GDPR Compliance

Your data protection rights under the General Data Protection Regulation

Last updated: December 10, 2025

Our Commitment to GDPR

Pixelift is committed to protecting your personal data and respecting your privacy rights. We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You can request a copy of all personal data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete data.

Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data in certain circumstances.

Right to Restrict Processing

You can request that we limit how we use your data.

Right to Data Portability

You can request your data in a structured, commonly used format.

Right to Object

You can object to certain types of processing, including direct marketing.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing.

Data We Collect

We collect and process the following types of personal data:

  • Account Information: Name, email address, profile picture (when you sign up)
  • Images: Photos you upload for processing (automatically deleted after 24 hours)
  • Usage Data: Number of images processed, features used, timestamps
  • Technical Data: IP address, browser type, device information, cookies
  • Payment Information: Processed securely by Stripe (we don't store card details)

How We Use Your Data

We process your personal data for the following purposes:

To provide and maintain our image upscaling service
To process your images using AI technology
To manage your account and subscriptions
To communicate with you about service updates
To improve our services and develop new features
To ensure security and prevent fraud
To comply with legal obligations

Legal Basis for Processing

We process your data based on:

Contract Performance

Processing necessary to provide our service to you

Legitimate Interest

Improving our service and preventing fraud

Consent

For marketing communications (you can opt out anytime)

Legal Obligation

Compliance with applicable laws and regulations

Data Retention

  • Uploaded Images: Automatically deleted after 24 hours
  • Account Data: Retained while your account is active
  • Usage Logs: Retained for up to 12 months
  • After Account Deletion: All personal data deleted within 30 days (except where legally required to retain)

Data Security

We implement appropriate technical and organizational measures to protect your data:

πŸ”’

Encryption

All data encrypted in transit (HTTPS/TLS)

πŸ›‘οΈ

Secure Storage

Data stored in secure, certified data centers

πŸ”

Access Control

Strict access controls and authentication

πŸ“Š

Regular Audits

Security audits and vulnerability assessments

Data Sharing

We do not sell your personal data. We may share data with:

Service Providers: Replicate (AI processing), Stripe (payments), hosting providers
Legal Requirements: When required by law or to protect our rights

International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us:

Contact Our Data Protection Officer

Email: privacy@pixelift.pl

Response Time: We will respond within 30 days

You also have the right to lodge a complaint with your local data protection authority.

Policy Updates

We may update this GDPR compliance page from time to time. We will notify you of any material changes by email or through a prominent notice on our website. Your continued use of our service after such changes constitutes acceptance of the updated policy.

Related Policies