Privacy Policy

1. Information We Collect

When you use Repixly, we collect information necessary to provide and secure our image generation platform:

• Account Information: Email address provided during registration or OAuth sign-in via Google / Supabase Auth.
• Uploaded Images & Prompts: Images uploaded for transformation and text prompts used to guide AI generations. Uploaded files from guest sessions are automatically purged within 24 hours.
• Technical & Anti-Abuse Signals: Client IP address, browser hardware attributes (device fingerprint hash), and authentication tokens used strictly to prevent bot abuse and protect free GPU capacity.

2. How We Use Your Data

We use collected information solely to:

• Process your image-to-image transformations using optimized neural models.
• Maintain your account balance, transaction history, and milestone credits.
• Protect our community infrastructure from automated scrapers and abuse.
• We NEVER sell your personal photos or use your uploaded images to train public foundational AI models without consent.

3. Third-Party Service Providers

We collaborate with trusted infrastructure partners:

• Supabase: Encrypted user authentication, database management, and email verification delivery.
• Payment Processors (Waffo): Secure, PCI-DSS compliant checkout and subscription handling. We never store raw credit card numbers on our servers.
• Cloudflare: DDoS mitigation, global edge caching, and secure content delivery.

4. Your Rights (GDPR & CCPA)

You have the right to request access to your stored personal data, request correction of inaccurate records, or request complete deletion of your account and associated history. To exercise any of these rights, email us at privacy@repixly.ai.

5. Data Retention & Security

All data transmitted to and from Repixly is encrypted in transit using SSL/TLS 256-bit encryption. Temporary generation artifacts are stored in encrypted cloud storage and automatically cleared according to our retention lifecycle.