hosting provider, does not use our data for AI training on our plan.
• Cloudflare uses the signals collected by Turnstile (such as IP address, TLS fingerprint and user agent, not your images) to improve its bot detection, acting as an independent controller for that purpose.

We may produce aggregated or anonymized statistics that cannot be linked to you.

Signing in with Google One Tap loads Google’s sign-in script, which is subject to Google’s privacy policy (https://policies.google.com/privacy).

Analytics tools in use: Vercel Web Analytics, which does not set cookies (https://vercel.com/docs/analytics/privacy-policy). We do not use advertising or marketing cookies.

You can delete or block cookies and site data in your browser settings. Blocking strictly necessary cookies will prevent you from signing in.

We do not sell your personal information, including as “sale” is defined under laws such as the CCPA, and we do not share it for cross-context behavioural advertising.

We share information only with service providers that help us run the Service, under confidentiality and data-processing terms:

Retention by providers, as each one publishes it (checked October 24, 2026): KIE deletes uploaded files after 24 hours and keeps generated files for 14 days and logs for 2 months. Photoroom discards results of the HD background removal call once they are returned, and keeps operational logs for 15 days and API access logs for 1 year. Recraft deletes API results within 24 hours. OpenAI keeps abuse-monitoring logs for image requests for up to 30 days and does not keep content sent to its moderation endpoint. Google keeps Gemini API prompts and outputs for up to 55 days for abuse monitoring. BytePlus keeps inputs and outputs flagged by its content filter for 180 days. For models run through KIE, these model provider periods apply to KIE’s account with them.

We may also disclose information when required by law, court order or a lawful request from authorities; in connection with a merger, acquisition or sale of assets, with advance notice and continued protection; or with your explicit consent.

• All traffic to the Service is encrypted with HTTPS / TLS.
• Sign-in sessions are stored in encrypted, HTTP-only cookies. We never see or store your Google password.
• Provider credentials stay on our servers and are never exposed to the browser. Database access is limited to our server, with row-level security enabled and public access revoked.
• Free-use counters store keyed hashes, not raw IP addresses.

If a security incident affects your rights, we will notify you and the relevant authorities within 72 hours of discovery where required by law.

To exercise any of the rights below, email hello@pixjelly.com from the address linked to your Google account. We respond within 30 days.

You can also lodge a complaint with your local data protection authority.

We do not send marketing emails or messages. If we ever start, we will ask for your consent first, include an unsubscribe link in every message, and keep essential service notices (billing, security, policy changes) separate.

Our database is hosted by Supabase in India (AWS region ap-south-1). Our website and server functions are hosted by Vercel, with server functions in Washington, D.C., United States (Vercel region iad1). The providers in Section 5 process data in these locations, as they publish them: KIE may transfer data to the United States and other countries; Google may process data in any country where it has facilities; OpenAI does not specify a location by default; BytePlus (Seedream) processes data in Malaysia, Indonesia and/or the EU/EEA; Recraft processes data in the United States and the countries of its vendors; Photoroom processes data in the United States; Cloudflare runs Turnstile on its global network.

Where personal information is transferred across borders, we rely on the data processing terms of our providers. Vercel’s Data Processing Addendum, which includes the EU Standard Contractual Clauses and the UK Addendum, applies to our plan, and OpenAI’s Data Processing Addendum, with the same clauses, covers the moderation checks we send to OpenAI directly. Google, OpenAI, BytePlus and Recraft publish data processing agreements that include the Standard Contractual Clauses; for models run through KIE they apply between those providers and KIE. Cloudflare publishes a customer data processing agreement that includes the Standard Contractual Clauses and the EU–US Data Privacy Framework. KIE does not publish a data processing agreement, and Photoroom offers one only to enterprise customers. If you have questions about a specific transfer, contact us.

The Service is intended for users aged 18 and above. We do not knowingly collect personal information from children below that age. If you believe a child has given us information, contact us and we will delete it promptly.

The Service links to, and integrates with, third-party services such as Google sign-in and the Waffo Pancake checkout. This Policy covers only information we collect. Please review those services’ own privacy policies.

For material changes we will give at least 30 days’ notice by a notice on the site or by email, and update the date at the top of this page. Continued use after the effective date means you accept the updated Policy.

• Privacy and support: hello@pixjelly.com
• We reply to emails within 2 business days.

This Privacy Policy is provided for transparency and does not constitute legal advice.