1. Who is the controller and how to contact
The data controller of this site is AI Solutions Apps S.L., with registered address at C/ creueta, 20, 08870 Sitges, Barcelona, España.
You can contact the controller by emailing support@imgpix.io.
2. What data is collected?
Data is collected automatically only through strictly necessary cookies (payments with Stripe and security with Cloudflare). No analytics, advertising or third-party tracking cookies are used. Service usage measurement is performed with self-hosted Plausible Analytics, an anonymous tool with no cookies and no collection of identifiable personal data.
In addition, during the connection we collect the IP from which you connect, the type and characteristics of the device, the OS version, browser, language, date, country, request time, source and destination URLs, and the mobile network used, among others.
Voluntarily, the user provides data such as name and surname, email or banking information to contact us, register on the service or subscribe. Additionally, the user uploads images to the service to be processed — those images are stored encrypted at the infrastructure provider's object storage, are only accessible from the user's account and are deleted in accordance with the retention policy stated in the Privacy Policy.
3. What is the collected data used for?
imgpix uses the collected data, among other purposes, to:
- Manage and update the service.
- Respond to user requests.
- Send transactional emails (welcome after subscribing, password reset, subscription cancellation). We do not send newsletters without explicit consent.
- Manage account registration and maintenance.
- Process the images uploaded by the user with the selected tools (compression, resize, crop, conversion, upscale, watermarks, etc.) and deliver the result.
- Process payments and issue the corresponding invoices.
- Maintain the security of the service and investigate illegal activities.
- Enforce the terms and conditions.
- Cooperate with law enforcement in their investigations.
4. How long is the data retained?
- Aggregated data: retained without a deletion period.
- Customer data: for the minimum time necessary, up to:
- 5 years (art. 1964 of the Spanish Civil Code — personal actions without a special period).
- 6 years (art. 30 of the Spanish Commercial Code — accounting books and invoices).
- User data (without a contract): maximum 12 months to attend to their requests.
- Images uploaded to the Service:
- Guest user: 24 hours from upload.
- Trial subscription: 24 hours from upload.
- Active subscription: for as long as the subscription is in force.
- After cancelling: the remaining billing period plus a 24-hour grace.
5. What are your rights as a user?
- Right of access: the data subject has the right to obtain confirmation from the controller as to whether or not personal data concerning them is being processed.
- Right of rectification: the data subject has the right to obtain without undue delay the rectification of inaccurate personal data concerning them. They also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
- Right of erasure: the data subject has the right to obtain without undue delay the erasure of personal data concerning them.
- Right to restriction of processing: the data subject may obtain restriction of processing in two main cases: 1) when they contest the accuracy of their data, during the period allowing the controller to verify it; and 2) when they have objected to processing based on legitimate interest or a task carried out in the public interest, while it is verified whether the legitimate grounds of the controller override.
- Right to data portability: the data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format, and to transmit it to another controller. This includes the right to have the data transmitted directly between controllers where technically feasible.
- Right to object: the data subject may object to the processing of their personal data when based on legitimate interest or a task carried out in the public interest.
6. How to exercise your rights
You can exercise your rights at any time by emailing support@imgpix.io or by post to C/ creueta, 20, 08870 Sitges, Barcelona, España.
In both cases you must identify yourself with name and surname, and a copy of your ID document if deemed necessary.
Additionally, if you believe there is a problem with the way imgpix is handling your data, you can file your complaints with the competent supervisory authority — in the case of Spain, the Agencia Española de Protección de Datos.
7. Are security measures adopted?
imgpix adopts all the technical and organisational measures necessary to protect the security and integrity of the personal and non-personal information collected, against both unauthorised access and accidental alteration, loss or destruction.
In any case, absolute security of the collected information cannot be guaranteed, so we ask the user to cooperate and apply common sense to the information shared. Be aware that, even after deletion, personal and non-personal information may remain visible in caches or copies made by other users.
8. Are there data transfers or international transfers?
We do not carry out international transfers of personal data for our own purposes. Service analytics is performed entirely on imgpix servers within the EEA via self-hosted Plausible Analytics, so there is no transfer to third parties for analytics.
There are third parties that manage parts of the Service and to whom we require compliance with our Privacy Policy to the extent applicable:
- Stripe (payment gateway): may process data under their own contractual terms and with the safeguards provided for international transfers under GDPR where applicable.
- Cloudflare (CDN, security and R2 object storage for images): processes traffic and stores objects for strictly technical and security purposes. R2 is hosted on Cloudflare infrastructure with European presence.
- Resend (transactional email delivery): handles welcome, password reset and cancellation emails. No marketing, only transactional.
- AI inference provider (upscale and watermark removal): processes images solely to produce the requested result, without retaining them beyond what is strictly necessary or using them for training.
We may also share data if we reasonably consider it necessary to comply with a law, legal process or legitimate interest. In any case, only the strictly required information will be provided.
9. Contact
For any query about this document or the exercise of your rights:
- Email: support@imgpix.io
- Address: C/ creueta, 20, 08870 Sitges, Barcelona, España