Privacy Policy

Information we collect

When you create an account, we store your email address, a salted and server-peppered password hash, a keyed digest of your current recovery code, account sessions, credit activity, projects, favorites, prompts, generation history, and service settings. We never store your plain-text password or recovery code.

Prompts and generated images

Prompt text is sent to a contracted image-generation provider to create your requested result. Generated image files are copied into PromptPixLab-controlled storage and associated with your account or signed browser wallet. During public beta, generated images and their history may expire after 14 days; production retention may vary by plan and storage policy.

Do not submit secrets, highly sensitive personal data, or content you do not have the right and consent to use.

Payments

Creem acts as the payment and Merchant of Record provider. PromptPixLab receives transaction, customer, product, subscription, refund, and dispute identifiers needed to maintain credits and access. Payment card details are collected and handled by the payment provider and its payment processors, not by PromptPixLab.

Infrastructure and analytics

We use Cloudflare for hosting, database, storage, security, and delivery. We may collect request metadata, coarse location, device/browser information, error logs, page visits, and product interaction events. Analytics must not include passwords, payment card details, image bytes, or full prompt text.

How we use information

We use information to operate accounts, generate and deliver images, maintain credit balances, process subscriptions, prevent fraud and abuse, respond to support requests, improve reliability, and comply with legal obligations. When a prompt is blocked by automated safety checks, the safety audit stores keyed digests rather than the rejected prompt text.

Retention and deletion

Account data remains while your account is active or as needed for security, disputes, tax, and legal obligations. You can download an account export or permanently delete your account from Account settings. Payment providers may retain transaction records under their own legal obligations even after PromptPixLab account deletion.

Security

We use HTTPS, HttpOnly signed session cookies, server-side secrets, password hashing, rate limits, signed payment webhooks, and account-scoped image access. No online service can guarantee absolute security.

Children

PromptPixLab is not intended for children under 18. Do not create sexualized, exploitative, deceptive, or non-consensual content involving minors or ambiguous ages.

Contact

Privacy, access, export, or deletion questions can be sent to contact@promptpixlab.com.