Privacy Policy
Version 1 · effective from 13 August 2026
Privacy Policy
Effective from: 2026-08-13 · Version: 1
1. Who is responsible for your data
PixLab Studio (PixLab for short) is a brand of Printerpix. The controller of your personal data is:
PRINTERPIX UK LTD 8th Floor Capital House, 25 Chapel Street, London, England, NW1 5DH, United Kingdom Registered in England & Wales, company number 09509388. VAT number GB215663611.
Data protection enquiries: [email protected]
2. What we collect
Your account — name, email address, and date of birth, which we use only to confirm you are 18 or over. If we need to arrange a refund we cannot process automatically, we will also ask for a phone number, used only for that.
What you upload and create — the photographs you upload, the descriptions you write, and the images the Service produces.
How you use the Service — which features you used, when, how many tokens were spent, and whether a generation succeeded.
Technical information — your IP address, browser and device information, and the signals used by our bot-protection tool to tell people apart from automated abuse.
Purchases — what you bought, when, and for how much. We do not see or store your card details; those go directly to our payment providers.
3. Why we use it, and our legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Create your account, confirm your age | To provide the Service and meet age rules | Performance of a contract; legal obligation |
| Produce the images you ask for | It is what you asked us to do | Performance of a contract |
| Take payment, handle refunds | To complete your purchase | Performance of a contract; legal obligation |
| Provide support | To answer you | Performance of a contract |
| Prevent fraud and abuse of free and bonus tokens | To stop repeat abuse of refunds and free allocations | Legitimate interests |
| Bot protection | To keep the Service available and prevent automated abuse | Consent |
| Keep records of sales | Tax and accounting law | Legal obligation |
4. Who we share it with
Companies acting on our instructions, who may only use your data to provide their service to us:
| Who | What they receive | Where |
|---|---|---|
| Supabase | Account details, your uploaded and generated images, usage records | United Kingdom |
| Replicate | The images you upload and the descriptions you write, to run the AI models | United States |
| Black Forest Labs, Google, Ideogram, Bria | The same, as the providers of the models Replicate runs | Varies |
| Klaviyo | Your email address, to send receipts and service messages | United States |
| Uploadcare | Images you choose to send for printing | United States |
Companies who decide for themselves how they use your data, and who have their own privacy policies:
| Who | What they receive | Where |
|---|---|---|
| Braintree (PayPal) | Payment details | United States / European Union |
| Razorpay | Payment details, for customers in India | India |
| Telr | Payment details, for customers in the United Arab Emirates | United Arab Emirates |
| Printerpix | Your account identity, since PixLab uses your Printerpix login | United Kingdom |
| Technical signals from your browser, for bot protection | United States |
We also use a currency-rate service to convert prices. It receives no personal data.
Some of these are in the United States. We rely on the International Data Transfer Addendum for those transfers.
5. How long we keep it
| What | How long |
|---|---|
| Account details | While your account exists |
| Date of birth | While your account exists; used only for age checking |
| Your images | Until you delete them, or your account is deleted |
| Usage records | 24 months, then anonymised |
| Sales records | As long as tax and accounting law requires |
| Phone number given for a refund | Until the refund is completed |
Sales records survive account deletion because tax law requires it. They contain your email address for that reason, and — as set out in §3 — we also use them to prevent repeat abuse of refunds and bonus tokens.
6. Facial recognition — what we do not do
We do not perform facial recognition, and we do not create or store a faceprint or any measurement of anyone's face.
Your photographs may contain faces, and our AI models edit them as images. But nothing in PixLab extracts the geometry of a face — the measurements that could be used to identify a person across different pictures. We have checked our own systems and the models we use, and none of them returns that kind of data to us. We have nowhere to store it and no use for it.
Photographs of other people. The pictures you upload often show people other than you. You must have their agreement before uploading them — see Terms §8. Anyone appearing in an image, whether or not they are a PixLab customer, may contact us to ask what we hold about them, or to ask us to delete it, using the details in §1.
7. AI-generated images and how they are marked
Images created with PixLab carry embedded information recording that they were generated by AI. Some of our AI providers add this themselves; where they do not, we add it.
8. Your rights
You have the right to ask us for a copy of your personal data, to correct it, to delete it, to receive it in a portable form, to object to how we use it, and to withdraw any consent you have given.
To exercise any of these, contact [email protected].
If you are unhappy with how we have handled your personal data, you can complain to the Information Commissioner's Office (ICO).
9. Children
PixLab is for people aged 18 and over. We ask for date of birth at sign-up and do not create accounts below that age.