PixPix Privacy Policy

Effective Date: June 1, 2026

1. Introduction

Lucky Days Co. LTD (operating the PixPix service, hereinafter "we", "us", or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our services, including our website at pixpix.com and related platforms (collectively, the "Services").

By using the Services, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information

• Account Information: When you create an account, we collect your name, email address, password (encrypted), and other registration details.
• Payment Information: When you purchase a subscription or credit pack, we collect billing information (name, email, country, postal code) and transaction records. All payment processing is handled by Stripe, Inc., which supports cards, Alipay, WeChat Pay, and other regional payment methods. We do not store your full credit/debit card numbers on our servers. Stripe's handling of your payment information is governed by its own Privacy Policy.
• User-Generated Content: We store the images, videos, text prompts, and other content you create or upload to the Services, as well as the AI-generated outputs. Prompts are used solely to generate outputs requested by you and are not used to infer personal characteristics or train our models without your explicit consent (see Section 3.4).
• Usage Information: We collect information about how you use the Services, such as the features you access, the content you view or interact with, the actions you take, your device type, operating system, browser type, IP address, and timestamps of your activities.
• Communication Information: If you contact us through email, chat, or other channels, we collect the information you provide, including your name, contact details, and the content of your inquiries.

2.2 Other Information We Collect

• Analytics and Performance Data: We use analytics tools to collect information about the performance of the Services, such as page load times, error rates, and traffic sources. Some of this information may be considered personal data under applicable law depending on jurisdiction.
• Device and Connection Information: We collect additional technical information about your device, including operating system version, network type, and connection information, to optimize the Services. Some of this information may be considered personal data under applicable law depending on jurisdiction.

3. How We Use Your Information

3.1 Provide and Improve the Services

• Create and manage your account;
• Deliver features and functionality you request;
• Process payments and manage subscriptions;
• Store and retrieve your projects and generated content;
• Understand how you interact with the Services and develop improvements.

3.2 Communication

• Send important service updates, announcements, and administrative messages;
• If you opt in, send marketing communications, newsletters, and product promotions. You can unsubscribe at any time via the link in any email.

3.3 Analytics and Research

• Analyze usage patterns and trends, using usage information and analytics data collected under Section 2;
• Measure the effectiveness of our marketing;
• Research, test, and evaluate new features, products, and services.

3.4 AI Model Training

We do not use your user-generated content or prompts to train our own AI models, unless you explicitly opt in. Third-party AI model providers we work with have their own data usage policies; see Section 5 for details.

3.5 Legal Compliance and Security

• Comply with applicable laws and legal processes;
• Protect against fraud, abuse, and unauthorized access;
• Enforce our Terms of Use.

3.6 Aggregated and De-Identified Data

We may aggregate or de-identify personal information so that it can no longer reasonably identify you. We use such information for the purposes described in this Privacy Policy, including analyzing usage trends, improving or adding features, and conducting research. Such aggregated or de-identified data is not subject to this Privacy Policy.

4. Cookie Policy

4.1 Essential Cookies

Required for the proper functioning of the Services, such as authentication and session management.

4.2 Analytics Cookies

Help us analyze how you use the Services (e.g., Google Analytics) and improve their performance.

4.3 Advertising Cookies

Used to promote PixPix on external platforms such as Google, Meta (Facebook), and Microsoft. These cookies help us measure the success of our advertising and refine ad relevance.

4.4 Third-Party Integration Cookies

We use cookies for affiliate tracking (to attribute referrals) and social media features (to enable sharing to social platforms).

4.5 Managing and Clearing Cookies

Most browsers provide functionality to clear browser cache data. You can perform the corresponding data clearing operation in your browser settings. If you clear this data, you may not be able to use services or features that rely on cookies. You can control cookie preferences through your browser settings or our cookie consent banner.

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

We share your information with third-party providers who help us operate the Services. These providers are contractually obligated to protect your information and use it only for the purposes for which it was shared. Current providers include:

Infrastructure & Hosting: Amazon Web Services (AWS), Cloudflare
Payment Processing: Stripe
AI Model Providers: Google (Gemini / Nano Banana), OpenAI (GPT Image), Anthropic, Alibaba Cloud (Qwen series), ByteDance (Seedream / Doubao), Replicate, fal.ai, ElevenLabs
Analytics: Google Analytics
Email & Communication: SendGrid or equivalent
Customer Support: Intercom or equivalent

5.2 Legal Requirements

We may disclose your personal information if required by law, regulation, or legal process, or to protect our rights, property, or safety.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of any such transfer.

5.4 With Your Consent

We may share information with other parties with your explicit consent.

