1. Data controller and description
1.1. Controller
The controller of the data collected on this site is AI Solutions Apps S.L. (hereinafter "imgpix" or "the Service"), with registered address at C/ creueta, 20, 08870 Sitges, Barcelona, España.
- Tax ID: ESB22852297
- Contact email: support@imgpix.io
1.2. Description
Acceptance of this Privacy Policy is a requirement to use the website and subscribe to the Service. This document governs the collection, processing and use of personal and non-personal information by imgpix from the date indicated in the header.
imgpix complies with local and European data protection law and its implementing regulations.
2. Information collected
You can browse the site without providing any information. However, to register, subscribe to a plan or download processed results, we need some personal data.
Information is collected through three channels:
- Automatically.
- Voluntarily provided by the user.
- Provided by third parties.
2.1. Automatic collection
Includes:
- Strictly necessary cookies for the provision of the service (payments and protection against automated traffic). See Cookies Policy.
- Connection IP address, device type and characteristics, OS version, browser, language, date, country, time of request, source and destination URLs, mobile network used, among others.
- Service usage data and any errors detected while using it.
To measure aggregate use of the Service, imgpix uses Plausible Analytics, a web analytics tool fully self-hosted on our own servers. Plausible does not install cookies, does not collect identifiable personal data, does not use persistent identifiers across visits, and does not transfer data to third parties or to countries outside the EEA. Only aggregated, anonymous metrics are recorded (page views, referer, device type, country at city level) that allow imgpix to understand overall service usage without identifying individual users.
Legal basis for this analytics: the controller's legitimate interest in measuring service use to keep it operational and improve it, with minimal impact on user rights given the anonymous and aggregated nature of the processing.
2.2. Voluntarily provided information
All marked fields are mandatory. Includes:
- Data required to complete registration: name and surname, address, email, among others.
- Information required to contract the service, such as your email and card details (which never go through our servers — they are handled by the payment processor).
- Images you upload to the service to be processed (compression, resize, crop, conversion, upscale, watermarks, etc.). Images are stored encrypted at the object storage of our infrastructure provider and are only accessible from your account. See section 6 for the retention policy.
- Data provided through contact channels (e.g. your name and email when writing to us).
2.3. Information provided by third parties
Includes that provided by payment systems or card processors, such as the time of purchase or amount paid.
3. Rights and purposes
Filling out forms is voluntary. However, if you do not fill in mandatory fields (usually marked with an asterisk), some Service functions will be limited.
The personal data provided is incorporated into imgpix's Record of Processing Activities in order to attend to your requests, provide the contracted service and keep you informed about matters related to the company's activity.
You can exercise at any time the rights of access, rectification, erasure, restriction of processing, objection and portability of your personal data by emailing support@imgpix.io or by post to C/ creueta, 20, 08870 Sitges, Barcelona, España. In both cases you must identify yourself with name and surname, and a copy of your ID document if deemed necessary.
If you have given consent for a specific purpose, you may withdraw it at any time without affecting the lawfulness of prior processing.
If you believe there is a problem with the way imgpix is processing your data, you can file a complaint with the competent data protection authority; in the case of Spain, the Agencia Española de Protección de Datos.
4. Age and accuracy
By using the Service you declare that you are of legal age and have the legal capacity required to bind yourself by this contract, as well as that you have fully understood these terms.
You also declare that all information provided during registration and use of the Service is true, complete and accurate.
5. Use of data
imgpix will use the collected data to:
- Manage and update the Service (legal basis: legitimate interest in keeping the Service operational and up to date).
- Attend to your queries (legal basis: legitimate interest in attending to user requirements and questions).
- Process payments (legal basis: contractual relationship).
- Provide the contracted service — process the images you upload with the selected tool and deliver the result (legal basis: contractual relationship).
- Maintain the security of the Service, investigate illegal activities, enforce these terms and cooperate with law enforcement in their investigations (legal basis: legitimate interest).
imgpix does not make automated decisions with legal effects on the user, although it may create basic profiles for commercial purposes and offer personalisation (legal basis: legitimate interest).
Usage data may be aggregated and anonymised to share statistics with third parties without enabling personal identification of the user.
5.1. AI processing (upscale, watermark removal)
Two of the tools — AI upscale and AI watermark removal — use artificial intelligence models. To process them, the user's image is sent encrypted to the inference provider that runs the model, solely to produce the requested result. The provider does not use those images to train its models nor retain them beyond what is strictly necessary to return the result. See section 7 for the list of providers.
5.2. Emails and contact forms
The site uses SSL encryption so that the sending of personal data through standard forms is secure. The data received is processed automatically and incorporated into the relevant record of processing activities.
We collect your IP to verify the origin of the message, offer suitable recommendations (for example, presenting information in the correct language) and detect possible incidents (for example, cyberattacks), as well as data relating to your internet service provider (ISP).
About payment methods: payments are made by credit or debit card. Neither imgpix nor its staff has access at any time to the banking data (e.g. card number) that the user provides to payment providers.
6. Retention of data
Below is how long the processed data is retained:
- Aggregated data: retained without a deletion period.
- Customer data: for the minimum time necessary, up to:
- 5 years (art. 1964 of the Spanish Civil Code — personal actions without a special period).
- 6 years (art. 30 of the Spanish Commercial Code — accounting books and invoices).
- User data (without a contract): maximum 12 months, to attend to their requests.
- Images uploaded to the Service:
- Guest user (not registered): 24 hours from upload.
- Trial subscription: 24 hours from upload.
- Active subscription: for as long as the subscription is in force.
- After cancelling: the remaining billing period plus an additional 24 hours grace.
The user is responsible for downloading and storing locally any images they wish to keep before the indicated deadlines.
7. Communication of data to third parties
There are third parties that manage parts of the Service. imgpix requires them to comply with this Policy as applicable, in addition to having their own. However, imgpix is not liable for compliance by those third parties.
Under certain circumstances, imgpix may share, use or retain the information collected with third parties:
- To provide the Service: providers performing functions on our behalf, such as payments (Stripe), web hosting (Cloudflare), object storage (Cloudflare R2), transactional email (Resend), and AI inference for upscale and watermark removal. These providers access strictly the information necessary for their function and may not use it for other purposes. Images sent to the AI inference provider are not used to train models.
- To cooperate with competent authorities: if we reasonably consider it necessary to comply with a law, legal process or legitimate interest. In any case, we will only provide the strictly required information.
8. Security measures
imgpix adopts all the technical and organisational measures necessary to protect the security and integrity of the personal and non-personal information collected against unauthorised access and accidental alteration, loss or destruction.
Despite this, absolute security cannot be guaranteed. We ask you to cooperate and apply common sense when sharing information. Be aware that, even after deletion, information may remain visible in caches or in copies made by other users.
9. Changes to this Policy
We may update this Policy in the future. We will notify you via the email you have provided and/or with a prominent notice on the Site.
10. Contact
For any query relating to this Policy:
- Email: support@imgpix.io
- Address: C/ creueta, 20, 08870 Sitges, Barcelona, España