Privacy Policy

01Your images

Uploaded images are processed entirely in memory. When you submit a photo, it is received by our servers over an authenticated, encrypted connection, enhanced, and returned to your browser. At no point is it written to disk, saved to a database, or placed in object storage or a CDN.

Your images are never used to train AI models — not by us, and not as part of how we call our AI provider. Once the enhanced result has been returned to you (or a request fails), the original and the result are discarded from memory. We also never log image content.

Because nothing is stored, we cannot recover an image or a result after your request completes. If you want to keep an enhanced photo, download it when it is shown to you.

02Processing by Google Gemini

To generate the enhanced result, your image is transmitted to Google’s Gemini API for the duration of the processing request. Google acts as our processing subprocessor for this single purpose, and the transfer happens over an encrypted connection. The API credentials involved are held server-side only and are never exposed to your browser.

Google’s handling of data submitted to the Gemini API is governed by Google’s own API terms and privacy documentation, which we encourage you to review.

03Information we collect

Account data. When you create an account we store your email address and a bcrypt hash of your password — we never store the password itself. If you enable two-factor authentication, we also store the TOTP secret required to verify your codes.

Job metadata. For each enhancement job we retain metadata only: timestamps, input and output byte counts, and the job’s status. This metadata never includes image content and cannot be used to reconstruct an image. We use it to operate the service, enforce fair-use limits, and investigate failures.

Order metadata. When you purchase access we receive order details from our payment provider — such as the order identifier, the product purchased, and its status — so we can activate your access. We never receive your full payment details.

04Payments

Payments are handled by Lemon Squeezy, our merchant of record. Lemon Squeezy processes your payment information (card details and billing data) under its own terms and privacy policy; that information never touches our servers. We receive only the order metadata described above.

05Cookies & local storage

We use strictly necessary cookies only: JWT session cookies that keep you signed in after you log in. They are essential for the service to function and are not used to track you.

Your theme preference (light or dark) is stored in your browser’s localStorage and never leaves your device.

We do not use advertising cookies, cross-site trackers, or third-party marketing pixels.

06Email

We send transactional email only — for example, the verification message when you sign up and password-reset links when you request them. These are delivered via SMTP. We do not send advertising email and we never share your address with marketers.

07What we never do

A few commitments that shape how the service is built:

• We never store your images — on disk, in a database, or in any object storage.
• We never use your images or your results to train AI models.
• We never sell or share your personal data with third parties for their own purposes.
• We never show ads on the service.

08Data retention & deletion

Account data and job metadata are kept for as long as your account exists. To delete your account and the personal data associated with it, email support@pixelyft.com from your account’s email address and we will action the request within a reasonable period. Records our merchant of record is legally required to keep (such as tax and order records) are retained by Lemon Squeezy according to its own policies.

09Security

We apply reasonable technical measures to protect your data: passwords are stored as bcrypt hashes, AI provider keys are kept server-only, all traffic is encrypted with HTTPS, and image processing endpoints require authentication. No online service can promise absolute security, but the service is designed so that the most sensitive thing you give it — your photos — is never retained at all.

10Changes to this policy

We may update this policy as the service evolves. When we do, we will change the date at the top of this page, and for material changes we will give you notice by email or an in-product message. Continuing to use the service after a change takes effect means you accept the updated policy.