Effective date: September 8, 2026
This policy covers AiPix at aipixbox.com, including its AI canvas, chat, image and video tools, assets, API and CLI. AiPix is currently an independently operated personal website. The individual operator provides this service under the AiPix name; AiPix is a brand name, not a representation that a company has been incorporated. Contact [email protected] for privacy questions, the identity of the responsible operator, or a request concerning your data. The payment seller is identified separately at checkout and on your receipt.
We process account identifiers, email and profile information supplied through Clerk; prompts, conversations, reference images and videos, generated outputs and canvas documents; model settings, task status, usage and error records; and Credits, order and payment confirmation records. Our payment provider collects payment credentials directly. AiPix does not store complete card numbers or card security codes.
When you contact support, we process the information you provide. Technical information may include IP addresses, browser and device information, language, request identifiers and security logs. Upload only material you have permission to use, including permission from identifiable people. Avoid unnecessary identity documents, sensitive personal information or private information about others.
We handle personal data in accordance with applicable Singapore data protection law, including the Personal Data Protection Act 2012 where it applies, together with any mandatory protections applicable to you.
We use this information to authenticate users, execute requested AI operations, save and reopen work, deliver downloads, manage Credits and purchases, prevent abuse, resolve failures, provide support and comply with legal obligations. Depending on the applicable law, the legal basis is performance of our agreement, legitimate interests in operating and securing the service, legal obligations, or consent when required. You may withdraw consent without affecting earlier lawful processing.
Clerk supports authentication. Creem supports checkout and payment processing. Selected AI requests are routed through NEW-API and our provider adapters to the model provider, which may include Ai6700, 302AI and their underlying model services. These services receive the prompt and reference material needed for the operation. Storage and CDN providers deliver files. Google Analytics measures site and product activity.
Some free image operations run in your browser using downloaded models. This does not mean the entire workflow is offline: accounts, operation records, saved inputs and outputs may still use AiPix servers. AI generation may require a publicly downloadable reference URL. Such a URL can be accessed by someone who obtains it; avoid sharing private asset links.
We do not use your private prompts or uploads to train our own general-purpose AI models. Third-party model providers apply their own processing and retention terms; we do not promise that every provider offers identical retention or training restrictions. Contact us before submitting material subject to special confidentiality requirements.
Clerk uses authentication cookies. We store language and canvas preferences, local recovery drafts and downloaded image models in browser storage or IndexedDB. Clearing browser data can remove unsaved drafts and cached models.
Google Analytics records page activity and limited events such as generation submission, completion, download and purchase confirmation. We do not intentionally include prompt text, uploaded file URLs, email addresses or names in analytics event properties. Browser privacy controls and blocking tools may limit analytics; essential authentication and storage remain necessary for the relevant features. Where consent is legally required, nonessential processing requires that consent.
Saved canvas documents, generated assets and conversations remain available until you delete or archive them or request account deletion, subject to operational and legal retention needs. Archiving removes an item from normal access but does not promise immediate physical erasure from storage, logs or backups.
Temporary generation references and chat attachments are normally assigned a seven-day retention period. Actual cleanup depends on scheduled processing, active references and the deployed retention configuration. This is not a guarantee that every uploaded file is physically erased after seven days.
Transaction, Credits and necessary security records may be retained for accounting, dispute resolution, fraud prevention and legal obligations. Agent and task audit records may also remain after a conversation is archived. Backup copies expire through backup rotation. Contact us for deletion or a retention explanation for your account; we will identify any information that must be retained.
We disclose information to providers as needed to deliver the service, to advisers or authorities when legally required, to protect users and the service, or in a corporate transaction with appropriate protections. We do not sell your uploaded creative material as a dataset.
Providers and infrastructure may process information outside your country. Applicable safeguards may include contractual protections and other lawful transfer mechanisms. Your local rights are not removed by an international transfer. Contact us for information about a particular provider or transfer.
Depending on your location, you may request access, correction, export, deletion, restriction or objection, and withdraw consent. You may also complain to your local data protection authority and exercise applicable rights to opt out of sale, sharing or targeted advertising. Send requests to [email protected]; we may verify account ownership and will respond within applicable legal deadlines. We do not discriminate against you for exercising these rights.
The service is not directed to children under 13 or a higher local minimum age. Users below the legal age of majority may use it only where local law permits and with a parent or guardian's authorization. Contact us if a child has provided information without the necessary permission.
We use access controls, authentication and operational safeguards, but no online system guarantees absolute security. Protect your account and API tokens, keep your own copies of important work, and report suspected unauthorized access promptly.
We publish the current policy and effective date on this page. Material changes will be communicated through the service or another appropriate channel where required. Continued use does not replace consent where the law requires fresh consent.