Privacy Policy

PXL Creator (“we”, “us”, “our”) is operated by Swayam Oberoi, based in Mumbai, Maharashtra, India. Our website is located at pxlcreator.space. We offer Lightroom presets, digital preset bundles, educational courses, and an AI-powered studio feature for photographers and content creators.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and store it, and your rights in relation to it. PXL Creator is not currently registered for GST in India.

When you visit our website, create an account, or make a purchase, we collect:

• Account information — your name and email address, collected when you register with email and password or sign in with Google via Firebase Authentication. Your Firebase UID is stored alongside your profile in our Supabase database.
• Purchase information — your order details, the products purchased, the amounts paid (in INR or USD), Razorpay order IDs, payment IDs, and transaction timestamps. Card numbers, UPI handles, and other payment credentials are processed exclusively by Razorpay and are never transmitted to or stored on our servers.
• Download and access data — which products you have purchased or unlocked, your download token records (including download counts and expiry dates), and your subscription status.
• Images submitted to AI Studio— images you upload to the AI Studio feature are resized and transmitted to OpenAI for colour analysis. Neither your original image nor the processed output is stored on our servers beyond the duration of your session. See Section 8 for more detail.
• Community content — if you use the community features (posts, comments, messages, project submissions, team participation), that content is stored in our database and associated with your account.
• Support communications — emails you send to creatorpxl@gmail.com, including any order details, screenshots, or other information you include.
• Browser storage — we store your shopping cart contents (pxl-cart) and your preferred display currency (pxl-currency) in your browser's localStorage. This data stays on your device and is not transmitted to our servers.

We do not use Google Analytics, Meta Pixel, or any third-party advertising or tracking scripts.

We use the information we collect to:

• Authenticate your account and maintain secure login sessions
• Process and fulfil your orders, including generating and delivering download links
• Activate and manage subscription access
• Send transactional emails — purchase receipts and support replies
• Deliver AI-powered preset recommendations via the Studio feature
• Send newsletter updates — only if you have explicitly opted in
• Provide and moderate community features
• Detect and prevent fraudulent transactions or platform abuse
• Comply with applicable legal obligations including tax and accounting requirements

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.

We use the following storage mechanisms:

• Firebase Authentication session cookies — set automatically by Firebase to maintain your logged-in state across browser sessions. These are essential for account access and cannot be disabled without logging out.
• Supabase session storage — used by our database client to maintain your authenticated API session. Essential for accessing your account, purchases, and downloads.
• localStorage: pxl-cart — stores your shopping cart locally on your device so items persist if you close the browser tab. Not transmitted to our servers until checkout.
• localStorage: pxl-currency — stores your preferred display currency (INR or USD). Not transmitted to our servers.

We do not use advertising cookies, third-party tracking cookies, or analytics cookies. For full details, see our Cookie Policy.

Your account and purchase data is stored in Supabase (PostgreSQL), hosted on servers in the European Union and/or the United States. Authentication and identity management is handled by Firebase (Google). Our website is hosted on Vercel.

All data transmitted between your browser and our servers is encrypted using TLS/SSL. Access to personal data within our systems is restricted to authorised personnel only, protected by row-level security policies in Supabase and Firebase Admin SDK token verification for server-side operations.

While we implement industry-standard security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

We retain your account information, order history, payment transaction records, download access records, and related data for up to 5 years from the date of collection or your last transaction. This retention period is necessary for:

• Tax and accounting compliance — records required under Indian financial regulations
• Fraud prevention — maintaining a history to detect and investigate fraudulent activity
• Customer support — verifying historical purchases for download link renewals and account queries
• Legal compliance — responding to lawful requests from courts or regulatory authorities

If you request deletion of your account, we will delete or anonymise your personal identifiers (name, email address) within 30 days. Order and payment records may be retained in anonymised form for the remainder of the 5-year period to satisfy legal and accounting obligations.

Community content you have posted (posts, comments, messages) will be deleted or anonymised upon an account deletion request unless required by law to be retained.

You have the following rights in relation to your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate or incomplete data
• Deletion — request deletion of your account and personal data, subject to retention requirements in Section 6
• Restriction — request that we stop or limit processing of your data in certain circumstances
• Portability — receive a copy of your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — unsubscribe from marketing emails at any time via the unsubscribe link in any email we send

To exercise any of these rights, contact our Grievance Officer (see Section 12). We will respond within 30 days.

We use the following third-party services. Each processes data under their own privacy policy:

• Razorpay (razorpay.com) — payment processing. Razorpay is PCI-DSS compliant. They receive your payment method details, billing amount, and contact information at checkout. We receive only the payment confirmation and transaction ID.
• Firebase / Google (firebase.google.com) — authentication and identity management. Google processes your email and name when you sign in.
• Supabase (supabase.com) — database and backend. Stores your account profile, orders, download records, and community content.
• OpenAI(openai.com) — AI image analysis for the Studio feature. When you use AI Studio, a resized thumbnail of your uploaded image is sent to OpenAI's API. OpenAI does not use API-submitted images to train their models, per their API usage policy. Images are not retained on our servers after processing.
• Vercel (vercel.com) — website hosting and edge network. Vercel may log request metadata (IP address, user agent, URL) for security and operational purposes.
• YouTube / Google(youtube.com) — embedded tutorial and promotional videos. If you watch an embedded YouTube video on our site, Google may set cookies subject to Google's Privacy Policy.

The AI Studio feature sends a resized thumbnail of your uploaded image to OpenAI for colour analysis. This is the only circumstance in which image data leaves our servers in a way that includes your content. Specifically:

• Your image is resized to a maximum of 512 pixels and converted to JPEG before transmission to OpenAI
• The thumbnail is transmitted over an encrypted HTTPS connection
• Neither the original nor the resized image is stored on our servers after processing is complete
• We do not use your images for any purpose other than generating the colour grading recommendations you requested
• We do not submit your images to OpenAI for model training

By using AI Studio, you consent to this processing. Do not upload images containing sensitive personal information, images of identifiable individuals who have not consented, or images you do not have the right to upload.

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account or submitted personal data to us, please contact our Grievance Officer at creatorpxl@gmail.com and we will promptly investigate and delete the data.

Your data may be stored and processed outside India, including in the United States and the European Union, by our third-party service providers (Supabase, Firebase, Vercel, OpenAI). By using pxlcreator.space, you consent to your data being transferred to and processed in these locations. Our service providers maintain appropriate data protection standards for cross-border transfers.

In accordance with the Information Technology Act, 2000, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the details of our Grievance Officer are as follows:

Name: Swayam Oberoi
Designation: Grievance Officer
Email: creatorpxl@gmail.com
Address: Mumbai, Maharashtra, India
Response time: Within 7 business days of receipt of a complaint

You may contact the Grievance Officer to raise any complaint or concern about the processing of your personal data, to exercise your data rights under Section 7, or to report content on our platform that you believe violates applicable law or our policies.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. For material changes that affect how we use your personal data, we will notify active account holders via email before the changes take effect. Your continued use of pxlcreator.space after the effective date of any update constitutes your acceptance of the revised Policy.