5.5 Exceptions: Sharing Without Prior Authorization

In the following circumstances, we may share or disclose your personal information without obtaining your prior consent, to the extent permitted by applicable law:

• When necessary to fulfill our obligations under applicable laws and regulations;
• When directly related to national security or public safety;
• When directly related to criminal investigation, prosecution, trial, or enforcement of judgments;
• When necessary to protect your or another person’s life, property, or other significant legal interests, but it is difficult to obtain consent;
• When the personal information has already been made public by you;
• When the personal information is collected from legally and publicly disclosed sources, such as legal news reports or government information disclosures;
• In other circumstances stipulated by applicable laws and regulations.

6. GDPR Compliance (European Users)

If you are a resident of the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the GDPR, including:

• Right to Access: Request a copy of personal information we hold about you;
• Right to Rectification: Request correction of inaccurate data;
• Right to Erasure: Request deletion of your personal information ("right to be forgotten");
• Right to Restrict Processing: Request that we limit how we use your data;
• Right to Data Portability: Receive your data in a portable format;
• Right to Object: Object to specific types of processing (e.g., marketing);
• Right to Withdraw Consent: Withdraw previously given consent at any time.

To exercise these rights, contact us at support@pixpix.com. We will respond within fifteen (15) business days after receiving your request and verifying your identity.

6.1 Withdrawing Authorization and Consent

You may grant or withdraw your authorization and consent for non-essential data processing at any time. You can do so by:

• Disabling camera, microphone, storage permissions, or network authorization in your device’s system settings;
• Adjusting your preferences through our cookie consent banner or in-app settings;
• Contacting us directly at support@pixpix.com.

When you withdraw your consent, we will no longer process the corresponding personal information. However, withdrawal will not affect any processing that was lawfully carried out prior to the withdrawal.

6.1 Lawful Basis for Processing (GDPR)

Where the GDPR or other data protection laws apply, we must establish a lawful basis before processing your personal information. Depending on the specific circumstances, we process personal information on one or more of the following bases:

• Performance of a Contract. We process personal information as necessary to enter into, perform, and manage the Terms of Service with you. This includes creating and managing your account, providing core services, processing payments, and responding to service-related inquiries.
• Consent. Where required by law or for optional features, we will obtain your consent — for example, for marketing emails or access to specific device data. You may withdraw your consent at any time through your settings or by contacting us. Withdrawal will not affect data processing that has already occurred.
• Legal Obligation. We process personal information to comply with legal and regulatory requirements, such as tax rules, responding to lawful requests from public authorities, or verifying identity as required by applicable law.
• Legitimate Interests. We process personal information as necessary to pursue our legitimate interests, provided these are not overridden by your rights and freedoms. Relevant interests include: safeguarding platform security and privacy, preventing fraud and abuse, optimizing service functionality, and supporting internal data analysis.
• Vital Interests. In rare cases, we may process personal information to protect an individual’s vital interests, for example, in response to a safety emergency.
• Legal Claims. We may process relevant personal information as necessary to assert or defend legal rights, manage disputes, or protect the rights of ourselves, our users, or the public.

6.2 Data Retention under GDPR

• Account-related information: Retained for the duration of your account and up to 7 years after closure, to comply with tax, accounting, and legal requirements.
• Payment records: Retained for 7 years for tax and audit compliance.
• User-generated content: Retained for the duration of your account. Deleted within 30 days after account closure.
• Usage and analytics data (page load times, error rates, traffic sources): Retained for 26 months (standard analytics retention).
• Activity logs (timestamps, IP address, device and browser information): Retained for 13 months, then deleted or anonymized.
• Communication records: Retained for 3 years from the date of the last communication.

6.3 Data Transfers Outside the EEA

We may transfer your personal data outside the EEA. When we do, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection.

7. CCPA Compliance (California Residents)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request what personal information we collect, use, and share about you;
• Right to Delete: Request deletion of personal information (with certain exceptions);
• Right to Correct: Request correction of inaccurate personal information;
• Right to Opt-Out: Opt out of the "sale" or "sharing" of your personal information;
• Right to Limit Use: Limit the use of sensitive personal information;
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

We do not sell your personal information for monetary consideration. However, certain data sharing with advertising partners may be considered "sharing" under CCPA. You can opt out through our cookie consent banner or by emailing support@pixpix.com.

8. Other US State Privacy Laws

We also comply with applicable state privacy laws in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other US states with comparable laws. Residents of these states have rights similar to those under CCPA. Contact us to exercise these rights.

9. Data Security

We implement reasonable security measures to protect your personal information, including:

• Encryption in transit (TLS/HTTPS) and at rest;
• Access controls and authentication;
• Regular security audits and vulnerability assessments;
• Employee training on data protection;
• Incident response procedures.

However, no security system is 100% secure. We cannot guarantee absolute security of your personal information. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

9.1 Security Limitations and Exemptions

To the extent permitted by applicable law, we are not liable for leakage of your information and resulting damages caused by circumstances beyond our reasonable control, including but not limited to:

• Leakage, loss, theft, or alteration of personal data caused by force majeure events that affect the normal operation of the network, such as hacker attacks, computer virus intrusions, or temporary shutdowns due to government regulations;
• Leakage of personal data caused by linking to third-party websites or receiving services from third parties while using our Services, and any resulting legal disputes and consequences;
• Improper operation by the user or use of the Services through unauthorized methods.

9.2 Service Termination and Data Handling

If we terminate our Services or cease operations, we will notify you at least thirty (30) days in advance through an announcement or other reasonable and effective means. We will delete or anonymize your personal information after the termination of Services or operations, unless otherwise required by applicable law.

10. Children's Privacy

The Services are not intended for use by individuals under the age of 13 (United States) or 16 (European Economic Area). We do not knowingly collect personal information from children under the applicable age.

10.1 Note to Guardians

If you are the parent or guardian of a minor user, please carefully read this Privacy Policy and decide whether to agree to it on the minor’s behalf. We hope you will join us in protecting children’s personal information by educating and guiding them to enhance their awareness of data protection, and by instructing them not to provide any personal information to any product or service provider without your consent.

10.2 Note to Minors

If you are a minor under the age of 13 (or the corresponding minimum age in your jurisdiction), please read this Privacy Policy carefully together with your parent or guardian and obtain their consent before using our Services or submitting any personal information. Otherwise, please stop using the Services.

10.3 Removal of Children’s Data

If we become aware that we have collected personal information from a child under the applicable age, we will delete the information as soon as possible. If you believe a minor has provided us with personal information, please contact us at support@pixpix.com.

11. Content Rights and Liability

11.1 Content Ownership

Subject to your compliance with our Terms of Use, you retain full ownership of the content you generate using PixPix. You may use, modify, distribute, and commercialize such content without restriction or attribution to PixPix.

We do not claim any ownership over AI-generated content produced from your inputs. However, you acknowledge:

• Similar or identical outputs may be generated by other users using similar inputs;
• AI-generated content may reflect styles or elements from training data;
• We cannot guarantee the uniqueness, copyrightability, or IP status of generated content in all jurisdictions.

11.2 Legal Considerations for AI-Generated Content

The legal status of AI-generated content varies by jurisdiction. We recommend consulting a legal professional to understand your rights in your specific region, particularly for commercial use.

11.3 User Liability

If your content or inputs infringe on the rights of others, you are solely responsible for such infringement. This includes any claims arising from the inputs you provide to PixPix, the combination of your input with generated content, or the use of generated content in violation of third-party rights.

12. Account Suspension and Appeal

12.1 Circumstances for Account Suspension

We reserve the right to suspend or freeze your account if we detect:

• Violation of Terms of Use: Including unauthorized access, inappropriate content, or commercial misuse.
• Suspected Fraudulent Activity: Including payment fraud, chargeback fraud, or account manipulation.
• Legal or Regulatory Violations: Use of the Services for illegal purposes.

12.2 User Remedies After Account Suspension

Notification: When your account is suspended, you will see a notification when attempting to access the Services. The notification may not disclose specific reasons for security purposes.

Appeal Process:

• You may submit an appeal within 14 days of the suspension notification.
• Send an email to support@pixpix.com with:
  
  • Your account ID or registered email address;
  • A detailed explanation of why you believe the suspension is incorrect;
  • Any supporting evidence (receipts, communication records, etc.).
• Our team will review your appeal within 7 business days and respond via email.

Re-evaluation:
If you are unsatisfied with the appeal outcome, you may request re-evaluation within 14 days by sending an email to support@pixpix.com with a brief statement explaining why. A final decision will be provided within 7 business days.

13. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or industry standards. When we make changes, we will:

• Post the updated version on our website with a new "Last Updated" date;
• For material changes, notify you by email or in-product notification at least 30 days before the changes take effect.

Your continued use of the Services after the effective date constitutes acceptance of the changes.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us at:

Email: support@pixpix.com
Company: Lucky Days Co. LTD
Address: 100 N Howard St, Ste R, Spokane, WA 99201, United States

For EEA residents, you may also have the right to lodge a complaint with your local data protection authority.

We will respond to your request within fifteen (15) business days after receiving it and verifying your identity.